Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa
File:                     08b963ee-e094-3e46-84b1-392bbcac2a6b.roa (raw, json)
Hash identifier:          /26F+Vv7fJUy0NID29Rq9vngmu+CEL0VrVMcP6Xx4UE=
Subject key identifier:   ED:5B:56:D4:C2:E0:49:B8:FD:3A:54:AB:0F:D2:7F:3D:A4:CA:97:6C
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A374ADCDC02CD9C59DDA2AF80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     11290
IP address blocks:        24.122.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:dc:dc:02:cd:9c:59:dd:a2:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=f276cbe4-577c-4b6f-a064-49e94decb62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:09:67:2e:b3:07:3b:54:9b:4c:23:a3:50:9e:
                    62:d7:33:0f:6d:e5:a3:48:a5:ae:a2:40:3c:fc:74:
                    77:45:12:de:42:cd:a6:ee:f1:50:71:cf:ed:44:02:
                    48:5e:8b:f4:2b:fd:94:94:b3:ca:e3:5f:16:5c:77:
                    94:97:d1:40:af:c0:ee:4e:99:89:ad:1a:70:34:e4:
                    3c:7e:da:7a:3e:07:ea:bb:67:11:d6:30:df:b5:cb:
                    ae:f0:c4:68:e8:47:0a:71:4e:22:43:14:5e:ee:a5:
                    e3:40:dd:4b:cc:99:47:ca:3a:48:65:31:ca:1a:27:
                    c3:01:55:69:ac:a5:0c:8b:43:e1:12:47:54:82:b2:
                    0d:ff:8d:7f:04:20:c3:0e:ef:4a:d4:22:a5:7c:fd:
                    df:14:dc:ee:58:92:79:46:ad:7b:a4:5c:9f:e6:79:
                    00:a8:16:d6:fe:20:90:30:ed:7e:bd:6b:14:f4:02:
                    5e:3b:44:09:02:02:f2:42:42:e1:69:00:a8:91:e5:
                    97:40:47:bf:ae:29:02:3c:43:46:66:99:f6:23:ec:
                    ae:cc:6e:b0:41:83:58:cf:78:ef:dd:40:a1:7c:48:
                    18:c7:aa:12:45:60:a5:d7:8b:5a:23:96:7c:63:08:
                    5a:f5:3a:a8:15:0a:88:e1:8a:64:f0:c2:a8:04:9c:
                    68:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5B:56:D4:C2:E0:49:B8:FD:3A:54:AB:0F:D2:7F:3D:A4:CA:97:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:bc:e9:99:c0:b7:88:a4:bd:db:14:0c:9a:fe:cd:56:9e:
         b3:44:c0:5d:04:eb:b3:b1:5a:c7:32:b7:4d:f7:71:da:63:17:
         08:08:31:58:96:5e:cd:4e:7d:df:67:15:39:87:91:76:ca:ab:
         9d:bc:2b:0c:56:91:5f:c7:71:94:ab:b3:0d:61:72:14:55:2b:
         cc:24:ed:50:80:f5:03:35:9b:29:94:28:b9:21:b4:74:66:e1:
         80:a2:bb:8a:49:8a:bf:7c:82:84:2d:88:f9:8d:96:ca:01:63:
         8c:f2:cc:8c:d1:33:c8:62:99:ef:73:6c:15:b5:e5:89:c4:b1:
         a1:52:a3:4e:71:3e:b6:5e:62:d6:0b:7f:c3:06:69:1a:0c:4b:
         4b:c7:09:1d:fe:58:62:dc:56:df:bd:73:a4:55:ad:d5:d2:49:
         81:d5:ae:5a:b9:40:98:04:44:b5:78:e2:d6:bb:be:bf:a5:3a:
         3b:10:bf:03:5e:0f:2e:1f:cf:f8:f2:68:b5:63:d4:10:10:6e:
         84:20:b4:6c:8c:ca:6f:4a:9c:2e:e6:e4:63:3f:ce:56:fe:fd:
         d7:a2:4d:46:6f:0a:5e:4a:aa:77:2f:ea:27:01:37:6a:18:87:
         83:5e:94:05:a5:6f:d3:dc:13:36:70:31:aa:9b:52:da:68:6a:
         96:d4:cf:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3StzcAs2cWd2ir4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk
ZjI3NmNiZTQtNTc3Yy00YjZmLWEwNjQtNDllOTRkZWNiNjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQlnLrMHO1SbTCOjUJ5i1zMPbeWjSKWuokA8
/HR3RRLeQs2m7vFQcc/tRAJIXov0K/2UlLPK418WXHeUl9FAr8DuTpmJrRpwNOQ8
ftp6Pgfqu2cR1jDftcuu8MRo6EcKcU4iQxRe7qXjQN1LzJlHyjpIZTHKGifDAVVp
rKUMi0PhEkdUgrIN/41/BCDDDu9K1CKlfP3fFNzuWJJ5Rq17pFyf5nkAqBbW/iCQ
MO1+vWsU9AJeO0QJAgLyQkLhaQCokeWXQEe/rikCPENGZpn2I+yuzG6wQYNYz3jv
3UChfEgYx6oSRWCl14taI5Z8Ywha9TqoFQqI4Ypk8MKoBJxoDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1bVtTC4Em4/TpUqw/Sfz2kypdsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMDhiOTYzZWUtZTA5NC0z
ZTQ2LTg0YjEtMzkyYmJjYWMyYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHoQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHb+vOmZwLeIpL3bFAya/s1WnrNEwF0E67OxWscyt033cdpjFwgIMViW
Xs1Ofd9nFTmHkXbKq528KwxWkV/HcZSrsw1hchRVK8wk7VCA9QM1mymUKLkhtHRm
4YCiu4pJir98goQtiPmNlsoBY4zyzIzRM8hime9zbBW15YnEsaFSo05xPrZeYtYL
f8MGaRoMS0vHCR3+WGLcVt+9c6RVrdXSSYHVrlq5QJgERLV44ta7vr+lOjsQvwNe
Dy4fz/jyaLVj1BAQboQgtGyMym9KnC7m5GM/zlb+/deiTUZvCl5Kqncv6icBN2oY
h4NelAWlb9PcEzZwMaqbUtpoapbUzwQ=
-----END CERTIFICATE-----
Generated at Thu Jun 19 12:32:50 2025 by rpki-client