Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/676d52c3-3c59-3616-8a3a-27cd91d11570.roa
File:                     676d52c3-3c59-3616-8a3a-27cd91d11570.roa (raw, json)
Hash identifier:          t/2fMsqCefTVl1YbqutbUmhBTxrciQcSW8XL9tizLeI=
Subject key identifier:   68:78:02:10:73:1C:64:E6:54:9B:30:B0:63:48:40:E2:FF:BC:4B:FF
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584B1806DF346D31B240E3370500
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/676d52c3-3c59-3616-8a3a-27cd91d11570.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     11290
IP address blocks:        24.226.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:df:34:6d:31:b2:40:e3:37:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=35daac26-c839-4630-917a-6b30ab3bf316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:f4:3f:73:8e:10:6a:1c:d3:fc:5d:f4:52:
                    10:8e:b4:49:d0:f8:5c:38:22:a4:5f:c1:28:27:da:
                    b9:01:05:37:9b:cf:c2:02:52:ab:6a:48:bf:69:8b:
                    ef:dc:91:78:19:74:95:99:2c:a1:f9:76:c6:76:1d:
                    39:a8:23:5d:13:fe:55:a7:28:dc:8e:43:4b:51:6e:
                    db:96:c6:b8:b3:60:d9:40:2f:db:a2:a5:e4:ff:e6:
                    e6:e3:50:3f:4e:d4:e9:f8:43:e8:8a:0b:27:a9:3c:
                    81:bf:39:25:a0:c3:d0:83:90:67:b8:2d:fa:4b:69:
                    4c:37:e5:50:b9:89:6a:7d:83:64:bf:ba:57:ed:d1:
                    fd:a4:21:43:54:98:db:93:c6:b7:12:49:27:bf:3e:
                    b5:6e:a9:61:a8:ca:0c:50:57:cc:b3:cd:e0:73:8f:
                    df:15:07:98:ad:15:ad:24:0d:eb:41:1c:0f:80:c9:
                    57:09:31:28:87:a8:43:96:5d:98:48:c9:a7:a7:12:
                    e9:49:9b:0a:97:f5:7d:fd:06:a0:e8:d3:8e:9a:61:
                    ad:ca:90:68:14:08:42:5c:c7:73:c2:fc:26:41:56:
                    d1:82:6f:49:2a:cf:38:8d:84:38:fd:8f:5a:75:67:
                    e4:3c:ca:b5:5e:11:c4:4a:90:ec:b0:d7:67:3c:c2:
                    97:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:78:02:10:73:1C:64:E6:54:9B:30:B0:63:48:40:E2:FF:BC:4B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/676d52c3-3c59-3616-8a3a-27cd91d11570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.226.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:34:09:64:43:7c:ea:17:57:5d:17:de:51:58:f8:bd:15:06:
         db:3f:ef:ba:9c:58:6f:bc:11:d4:b4:76:a5:5f:96:25:3f:da:
         06:e0:27:3d:4e:70:a8:fc:ea:39:4b:ac:bf:e0:76:99:dd:6e:
         c2:a2:b9:a9:18:e5:9c:98:18:15:41:97:8a:d5:b6:8d:0e:7e:
         70:9b:5f:f1:95:bc:f1:2a:f1:62:b1:b3:ec:95:84:2e:13:f9:
         16:90:b9:75:dd:9b:50:2d:23:30:53:17:70:98:9c:bd:cb:86:
         6e:3f:15:de:bd:9e:83:e1:93:c9:23:27:00:2f:8e:b7:09:04:
         a9:b5:e0:24:3f:f1:d9:6d:1b:81:37:da:62:95:c7:7f:22:26:
         97:46:f9:a3:02:c1:72:2e:4a:98:bd:a0:38:fe:18:ea:dd:f5:
         0c:96:86:2f:32:ba:63:14:cd:29:0f:18:66:3f:ff:f3:e6:90:
         dc:06:bf:7f:0a:39:80:f7:f4:9e:eb:53:cb:05:ce:5f:1e:81:
         cb:fa:76:68:ea:a0:e6:b5:ae:16:15:87:97:24:eb:4f:9b:12:
         35:7a:ea:30:f1:69:3d:b8:ef:de:20:cc:26:39:db:95:06:c5:
         4e:2a:b4:41:b0:0d:30:b9:c0:d5:a7:86:2b:65:6a:26:b4:ef:
         fc:87:fc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 14:28:59 2025 by rpki-client