Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b93f0bfa-6321-30a0-9834-67e1293e1040.roa
File:                     b93f0bfa-6321-30a0-9834-67e1293e1040.roa (raw, json)
Hash identifier:          RBeAPKoRhjB4JxEe+ZdSO389HyqteNeYy/tzRG/JJZ8=
Subject key identifier:   44:41:D2:C6:D5:AC:78:F5:54:E4:24:60:6F:C5:11:7F:C2:58:C3:15
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584B110C0D54F9F7E75BE3D560C0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b93f0bfa-6321-30a0-9834-67e1293e1040.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     11290
IP address blocks:        205.237.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:0d:54:f9:f7:e7:5b:e3:d5:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=2ef4ee48-cfa7-461a-ae5f-2ca6c5c830d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:58:89:7d:1c:19:33:32:53:b4:e9:ac:cc:
                    9f:f1:62:bd:4b:ec:4a:bc:a8:77:19:60:35:2e:ca:
                    74:d1:0f:8b:b2:8a:76:14:b0:cf:9f:e1:66:57:a6:
                    9f:d3:e9:bb:56:c1:65:90:d4:1e:a5:26:94:ed:5b:
                    b1:fd:0c:f8:3e:4a:7d:95:17:e6:e4:18:34:65:b0:
                    b7:a9:6b:36:88:0c:33:39:3e:8d:ad:3b:e3:f2:87:
                    8e:43:33:9f:ad:69:77:23:42:47:6e:7e:fe:0d:26:
                    1c:98:1f:18:99:78:45:2f:44:ee:2b:96:df:3c:92:
                    6e:93:b6:f3:8a:8d:a2:b4:e5:4b:ac:c6:61:77:37:
                    25:3f:81:1e:05:71:7f:82:ec:b4:47:a6:05:9b:0d:
                    cb:1b:04:c3:fa:24:86:65:82:32:e3:12:e8:ed:24:
                    7c:3c:85:b1:4c:35:4f:ad:3d:ba:34:1e:37:e9:24:
                    ec:a9:07:14:83:1d:eb:90:59:8c:be:5c:09:7e:ad:
                    e6:6f:58:65:af:34:64:e5:54:e2:6e:e9:19:dc:ad:
                    7a:0b:bb:78:0e:dc:64:11:0b:78:ad:21:01:8f:27:
                    49:a7:4d:1d:95:d0:db:0d:9f:f9:fb:24:42:97:45:
                    d6:9f:b3:54:83:78:1e:c3:1f:b4:f8:29:e2:eb:33:
                    34:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:41:D2:C6:D5:AC:78:F5:54:E4:24:60:6F:C5:11:7F:C2:58:C3:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b93f0bfa-6321-30a0-9834-67e1293e1040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:da:27:ad:ba:a3:78:e7:5d:e4:32:c8:47:c2:de:7a:f2:f0:
         2d:f7:f9:80:a1:52:5f:47:41:43:d6:1d:0e:05:b9:c6:8c:b1:
         fc:52:7f:d0:9f:f4:63:67:61:3c:3f:4a:de:03:65:56:c7:01:
         5c:67:cc:15:44:ee:3e:be:4d:72:20:06:25:fa:39:56:54:c3:
         d0:7f:71:68:d3:03:26:0d:56:3c:2e:24:20:cc:b0:6e:9b:da:
         f2:b3:35:bb:e9:6d:0e:83:d0:75:45:4c:42:a0:48:8b:70:9f:
         7e:eb:a2:3a:53:66:f6:b7:dc:07:d5:2d:f1:97:14:07:ff:c4:
         e9:df:39:e3:d8:c9:ab:ac:8e:d5:22:48:c1:d7:8a:e3:35:cd:
         c7:d3:96:4f:4e:44:2e:62:01:54:1b:57:14:0e:1a:2b:a5:a0:
         19:d5:6c:b3:48:50:d9:9b:3b:b3:3f:5b:93:e0:4e:f6:8a:98:
         4a:44:b3:5f:1a:b6:2f:4a:b7:80:c2:91:46:a7:c3:48:0f:f2:
         18:66:78:8f:0f:fe:40:a2:80:aa:b6:cc:aa:d5:79:5e:65:22:
         7f:7d:43:58:f7:e1:dc:e2:33:e3:fe:f6:76:b2:eb:98:48:a0:
         a9:c1:bb:1e:48:d1:89:ae:fe:ee:2d:a9:50:6f:a4:aa:3e:d3:
         82:fc:47:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 14:20:37 2025 by rpki-client