Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/e4c840a6-7c44-37cd-8d84-325c36434df5.roa
File:                     e4c840a6-7c44-37cd-8d84-325c36434df5.roa (raw, json)
Hash identifier:          /oeKDDwaIs736jikjoXZp/xC3HvGi/MQ88ro1SBGZe0=
Subject key identifier:   9F:2F:28:B4:48:52:7D:D3:28:F1:81:AA:C8:C1:CA:74:55:D7:F8:87
Certificate issuer:       /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
Certificate serial:       010D0C9F4328584A2ABACC48BC98449CFB1EF9C0
Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/e4c840a6-7c44-37cd-8d84-325c36434df5.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     395437
IP address blocks:        143.55.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:cc:48:bc:98:44:9c:fb:1e:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=c503572e-8488-4554-8c79-afc84867ece9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d7:8b:57:41:38:b7:4e:a9:dc:eb:f9:dd:27:
                    b8:1a:2b:9e:bd:e9:80:9c:94:69:69:d8:07:ca:93:
                    3b:6e:a8:7a:cf:53:19:f7:ae:0a:61:a1:f7:71:65:
                    b5:fc:cd:7f:6b:89:8f:71:56:f2:03:f6:7c:5b:b8:
                    2a:aa:12:b0:2d:77:9f:1d:02:c7:8e:47:ca:e5:75:
                    63:55:7c:b5:d9:4e:a1:3a:06:7b:c7:e1:0f:9b:46:
                    25:82:dc:10:50:a8:08:f2:4a:4f:08:a8:4f:cb:9c:
                    c3:5b:e6:2e:cd:36:f4:a8:4c:9e:97:86:5d:05:68:
                    ff:b5:2f:1d:3b:58:e0:a8:28:56:9d:b2:26:1f:c1:
                    bf:5f:16:68:43:f4:b2:40:a8:ef:e8:ee:70:55:fa:
                    65:4a:17:17:99:c1:f2:67:4c:a5:c3:09:00:06:99:
                    f8:1b:0b:de:ba:f8:89:f1:9c:ea:1b:4d:d7:c0:56:
                    ef:c3:5c:47:2e:69:c5:47:e9:51:20:c8:4a:8b:53:
                    74:e9:00:aa:8c:a3:96:2d:2a:e7:61:03:5a:87:90:
                    62:79:c6:a2:60:9b:3d:a1:b5:6a:3f:9e:6a:be:03:
                    93:27:e0:0d:6e:96:ac:19:ab:93:2c:bc:7e:96:2a:
                    5e:5f:42:e6:3d:c1:7b:8f:1d:f7:d0:d4:e6:14:d0:
                    3f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2F:28:B4:48:52:7D:D3:28:F1:81:AA:C8:C1:CA:74:55:D7:F8:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/e4c840a6-7c44-37cd-8d84-325c36434df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f5:48:9d:70:18:3f:f2:b5:ce:4c:7b:e0:db:f5:58:9a:40:
         6a:49:54:d6:7b:6b:45:32:61:8c:17:3b:24:73:fe:6d:a6:b0:
         17:30:a1:60:d7:5c:46:8e:0e:b6:de:36:97:2e:4e:8c:43:99:
         00:81:6d:95:39:31:64:45:a1:3a:10:d0:b9:80:88:26:82:03:
         79:f0:33:c5:67:27:12:16:03:42:23:5d:e5:11:ff:84:e7:08:
         13:90:7d:3d:33:81:1f:21:32:5a:4d:ca:4a:ee:b1:08:5e:25:
         ec:24:33:13:60:f8:b8:02:b0:c3:1e:d2:af:9b:7f:fc:54:4a:
         5b:e9:26:28:5e:2b:f0:3e:1b:5a:90:3c:d5:9e:6b:56:34:4e:
         b3:48:6d:fc:b4:ce:99:ac:31:59:e5:52:7c:e6:af:b8:60:a4:
         2b:d2:be:89:5c:1f:00:34:34:3c:fd:56:4b:9f:ad:78:29:6f:
         91:30:f8:a5:19:4d:87:fc:9b:fe:9b:86:bb:48:2a:26:b5:df:
         c8:72:28:ac:0c:46:d8:88:4b:cb:17:38:ed:82:45:05:02:cf:
         a5:13:32:5e:20:1b:e8:e8:85:29:78:ed:21:e9:92:ed:8d:c7:
         fd:dd:e9:68:6d:db:49:75:74:bb:bd:0d:c8:a4:8d:49:6d:94:
         b7:0e:65:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:33:31 2025 by rpki-client