Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/676d52c3-3c59-3616-8a3a-27cd91d11570.roa
File:                     676d52c3-3c59-3616-8a3a-27cd91d11570.roa (raw, json)
Hash identifier:          0CbUAfmMO0ghFNj5N0WaM7kUNCmujS0lClalYD7R+KA=
Subject key identifier:   25:39:3A:F2:2E:B5:85:16:6C:F9:3F:D1:BF:8F:0F:F9:9E:AF:EE:31
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A374ADBD2EDCD6BC81E9D9900
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/676d52c3-3c59-3616-8a3a-27cd91d11570.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     11290
IP address blocks:        24.226.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:db:d2:ed:cd:6b:c8:1e:9d:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=005094c1-0efd-47e0-b6d9-886b153540b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:4a:73:54:93:3b:57:20:a6:00:67:34:00:
                    b9:e1:e0:c5:ca:10:77:33:79:9b:cd:49:66:65:b1:
                    47:10:5a:02:cf:48:ad:04:7c:83:71:35:c1:63:60:
                    2d:37:8f:43:7a:2b:36:94:73:d2:5f:2a:b2:38:3d:
                    11:d2:47:b0:cc:9f:52:9b:11:9a:ae:3c:f2:f4:29:
                    f6:27:c8:39:69:65:11:71:5f:61:2a:db:63:48:27:
                    26:01:25:8f:ae:01:59:95:d9:ce:12:01:f8:f3:19:
                    1c:8f:e2:0b:1c:98:e6:33:a7:41:f7:44:c0:e3:6e:
                    c5:32:90:13:9a:e3:04:b1:1b:b8:3b:e0:c5:70:82:
                    e1:4e:35:6b:10:0d:3d:6b:4e:d2:9a:6b:8c:af:8d:
                    15:a2:b5:cc:45:3d:67:23:2d:85:9f:0a:87:39:7a:
                    09:54:87:04:aa:63:7b:47:50:46:52:a4:d5:80:cf:
                    2f:e0:89:57:4e:92:b7:73:6e:bc:52:06:95:9a:35:
                    0c:2c:6f:aa:bb:77:20:53:d2:cd:0e:ed:c3:20:e2:
                    73:be:34:60:9d:41:ae:23:e5:39:8c:ca:80:ee:d4:
                    8b:cb:94:b4:b3:12:37:ec:d7:58:cb:6c:5f:e6:3d:
                    f5:28:75:86:8d:8c:49:20:6c:b0:bc:53:7f:2d:ab:
                    25:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:39:3A:F2:2E:B5:85:16:6C:F9:3F:D1:BF:8F:0F:F9:9E:AF:EE:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/676d52c3-3c59-3616-8a3a-27cd91d11570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.226.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ca:ef:4d:4d:a6:1b:55:2d:80:44:f6:49:03:e3:7d:b8:45:
         c2:8a:f5:59:51:92:f7:92:f9:3c:d5:74:59:90:93:d2:b5:7a:
         5c:50:eb:5c:18:57:2f:d6:13:d6:a9:55:44:e7:61:3f:66:8b:
         7a:f3:88:df:01:32:ea:d4:9f:5d:8a:95:ff:85:d1:44:36:dd:
         68:96:95:c5:e7:fb:20:f8:0a:ea:06:0e:ce:8e:d9:44:1c:9a:
         b3:ae:27:34:cf:b5:46:63:e9:1c:9b:6e:4c:7e:d6:29:ad:f1:
         2f:22:4b:a9:fc:01:07:ff:02:1d:5c:b3:2f:c3:0f:ff:ce:2e:
         fb:22:75:96:51:57:5b:95:d9:e6:77:46:77:df:6f:08:55:06:
         f1:0d:4e:3c:79:36:41:b8:9f:ef:f4:e9:02:e3:47:2a:2a:c0:
         ab:ca:11:42:14:22:bf:9a:65:96:a5:b9:86:73:20:ee:4a:ba:
         d0:1f:7e:b5:a6:5e:1e:bd:20:b1:ce:7a:dd:43:32:59:e2:70:
         93:ee:99:cd:d9:2e:28:b9:cc:bc:f3:82:16:d6:c7:c6:03:29:
         e4:fc:fa:3d:a3:8f:97:7a:df:8b:f7:99:61:64:f4:12:1e:50:
         38:c1:0e:28:ff:95:b9:b4:df:cd:1d:db:94:31:3d:b0:d0:04:
         1e:c0:0f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:10:12 2025 by rpki-client