Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9888496b-db63-3363-bfab-e35ab2a737a4.roa
File:                     9888496b-db63-3363-bfab-e35ab2a737a4.roa (raw, json)
Hash identifier:          AAi2dLo9SfDPCfEww2p6AdXdnUkEn1ST5xDfgh1bu4c=
Subject key identifier:   09:33:D3:1C:9A:66:A2:2B:3F:1C:F0:AF:DE:6F:A7:B0:2E:17:60:75
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584B1806DF4872FA326853C5A130
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9888496b-db63-3363-bfab-e35ab2a737a4.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     11290
IP address blocks:        24.204.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:df:48:72:fa:32:68:53:c5:a1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=cc3313bf-2c12-4c94-a8d3-7c36eac45364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:29:07:78:45:4a:f3:a4:75:73:a2:79:ff:27:
                    51:e6:ed:4f:8a:8b:ee:e1:32:db:89:08:17:cf:65:
                    56:09:7f:c7:91:38:c7:9e:f8:08:8d:f7:fa:ce:17:
                    da:6b:f6:1b:94:21:87:1d:22:de:5b:cd:45:05:ff:
                    8d:a7:e7:8d:9b:69:e4:33:51:be:a3:88:7d:39:6e:
                    0e:83:9e:d8:0d:b2:d2:12:bd:52:0d:04:b7:1d:5a:
                    3c:5d:46:a1:23:2d:0b:48:83:5f:e8:87:71:23:91:
                    f1:75:fb:a6:61:20:0b:84:c7:41:45:25:ea:4a:fe:
                    22:74:19:97:2e:49:4c:6b:fc:58:bc:68:8c:fd:ef:
                    e1:26:c8:3b:34:66:a5:24:1d:d0:02:ea:d6:36:6d:
                    76:8a:f3:49:91:b2:1a:39:d0:26:95:b5:cb:05:02:
                    26:b3:5c:3f:19:da:e9:5a:3a:de:ba:42:a1:67:59:
                    43:26:41:c1:5e:fc:ba:2f:14:b4:5e:87:f3:80:2e:
                    ab:8e:85:af:e6:fe:7f:67:05:4e:9e:e2:66:77:25:
                    f2:43:be:ac:c7:b8:cc:6d:d5:fb:e4:a6:9d:bf:4b:
                    24:20:84:95:39:c3:19:2a:08:52:ed:b5:b5:56:46:
                    11:46:af:94:a2:52:f4:02:22:38:04:3e:d9:54:53:
                    25:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:33:D3:1C:9A:66:A2:2B:3F:1C:F0:AF:DE:6F:A7:B0:2E:17:60:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9888496b-db63-3363-bfab-e35ab2a737a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.204.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:5f:1f:94:71:b7:20:69:b1:66:08:48:83:e4:62:10:10:4e:
         5c:f7:24:36:d8:78:fe:aa:ce:76:da:b8:a4:1a:a0:92:40:07:
         6f:a4:43:46:0b:67:9d:e2:f0:b0:85:44:55:e8:e5:27:cb:ff:
         59:a4:27:9d:ba:d1:79:ed:1f:72:26:88:f8:1b:90:38:e8:f7:
         69:30:52:e0:79:2e:d4:e8:02:c8:31:4a:0e:91:71:71:72:30:
         af:99:ab:94:7e:11:d7:99:66:8d:8f:21:c2:c7:db:23:d4:e3:
         27:8b:9b:b6:95:12:f1:e0:88:0d:ed:7a:a1:cd:36:d3:3a:ea:
         03:c0:e6:e0:7b:a3:90:06:c6:d6:0d:71:6e:32:62:89:0f:de:
         2b:f8:1c:b1:6f:10:18:aa:54:4e:0c:72:58:b6:6a:97:34:15:
         c7:36:cb:a8:07:06:e1:74:05:35:fd:b9:17:7e:9a:30:25:78:
         7a:64:28:28:9f:f9:c1:be:5b:50:b8:3d:c2:ab:5a:74:38:52:
         0a:d0:51:e6:f5:e3:a2:ea:95:d1:75:d1:8d:ea:87:56:ba:31:
         f4:86:2f:77:66:23:c4:87:bc:1e:d2:6e:ed:f1:85:cb:c4:f8:
         48:44:b0:85:c5:27:d7:96:3e:8a:71:8c:f6:a4:6e:7e:38:8d:
         7a:3e:a5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 14:18:35 2025 by rpki-client