Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cadf0be0-a4e7-3516-9388-5487953f70cd.roa
File:                     cadf0be0-a4e7-3516-9388-5487953f70cd.roa (raw, json)
Hash identifier:          bHZNaKB+PNW8XgLIbX+EL5L0qEGoz0Oec3SsOh/R4gc=
Subject key identifier:   C5:B8:5B:8B:C2:10:4C:07:52:B9:EC:F8:28:07:C0:D6:59:A3:D1:A3
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584B1806DF21764FC2CF7F5BD280
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cadf0be0-a4e7-3516-9388-5487953f70cd.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     11290
IP address blocks:        24.226.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:df:21:76:4f:c2:cf:7f:5b:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=63c16500-ad78-4d0b-9aed-b9405959e518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c7:31:b5:49:b7:05:97:74:cd:23:f7:51:97:
                    1d:08:2a:2a:87:5a:3c:b1:87:46:85:86:ad:48:48:
                    33:48:ad:8e:ef:a0:5a:0c:31:4d:90:e2:29:9c:2e:
                    33:19:81:43:b1:60:4c:40:d4:c4:96:48:40:fc:48:
                    eb:24:2c:a5:6e:39:58:61:1c:10:dd:10:4c:e1:12:
                    f1:e7:5c:88:ba:e0:83:20:c8:60:95:09:4b:1f:4a:
                    21:02:f3:65:61:7f:31:ab:4b:54:b3:c0:ef:00:1e:
                    b5:f1:64:98:9a:dd:19:f3:ed:aa:62:cd:7d:83:8a:
                    13:c2:95:f0:a8:8a:39:8d:91:60:bb:17:2a:d8:e9:
                    b2:b8:84:f0:e8:02:5e:b6:c5:c4:7f:14:5b:33:5d:
                    b0:1f:c1:33:cc:67:95:d1:c9:88:47:c8:80:91:64:
                    ed:c8:d5:24:bb:08:e6:f9:d7:12:80:ec:42:05:ef:
                    c7:f9:0f:41:4d:cf:d0:dd:8f:71:b0:f7:58:58:9a:
                    29:7b:bd:42:43:c1:d6:b7:c9:ed:40:13:e5:d1:a9:
                    5e:0a:92:2b:aa:49:51:73:1d:c3:53:7e:4c:4c:fc:
                    53:4e:4c:08:fb:5e:9f:66:a2:5f:11:d8:55:54:07:
                    45:70:71:3a:c9:3e:99:a2:d8:59:2b:90:af:e2:64:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B8:5B:8B:C2:10:4C:07:52:B9:EC:F8:28:07:C0:D6:59:A3:D1:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cadf0be0-a4e7-3516-9388-5487953f70cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.226.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c2:f8:a7:ac:2c:1d:c7:27:fb:41:ef:26:87:43:3e:1d:2f:
         df:35:f3:1c:14:93:71:60:af:8a:c3:29:7b:07:dd:d8:54:bb:
         62:b9:3e:df:2d:12:a2:2f:54:de:bf:fa:ad:71:da:48:21:fa:
         71:4b:46:14:ee:b5:b7:cc:9a:74:b7:57:47:af:fc:e3:78:11:
         40:a0:c3:f2:f1:89:67:60:c1:41:ee:d6:bc:49:6a:11:9c:d3:
         2b:36:7b:76:4d:f0:c1:9d:78:13:d0:59:e0:71:44:12:b5:4d:
         74:27:a9:fb:8d:f4:7e:31:37:0f:22:f3:23:51:b8:34:75:41:
         05:40:b1:68:e7:c5:ea:8d:65:87:a9:76:bd:8d:cb:05:63:54:
         26:97:da:5c:1e:d9:76:2e:c0:bd:56:47:45:15:b9:53:aa:39:
         0c:28:0f:b6:aa:93:92:d9:f7:66:0e:c4:75:d6:e2:f9:95:50:
         ab:40:88:97:fa:e0:26:ba:80:65:16:cb:80:8f:a5:44:11:ec:
         a6:da:cc:4f:2e:cd:c4:ab:90:b7:90:0b:4d:09:93:ac:57:29:
         0b:f4:2f:4e:36:2c:1e:fb:c8:2c:ce:33:dd:a4:5f:43:9a:39:
         c7:ee:5e:bd:62:f5:58:e5:49:f2:d1:e4:94:0a:83:68:85:8c:
         f9:d7:3b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 14:18:32 2025 by rpki-client