Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3924f1b7-789b-3758-bb3e-78e15e71890c.roa
File:                     3924f1b7-789b-3758-bb3e-78e15e71890c.roa (raw, json)
Hash identifier:          qWacamkuNhp3NsHcmpLnGivBG9Pe1h6q5SbeMjoD8+g=
Subject key identifier:   4A:94:49:C7:35:E0:0F:DD:20:A9:B8:DD:4C:84:E6:2A:78:2F:1D:88
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A374ADB3C380BD15877F58A00
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3924f1b7-789b-3758-bb3e-78e15e71890c.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     11290
IP address blocks:        72.11.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:db:3c:38:0b:d1:58:77:f5:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=d7bbb3cd-be12-4c09-aa76-3b76829d6315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2b:46:61:28:63:1d:c2:62:75:8a:c2:b9:ef:
                    ab:de:25:c9:ec:c4:10:98:07:df:41:3c:de:c4:ef:
                    cf:26:e7:b5:20:a0:78:7b:cc:8d:4b:97:63:48:14:
                    14:17:bb:09:c7:0a:36:68:f8:b9:3f:f8:41:9c:c8:
                    08:3b:af:26:30:86:28:32:9f:08:ac:62:7b:f6:a8:
                    3b:bc:2d:2b:34:61:0b:17:fc:31:5c:54:6d:4d:6d:
                    56:79:47:ca:81:46:c8:82:c3:ea:a4:e2:fa:67:5a:
                    5c:33:1b:fb:53:23:67:4b:0e:c5:c4:43:79:12:77:
                    36:d1:c8:47:16:81:55:4a:30:be:9d:60:e6:c9:c0:
                    bc:27:16:4e:89:ca:ce:08:78:da:8f:2c:81:30:a7:
                    00:23:42:29:dc:25:fa:4e:dc:1c:09:12:20:d5:a8:
                    a7:a9:96:e1:f0:8b:b8:7e:71:85:dc:6c:0a:b5:14:
                    6a:37:cc:4a:f8:b6:aa:49:40:98:94:41:41:90:1d:
                    0e:be:45:68:6d:0a:b1:ac:21:3b:0a:1e:21:1c:10:
                    56:eb:7b:b9:2b:e8:63:20:37:b7:e2:51:5b:b5:21:
                    7a:2c:6c:a2:a1:ff:2a:fa:06:ce:00:c8:90:9b:54:
                    b0:91:6b:1e:e7:cd:cd:e5:99:72:2f:d8:88:97:00:
                    35:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:94:49:C7:35:E0:0F:DD:20:A9:B8:DD:4C:84:E6:2A:78:2F:1D:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3924f1b7-789b-3758-bb3e-78e15e71890c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:1c:ff:39:66:6a:ed:b6:f3:72:07:51:75:18:72:ce:62:f9:
         94:0e:ad:72:8c:53:21:d6:34:37:31:36:a6:73:e2:3d:4b:bb:
         4b:eb:ac:2d:9c:5a:5a:cb:1f:82:44:1b:e3:52:28:1b:d9:0a:
         b2:32:0e:7a:fa:87:88:ca:e3:17:cd:17:89:04:9c:d5:ae:15:
         6b:5e:3f:cb:71:12:27:17:15:b7:16:82:44:7d:ab:75:f3:e8:
         ee:9e:41:c3:17:f6:d7:4e:f6:a6:43:bd:b5:f7:ad:d4:22:18:
         83:ee:6e:f0:6c:1d:64:55:27:9d:37:f1:9e:b0:96:95:fe:73:
         3f:e0:92:e4:fb:41:03:65:b5:c4:05:4d:69:c1:3c:e4:b9:34:
         2e:6a:cc:eb:33:2c:39:af:18:d6:0d:5a:56:45:c9:d3:62:06:
         cb:06:ec:cf:ae:62:a5:50:09:d5:77:f8:d7:a0:bf:78:bc:6f:
         3c:10:64:73:01:0c:d2:69:6c:80:ea:1b:73:ef:44:0e:dc:f2:
         94:bb:c4:5b:ff:28:0e:60:d5:d3:e7:29:ca:73:13:00:c3:95:
         c2:28:ba:b5:d4:34:6d:d5:2a:2d:68:2b:6e:0a:02:9e:d1:c3:
         4a:35:0d:9b:6c:78:fe:c6:e5:90:19:d6:e3:19:9b:f3:27:67:
         51:2b:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:51:44 2025 by rpki-client