Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2f1fcf9d-d140-3eef-a96f-794c153824e4.roa
File:                     2f1fcf9d-d140-3eef-a96f-794c153824e4.roa (raw, json)
Hash identifier:          4gIgaXVByH/6aIJkCBHXyVfBW8+H/ZibQKHyhRVeczg=
Subject key identifier:   2B:5D:A7:6F:B4:9A:D8:7E:72:D3:AD:4B:0D:68:ED:2D:7B:DF:32:48
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584B13D6C101725EB065DA427A80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2f1fcf9d-d140-3eef-a96f-794c153824e4.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     11290
IP address blocks:        184.75.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c1:01:72:5e:b0:65:da:42:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=4a69ce91-a41f-4f8a-b482-a8a7a02a288b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:45:d4:b3:c4:ee:ac:1c:84:c9:00:1e:16:f3:
                    44:ad:1d:25:d6:57:bf:fa:6e:09:7b:b8:4c:12:5f:
                    0e:f6:47:d8:62:82:3a:d0:65:20:3d:27:d3:ef:cd:
                    80:ea:33:ee:7b:e2:c6:32:ca:40:ac:14:c0:17:a3:
                    be:b8:86:43:38:17:06:41:ac:5b:a9:f7:d5:11:17:
                    ef:8e:96:2d:71:e9:ec:a6:c3:b2:e5:7b:18:0e:c1:
                    7e:08:37:ee:93:11:bb:98:a4:03:6a:dd:db:98:d9:
                    5e:e4:11:a8:02:af:0c:71:6a:b4:ea:8a:d3:da:cb:
                    03:58:a4:2d:eb:01:0c:05:dc:ac:8c:98:a2:1c:11:
                    61:4d:c3:91:e9:18:98:9e:83:39:87:a3:a8:46:13:
                    33:50:99:cd:56:8c:6c:81:20:cf:1e:fe:19:cd:96:
                    49:fd:71:5b:43:77:b0:77:7b:fb:ad:3b:b8:aa:5e:
                    ba:f5:d8:80:44:a7:1c:08:f0:80:ed:15:d2:01:d7:
                    6e:4f:91:14:5b:42:51:20:f4:57:fc:fe:08:6b:30:
                    7d:36:32:2e:ad:9f:29:14:6d:93:8b:2f:d9:75:a2:
                    e0:dc:9a:fa:a4:b0:c8:ca:ff:8d:d9:fe:15:f5:79:
                    34:03:1c:cd:94:38:64:d3:64:24:40:00:fb:e1:8d:
                    e3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5D:A7:6F:B4:9A:D8:7E:72:D3:AD:4B:0D:68:ED:2D:7B:DF:32:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/2f1fcf9d-d140-3eef-a96f-794c153824e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.75.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:56:9c:88:8a:4f:87:41:af:3d:9c:f6:c7:cc:e9:50:70:81:
         78:b5:02:19:23:bb:a0:23:1a:b0:e0:80:44:89:44:5f:6b:05:
         4e:83:e5:41:de:bb:a3:d0:62:df:ef:11:83:4f:2f:81:cf:fe:
         d9:67:49:ac:84:d4:fa:4c:0e:ba:67:fe:68:38:b2:e6:c6:59:
         32:db:ef:a2:f4:a3:d5:03:a5:64:b7:ce:34:a9:67:c2:d2:bc:
         1a:c3:bf:9a:53:4b:c6:ba:53:20:44:80:c0:50:af:af:ba:75:
         bd:8f:92:15:da:2f:48:be:6f:0c:66:50:cb:0f:54:bc:1f:b4:
         14:dc:9d:9a:a1:58:a6:52:c8:1e:97:40:de:1f:69:c2:b2:67:
         7f:b8:ee:a1:aa:b0:c0:1e:73:5c:2d:61:c4:6a:6e:f6:51:f1:
         f8:15:fe:bb:69:6a:2b:6d:d7:6b:d8:ab:8c:29:74:b0:75:2e:
         45:69:f9:b2:1e:6d:7a:64:b8:b4:88:a7:10:9d:f4:13:b5:65:
         5c:e2:54:3d:d9:9e:f9:f9:ae:ca:00:06:db:0d:fa:78:34:7c:
         2b:3c:12:19:47:40:d2:f0:44:04:7e:3d:ea:87:06:96:cf:f5:
         1b:85:b6:ab:fa:eb:46:42:ec:5f:83:c4:8f:74:c0:1f:53:ac:
         2a:d0:ad:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 14:27:46 2025 by rpki-client