Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0cb626ec-8048-350f-9f19-eb8f88558842.roa
File:                     0cb626ec-8048-350f-9f19-eb8f88558842.roa (raw, json)
Hash identifier:          DpDW5ZCxJZe4swUyMnZiAzXum7aHQjqCGXOxYvYzCVA=
Subject key identifier:   C9:85:7C:C1:22:29:55:72:28:2C:20:BD:31:D4:F8:40:25:E3:7E:BD
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A374ADC0C63DCA0B94F226C80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0cb626ec-8048-350f-9f19-eb8f88558842.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     11290
IP address blocks:        24.138.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:dc:0c:63:dc:a0:b9:4f:22:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=0ea4d769-6f6b-41c5-b8c4-322c6e522dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:9d:a1:0a:d7:85:d6:ad:b6:a4:2f:2f:65:
                    60:7f:89:74:87:42:e0:4d:25:8b:c6:03:cb:6f:2a:
                    6d:72:50:4a:cc:44:9d:3a:f8:d0:2c:1a:b5:8f:5f:
                    32:ae:a2:84:a1:97:40:5b:ee:2b:1a:37:13:16:74:
                    4c:f1:95:75:14:73:2b:01:6e:84:63:30:e1:52:f3:
                    11:60:27:10:44:5a:ba:fa:77:40:6a:7c:4d:7c:e3:
                    3d:55:ea:03:65:9f:fe:a2:60:2e:4c:b4:ac:46:a1:
                    d8:51:bb:3e:7e:32:2b:9b:fb:0e:b5:a2:ac:52:e0:
                    96:9f:ca:50:dd:78:32:3e:2a:f1:62:98:6e:22:2a:
                    42:0a:c5:5d:b7:0d:ea:64:1f:3b:f9:9a:3e:45:b1:
                    eb:97:be:81:ac:32:49:46:d7:5a:ee:92:e4:62:86:
                    84:34:48:8c:08:d3:94:b1:e2:8e:ce:b9:9c:c3:1e:
                    d2:8e:75:a4:3c:c7:b2:58:bb:8d:95:d9:f9:da:0c:
                    8d:5c:8d:7a:ca:45:82:5b:88:f5:ad:ba:47:01:f0:
                    3f:0a:87:ac:f9:51:03:56:26:43:a0:48:76:58:5b:
                    a0:a0:ff:cc:8b:c1:4a:80:ec:e2:f3:ac:2b:a3:a2:
                    24:4a:da:41:b6:97:64:d8:94:6d:70:b6:cb:8e:1c:
                    b6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:85:7C:C1:22:29:55:72:28:2C:20:BD:31:D4:F8:40:25:E3:7E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0cb626ec-8048-350f-9f19-eb8f88558842.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.138.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:8b:2d:c2:c4:1e:b6:f1:1c:57:67:c6:ea:74:82:26:d5:51:
         65:0d:eb:d6:25:e5:1f:56:8b:38:ab:51:91:c5:95:33:6b:91:
         6a:56:cc:6c:52:1c:3b:50:12:78:a6:bc:ec:2b:17:31:e7:1e:
         01:b0:86:e6:78:90:13:c1:a4:92:e9:7e:8c:b2:a0:4d:de:16:
         5d:af:dc:63:d9:9a:e1:f3:fc:c1:de:f1:d3:ff:22:ca:1e:7c:
         17:fc:62:c0:51:24:ff:46:0c:fa:69:5a:75:80:9c:23:fe:05:
         75:de:d0:8d:c3:df:cb:88:af:8f:9b:1a:92:17:02:a3:42:e8:
         53:3a:d2:1e:7d:91:02:f9:b0:bf:3c:57:36:15:6f:08:e0:72:
         5d:92:dc:d3:96:1c:94:fe:ed:91:17:15:df:3d:93:4f:82:16:
         0f:e9:ae:dc:b1:b5:38:0e:54:83:6b:34:0f:98:80:08:08:48:
         33:39:52:a4:4e:f3:50:b5:eb:ff:92:b4:24:95:82:63:46:38:
         4a:b8:f5:56:64:55:a1:45:9b:5f:b2:cb:0a:1f:d8:32:62:f6:
         97:3f:54:1c:89:d5:34:53:e1:40:ce:95:66:b1:c6:f5:ae:7d:
         fc:d9:fc:26:2b:2a:48:6d:4c:dc:9c:86:47:b7:88:33:0c:83:
         fe:c8:92:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:18:13 2025 by rpki-client