Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/76fd5146-0a4e-316b-9c51-a775978d68a4.roa
File:                     76fd5146-0a4e-316b-9c51-a775978d68a4.roa (raw, json)
Hash identifier:          dk6OEei+EfV9kZVJiOtzvhRs+O7hDJwetcUd+uEiMPY=
Subject key identifier:   17:A5:6B:6C:95:97:B6:66:B1:17:5B:E4:F9:A4:4A:47:18:1C:C0:1D
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584B1806DE83AFB644831E9D4280
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/76fd5146-0a4e-316b-9c51-a775978d68a4.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     11290
IP address blocks:        66.171.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:de:83:af:b6:44:83:1e:9d:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=2ea710c0-86eb-477c-bdab-02e17cc2f24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cb:7f:07:24:aa:59:24:fe:89:75:67:a6:b8:
                    75:a2:c2:e4:99:dc:ce:29:40:b2:1f:95:9f:cb:ed:
                    0e:aa:1f:26:fd:0a:3e:02:69:4b:67:4b:2a:2a:bf:
                    29:ea:02:65:5a:26:02:1c:f2:41:11:89:4c:8e:99:
                    0d:04:82:ef:b0:ed:51:96:66:fd:39:50:a0:ed:36:
                    f1:46:1c:08:6a:11:98:96:49:5c:c0:20:58:2c:cf:
                    30:36:3b:33:c5:13:33:b4:c8:ff:f7:f5:e9:d6:8a:
                    38:5e:cc:ce:6a:5e:c1:36:70:3b:72:52:c5:bd:77:
                    ca:68:44:76:04:be:56:bb:e7:01:34:5f:7f:84:ad:
                    1d:43:70:82:84:b8:33:c8:ea:83:55:1d:c0:ab:b0:
                    04:d6:69:e9:f4:cf:e1:ed:e0:24:9e:d5:04:1e:b2:
                    8f:d1:44:90:6e:bb:ed:d9:d4:b4:e0:5e:31:77:10:
                    e6:5a:db:66:95:d8:27:6c:a7:de:9d:7b:11:a3:96:
                    b3:db:6d:eb:a7:10:9f:76:43:8e:e6:e9:8a:c2:fb:
                    71:54:b7:40:b5:35:09:da:5b:c1:09:e7:ec:87:67:
                    e9:23:42:dd:87:5a:bf:ad:4c:31:be:7d:95:61:5e:
                    1c:68:e0:19:b2:f4:aa:92:9f:e2:7f:c7:48:3a:27:
                    0c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A5:6B:6C:95:97:B6:66:B1:17:5B:E4:F9:A4:4A:47:18:1C:C0:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/76fd5146-0a4e-316b-9c51-a775978d68a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.171.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:03:c0:1f:fa:3e:1b:55:b6:89:84:40:47:d2:3e:ba:4c:7f:
         35:98:e0:ea:7b:1d:b9:ff:51:a8:80:e1:34:a5:40:5b:5b:94:
         8a:db:1d:de:38:ee:d7:68:5f:1a:1b:20:2f:d1:bd:f1:1b:b3:
         e6:92:41:f0:cd:1a:63:ad:07:3f:80:bf:df:a2:e0:b1:13:e5:
         77:c1:1a:60:f8:6e:22:ba:bf:e6:9d:d5:00:bc:e5:5a:97:75:
         76:27:8f:bf:f2:f2:a3:92:d0:80:80:f4:77:5e:8d:4e:c9:31:
         a1:b3:a6:b5:84:c2:6b:a0:c5:03:22:4e:2a:31:e9:6e:90:fa:
         06:54:e9:25:b5:7c:9b:db:2e:15:33:f1:0a:d2:3d:e8:8e:eb:
         d1:59:1f:3e:ee:9a:2d:b7:e7:bd:5c:98:e3:26:0b:ce:4c:bc:
         f7:c9:56:f8:e7:b4:dd:36:fc:5c:2f:62:38:e8:2e:a4:91:bf:
         51:ef:94:d1:f9:f9:36:24:25:b0:42:1e:9a:52:d3:fa:82:2e:
         f1:91:cf:8d:89:4d:54:e9:0c:c2:1b:5e:fa:14:c0:40:f3:b7:
         e0:78:b6:d1:d6:62:af:38:ec:31:df:38:ac:11:c6:1a:31:6a:
         74:50:ef:3b:06:e0:da:f9:8a:9e:da:83:38:9b:39:32:0b:88:
         db:6c:71:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 14:20:42 2025 by rpki-client