Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c40b1190-1515-3cb5-9550-3ac9f9324c14.roa
File:                     c40b1190-1515-3cb5-9550-3ac9f9324c14.roa (raw, json)
Hash identifier:          +FE5HbEYkan3800eEK4TWtY2KLt6CKov8igSgRDPN+M=
Subject key identifier:   38:A3:C3:C1:FE:4E:18:01:5C:5B:4B:40:CF:C5:F5:15:9F:E7:9A:68
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584AB51A8ED06D452FCDE7B14D00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c40b1190-1515-3cb5-9550-3ac9f9324c14.roa
Signing time:             Fri 01 Aug 2025 02:35:35 +0000
ROA not before:           Fri 01 Aug 2025 02:35:35 +0000
ROA not after:            Thu 30 Oct 2025 02:35:35 +0000
asID:                     13443
IP address blocks:        128.241.35.0/24 maxlen: 24
                          128.242.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b5:1a:8e:d0:6d:45:2f:cd:e7:b1:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug  1 02:35:35 2025 GMT
            Not After : Oct 30 02:35:35 2025 GMT
        Subject: CN=de67ea8f-0330-4cac-b4b0-a28b0e80b9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:70:5f:dc:71:1e:2d:90:98:34:dd:58:25:
                    26:ea:ab:c3:f8:fe:89:1f:b8:4d:63:fd:e1:03:5e:
                    a8:05:ed:e7:77:b2:c1:7e:dc:dc:2d:5d:ae:91:60:
                    40:89:be:2f:b5:79:9e:ae:5c:7d:69:46:09:98:e1:
                    9f:6c:e3:5d:c5:89:f2:70:9b:4d:d8:77:ba:b5:a4:
                    26:67:e2:88:ab:29:48:16:e1:a5:27:2c:41:32:29:
                    ec:72:86:c8:b7:13:24:7d:e4:8a:26:47:ce:e8:1f:
                    6b:61:13:ea:52:05:2e:64:95:01:26:a9:70:9c:cb:
                    dc:8e:17:05:c6:ed:01:52:a0:cd:32:bd:4d:7d:99:
                    9f:cc:d7:e6:12:ec:55:38:a1:b3:ce:74:be:46:c5:
                    cd:17:a3:52:d0:09:41:99:55:0c:b8:df:97:b3:49:
                    56:c6:0e:98:7f:d7:84:9f:c7:ad:94:4a:b0:c2:cc:
                    a3:20:54:ae:05:ff:93:bb:b1:90:96:41:3d:78:b5:
                    15:95:2d:5a:e6:c2:ca:79:40:06:a2:3e:8b:00:4b:
                    8e:5b:b2:f0:0a:8d:b6:00:d6:e7:86:1a:a4:96:a8:
                    b5:db:c7:45:74:13:96:42:5a:4c:1d:94:0d:65:1c:
                    0a:c3:84:ae:d9:5e:31:2b:62:16:a3:eb:8c:df:0c:
                    63:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A3:C3:C1:FE:4E:18:01:5C:5B:4B:40:CF:C5:F5:15:9F:E7:9A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c40b1190-1515-3cb5-9550-3ac9f9324c14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.241.35.0/24
                  128.242.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d5:f2:9b:b5:6e:49:42:2a:cc:a7:8d:18:a3:61:1c:00:56:
         a7:63:f1:29:12:92:28:bc:ff:0c:e7:a6:08:ec:e0:af:91:c8:
         5d:c9:52:86:05:14:ae:ae:02:a1:76:f0:2b:f4:35:57:3d:15:
         5f:e2:db:82:0a:cc:7c:b8:14:2c:11:e8:23:46:a2:df:79:5e:
         97:4e:a9:59:b2:e4:d5:63:bd:86:56:94:38:71:b2:61:f0:7c:
         7c:1b:7b:84:24:75:c5:cc:52:b9:09:35:dd:6c:76:b6:1c:8a:
         7e:1d:06:30:d5:5a:9a:aa:4b:18:43:f4:82:d0:b6:bb:8e:d2:
         f9:bc:05:3b:74:85:52:92:9f:5a:86:bb:cd:d2:f3:e4:12:9d:
         33:cd:d0:01:40:8c:1b:2b:96:fe:29:52:61:0b:35:4d:cb:31:
         ae:1e:bf:8d:ca:25:e0:ec:64:df:fb:f7:e2:ac:db:24:78:78:
         46:ef:b5:0b:73:59:b0:25:f1:1d:93:ae:6a:63:e7:9d:3e:d5:
         19:6a:03:74:7d:b9:c1:a0:94:e7:93:cd:4c:c0:9b:53:23:51:
         32:d6:e6:bd:c8:8e:17:6e:23:d2:01:31:4c:41:2b:da:ea:89:
         25:54:d8:e4:dd:da:26:c8:ff:ec:d2:71:bb:36:5d:b9:0e:50:
         0a:b6:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:35 2025 by rpki-client