Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/5aee81ee-b86d-30fc-8175-236e6876842c.roa
File:                     5aee81ee-b86d-30fc-8175-236e6876842c.roa (raw, json)
Hash identifier:          Ro3ym/0ON82EesD5ZY6Wpz3cFAUHjPgmd7sTVA1/1Ew=
Subject key identifier:   96:A4:4E:9E:98:D2:B7:87:4B:B5:68:32:15:71:70:23:8B:53:1F:B3
Certificate issuer:       /CN=40cd115f-d8b2-4c56-834e-28a4b39f52d1
Certificate serial:       010D0C9F4328584A1465614E604D0D4CECA978C0
Authority key identifier: 4B:6A:CB:FC:3F:E3:50:4D:B6:60:1B:F5:14:C1:A1:51:7E:7C:A3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/5aee81ee-b86d-30fc-8175-236e6876842c.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     394280
IP address blocks:        66.205.248.0/23 maxlen: 23
                          204.153.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/40cd115f-d8b2-4c56-834e-28a4b39f52d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/40cd115f-d8b2-4c56-834e-28a4b39f52d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:61:4e:60:4d:0d:4c:ec:a9:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cd115f-d8b2-4c56-834e-28a4b39f52d1
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=2f7d10f3-fbc4-4e73-b088-55cea233da93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:96:5d:c6:a7:4d:22:bf:6c:07:1f:e2:ae:e4:
                    d1:8b:1d:48:fc:cb:0c:54:ab:7b:88:31:cb:87:c2:
                    a2:00:c8:f4:69:1a:6a:ac:b8:f2:21:d5:4d:5c:98:
                    6a:50:a1:43:fa:df:ca:61:e0:16:43:d0:f2:7f:5c:
                    84:cb:9d:74:d4:92:39:27:f6:5c:36:b3:17:95:cf:
                    7c:0b:6f:27:a8:8e:50:bc:84:0c:5c:2b:be:90:34:
                    4e:1e:db:96:fb:30:1b:1c:39:14:7c:6e:34:92:5a:
                    27:b2:01:d8:16:a1:07:42:cf:af:39:6c:f1:19:cc:
                    33:af:4c:d2:5a:00:9e:c2:36:b8:7f:78:d2:59:73:
                    20:3f:44:c0:08:8e:f1:82:dc:d7:3f:00:af:bb:18:
                    0e:fc:1b:9c:f8:82:39:08:f0:76:09:1f:2e:80:0f:
                    29:08:2e:c4:41:31:78:34:7d:dd:fd:97:26:23:ca:
                    58:dd:5d:36:a8:95:0a:a3:80:9b:5c:54:90:4e:50:
                    30:7d:15:33:26:bd:ac:45:ad:93:75:d6:15:30:db:
                    3c:4e:05:a8:2d:48:d6:16:24:6e:6c:1a:b4:92:11:
                    82:97:aa:0d:8c:cc:bb:fc:3e:eb:51:9d:58:74:47:
                    a5:d0:d5:72:38:13:08:ac:8a:f3:99:9c:e0:77:c5:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A4:4E:9E:98:D2:B7:87:4B:B5:68:32:15:71:70:23:8B:53:1F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/5aee81ee-b86d-30fc-8175-236e6876842c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/40cd115f-d8b2-4c56-834e-28a4b39f52d1.crl

            X509v3 Authority Key Identifier:
                keyid:4B:6A:CB:FC:3F:E3:50:4D:B6:60:1B:F5:14:C1:A1:51:7E:7C:A3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.248.0/23
                  204.153.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:3f:da:a0:e6:78:e6:b0:a3:5e:3e:5b:92:d8:e6:3e:36:d8:
         93:5a:e0:73:91:db:2d:ba:ca:2c:fd:dc:98:8d:fc:4b:0f:f1:
         94:98:25:56:41:5a:f3:9c:a4:c9:46:ec:44:c7:dd:b6:9c:2d:
         9d:5f:e4:3a:2e:18:60:67:e5:2d:86:68:de:bf:de:be:29:ca:
         74:7d:44:c4:33:b3:a2:93:d5:51:4f:d4:47:bf:b3:63:ba:3e:
         d7:5e:9b:be:35:1d:44:70:8a:c6:ca:c9:98:72:c0:ef:af:a1:
         15:9a:b8:54:5d:49:2a:08:ee:3f:9c:8d:b3:b5:19:e8:51:81:
         0e:dd:4f:9e:51:9d:30:bf:f4:b3:a7:fb:b2:8e:7a:10:81:bb:
         f9:3c:18:de:7b:6c:71:2d:2a:fd:14:ac:9f:bf:9e:f6:ae:cf:
         9d:0d:be:7b:07:90:af:39:43:c8:d5:cc:d1:d3:e4:3e:aa:8f:
         51:91:e4:61:f9:e8:30:ee:a1:7d:99:29:49:84:d3:6c:69:0b:
         6c:93:13:84:0b:55:ed:63:82:bc:18:43:a5:e0:61:40:b5:62:
         66:0c:c7:05:18:4d:7d:01:24:5d:e3:4e:78:37:b6:8d:c3:f7:
         63:0f:c1:81:20:04:f7:10:a3:f0:bd:51:86:70:65:e7:56:cc:
         5f:03:23:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:26:25 2025 by rpki-client