Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b938ef69-2886-35a9-9252-032a68a12f49.roa
File:                     b938ef69-2886-35a9-9252-032a68a12f49.roa (raw, json)
Hash identifier:          rf9PtR1l0oYrkdhPOCSBT2cIPPndPmx9/SC/qdOmpgo=
Subject key identifier:   1F:EE:5B:B8:C7:E8:6C:11:7F:E4:F7:E3:50:0F:32:D8:E2:A3:EC:27
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584B110C053A583FFE4149774090
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b938ef69-2886-35a9-9252-032a68a12f49.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     11290
IP address blocks:        209.15.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:05:3a:58:3f:fe:41:49:77:40:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=9f24dcbd-8bbc-4b48-bb2d-4632d8653941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:82:33:28:09:8c:47:e8:28:24:17:f7:d8:cb:
                    15:11:88:0f:eb:d4:57:59:03:a8:ef:26:d4:1b:67:
                    fe:3d:d9:2d:8b:4e:71:d8:a2:e3:51:b7:01:9a:8e:
                    f9:a6:b3:92:33:a1:e7:5a:7f:71:82:ef:49:c1:15:
                    ab:42:e0:2a:89:f4:d7:20:b7:8f:8d:3a:f4:1d:6d:
                    62:57:d3:2c:17:0d:f5:86:fe:fd:6a:1e:f6:41:64:
                    4a:97:07:21:18:de:9d:53:7d:4a:f6:72:d8:9d:fa:
                    ca:1d:d2:b4:51:51:1e:b5:6c:3e:72:ef:1d:97:a7:
                    d2:6d:0f:f8:8e:a9:c7:03:bf:95:f1:e7:05:e0:ad:
                    7a:ab:3f:eb:1e:61:f4:75:b5:95:93:53:54:66:71:
                    cf:b9:e5:7e:29:59:5f:2a:45:be:5a:b1:b5:b3:14:
                    c3:89:ef:6f:06:05:ea:b6:e0:64:7d:64:0f:48:10:
                    f7:5c:16:45:d8:44:e0:e1:a7:04:b5:90:da:b5:2d:
                    76:ba:3a:b4:a6:c6:c0:db:b4:a3:37:85:e4:2a:00:
                    09:bf:44:4c:8c:54:2d:60:e3:e0:1a:93:7b:29:fe:
                    3d:20:e2:dc:7f:b0:41:38:6c:c3:cf:0e:58:80:a1:
                    bf:a8:c5:e0:03:93:ab:f2:8b:21:08:f8:f1:6c:86:
                    0b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EE:5B:B8:C7:E8:6C:11:7F:E4:F7:E3:50:0F:32:D8:E2:A3:EC:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b938ef69-2886-35a9-9252-032a68a12f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.15.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:9d:c9:b4:46:23:cc:dc:7b:38:f1:40:34:25:32:8c:fa:3f:
         ce:5b:56:fc:61:38:e6:01:64:82:3c:02:b8:80:9c:99:f1:2c:
         e5:58:bf:c5:27:5a:9e:d3:5a:22:37:6f:00:e7:0f:5d:2f:00:
         6a:de:17:d8:e2:18:59:04:50:cc:77:21:f8:92:7f:10:ec:6f:
         c0:6c:d8:d2:ef:a4:f0:cf:14:fc:a7:75:1f:48:cc:b3:4b:2f:
         cf:ab:49:c7:64:15:ad:f7:ac:34:cb:3b:5e:44:87:ad:fb:c5:
         ed:75:8e:2e:38:87:68:b4:4c:a0:c1:52:ee:1f:9f:d2:38:76:
         81:d4:23:24:e2:2b:58:32:44:14:0c:8b:18:70:bd:6b:3c:ac:
         f8:80:9b:9b:83:f6:38:b7:c1:8b:bd:f7:7b:b1:0c:85:0e:9b:
         75:dd:ae:a0:6c:c6:9a:1e:96:fe:29:9b:8f:b4:29:bd:41:6f:
         78:2c:89:37:07:70:1b:11:57:c0:5d:28:74:e5:ad:6b:a3:ef:
         e7:27:d5:47:f7:18:54:73:6e:95:78:53:ea:d7:ab:a9:9b:7e:
         f3:1d:18:10:0d:14:c6:6b:03:73:0b:2c:4f:6f:8a:11:f7:f5:
         8d:da:eb:49:9c:aa:8d:46:aa:41:2d:1b:12:82:ee:9c:00:b8:
         d7:2e:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 14:18:58 2025 by rpki-client