Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/286b8cea-12ac-3c07-8ebd-57a4e679bedc.roa
File:                     286b8cea-12ac-3c07-8ebd-57a4e679bedc.roa (raw, json)
Hash identifier:          Nq536x559SO9CG4Ma4FDtp5M82xdqqeF7VUKlE4BuTM=
Subject key identifier:   08:BA:70:55:06:AB:68:87:9B:E6:32:7A:00:32:DD:F3:53:43:BE:05
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A30503DDEBB59D73727932F00
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/286b8cea-12ac-3c07-8ebd-57a4e679bedc.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     11290
IP address blocks:        208.77.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:3d:de:bb:59:d7:37:27:93:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=10b087e3-c582-48ee-802a-8d2e8d22f303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0e:72:73:30:aa:b9:b9:b2:01:f2:00:d4:41:
                    4e:ff:aa:ca:4c:16:2f:37:d1:d2:b1:8a:56:c8:4b:
                    2b:7e:e0:6c:4a:83:d3:ba:e7:06:bc:47:f4:4d:c6:
                    dd:a5:fe:73:96:a4:2e:95:c2:13:5e:d0:b8:22:38:
                    19:f2:47:67:8d:89:fe:a9:be:2a:9c:e0:b6:fc:9d:
                    13:15:16:9e:1f:93:99:82:8f:27:a7:44:9f:de:c7:
                    36:bf:fc:bd:a0:d7:3b:78:43:e0:64:31:f6:c3:f9:
                    6a:11:0b:d0:64:2c:ec:28:2b:f6:32:b8:69:e1:03:
                    bc:f4:b3:1c:be:f5:22:35:98:75:36:e6:de:6d:23:
                    8b:71:d8:f1:a0:c5:39:5b:e7:04:cd:82:1c:f3:16:
                    d8:f7:c9:be:0a:48:6b:80:78:20:0a:be:b4:d0:a7:
                    f0:e5:3c:73:82:9d:af:17:a1:84:53:fb:c0:16:b5:
                    f7:b2:0b:54:b6:9d:9b:58:83:fd:ef:47:7e:39:9e:
                    7d:3f:72:c2:c6:db:19:c4:0e:fc:65:af:ad:17:82:
                    92:0e:f8:fb:f5:ef:da:2d:90:33:b5:08:34:08:3a:
                    0f:f8:19:98:c3:b2:b8:a4:83:6a:82:39:ed:2d:38:
                    79:84:5d:2d:6a:25:78:2c:bb:11:06:c4:44:59:e6:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BA:70:55:06:AB:68:87:9B:E6:32:7A:00:32:DD:F3:53:43:BE:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/286b8cea-12ac-3c07-8ebd-57a4e679bedc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.77.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:dd:3d:8d:c7:f3:26:e7:1f:c0:1c:f1:48:bc:5c:3c:70:d0:
         86:0e:82:c3:c3:b8:7a:b5:20:90:7c:01:5a:4f:08:5a:e0:7c:
         97:fb:cf:ea:a5:90:a5:02:de:a6:21:1e:09:44:71:ae:61:1c:
         14:38:ee:fa:7d:75:b3:c8:00:b4:3b:c4:fa:c5:e3:ac:35:4c:
         4b:f5:6c:a1:df:da:f2:75:16:fe:b7:cc:72:3b:13:0d:67:75:
         b7:67:76:1e:11:fe:7c:02:81:a3:7b:b6:28:1c:3d:7e:35:ea:
         2e:1f:d5:0e:76:10:d9:45:97:e5:91:e5:f1:a5:fc:c5:12:9b:
         f7:6f:32:b2:85:8f:54:86:a2:dc:c1:bb:b6:d4:b4:f4:4d:fd:
         1d:98:b8:39:50:8e:ec:be:49:6a:65:af:c8:c2:a7:35:ef:20:
         55:51:cf:26:48:f3:f5:ba:1a:86:d9:36:8a:9b:ae:b0:40:60:
         0c:de:4a:d4:77:b4:ee:a4:40:5c:31:84:f9:d7:6a:ea:56:93:
         f4:14:df:69:30:bb:fa:11:f8:58:45:02:09:19:20:27:67:53:
         cb:a5:ac:9d:50:c4:45:82:7d:8b:d3:9e:24:5f:22:6e:09:b2:
         02:4c:98:79:3e:c7:22:f0:ea:3f:65:b0:e6:22:eb:1b:c0:f2:
         44:58:9d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:13:07 2025 by rpki-client