Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa
File:                     fbb7b44b-75a0-304d-8878-021d4d576a6e.roa (raw, json)
Hash identifier:          F3WC4wFgiuj4JtVI9c/VkFF8Dmy3PH4Y28CyMrb2/bw=
Subject key identifier:   46:3F:59:DE:4F:BB:D3:5B:9D:66:0E:CF:74:DB:67:7A:51:A5:70:FB
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584B1806DF594CBE8F8174924580
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     11290
IP address blocks:        24.153.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:df:59:4c:be:8f:81:74:92:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=45b02ddd-0468-4b38-8033-3b411a725bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ab:a5:99:32:45:17:ad:e6:e3:73:6c:6b:7f:
                    ba:62:2f:37:be:12:f6:a5:96:92:34:2d:57:70:ed:
                    86:61:ed:7f:18:fd:17:1a:04:19:8f:86:93:01:4a:
                    41:b1:8e:67:27:82:d9:c3:a6:3b:73:ad:ec:8b:6e:
                    61:82:fe:4b:73:21:fa:3a:db:62:36:0a:da:99:80:
                    b7:d9:c4:d7:dc:a0:9c:17:ac:4e:77:ba:05:0f:5b:
                    b5:96:43:8e:47:36:fc:3a:4d:a4:1d:90:c6:31:be:
                    14:72:73:bc:30:a3:72:8e:9b:50:86:19:f2:ee:b7:
                    8f:26:53:57:6a:f8:84:d3:7b:d4:6b:e2:75:41:ce:
                    e8:7c:3a:43:b6:f1:31:cd:c8:fb:9c:44:5f:f9:33:
                    0b:55:c8:bf:84:6b:a1:c8:ab:26:6a:b2:1f:e3:44:
                    85:f0:58:41:94:a0:b7:16:f9:d9:6a:1a:a7:42:5e:
                    c4:1a:a4:da:80:86:b3:3d:7d:1b:e2:df:09:2e:6b:
                    e1:6b:27:3a:89:97:13:29:64:ae:88:11:71:9b:6d:
                    f7:09:58:ae:66:d2:0e:07:cd:af:41:6b:02:3b:fd:
                    ed:8a:f2:9d:70:ba:f4:ba:96:5d:c3:29:74:04:0f:
                    c4:b7:5a:fb:bf:bc:67:99:ef:91:f8:d5:ab:c0:1e:
                    a5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3F:59:DE:4F:BB:D3:5B:9D:66:0E:CF:74:DB:67:7A:51:A5:70:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.153.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c7:8c:4d:ea:9b:c1:32:c2:55:3c:8b:d9:d7:af:9c:24:ca:
         ac:ea:94:30:29:c9:cd:54:26:aa:0c:70:eb:49:44:3c:cd:dd:
         bd:c2:d7:6d:43:62:cf:93:65:f4:43:1d:ae:75:26:d1:3b:60:
         c8:f7:34:43:6b:9b:dd:06:da:40:43:10:13:bf:c1:71:42:64:
         7f:90:f5:fc:52:c0:6d:17:2b:48:a1:4f:69:10:60:0f:ff:47:
         30:38:12:8f:ce:1b:39:1a:23:fe:ee:d7:b5:5a:cb:d4:15:d3:
         8d:a5:c2:f1:fd:46:07:98:4c:05:2f:c6:01:35:47:23:3a:a6:
         54:12:b5:10:8a:35:74:e0:df:67:72:2d:44:91:55:c7:aa:09:
         f9:a1:ef:82:f3:d0:e4:9d:5b:48:b2:6c:06:dd:0e:51:86:51:
         3f:1a:ee:8b:7c:80:99:29:2a:2c:49:a4:29:0d:b1:7d:c5:1a:
         15:7d:40:c7:f9:15:34:64:91:fe:ac:27:b5:af:41:28:a7:a5:
         5c:cf:4f:ba:f5:73:4a:2f:03:39:5c:d2:d6:1b:69:b6:fe:de:
         01:da:c2:b3:27:ac:fa:8b:07:8e:48:84:15:ff:45:a6:31:f0:
         9b:a6:a5:18:ea:cf:79:64:c7:8e:87:2f:3d:42:16:c9:e8:40:
         8d:ca:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 14:18:32 2025 by rpki-client