Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b27820e0-c23f-35d7-86be-712ff0297dd4.roa
File:                     b27820e0-c23f-35d7-86be-712ff0297dd4.roa (raw, json)
Hash identifier:          12FIDd4kiDpWf5YHCJ8rA4oiXFKzU2gEBwqN6XRYT5A=
Subject key identifier:   EF:28:FE:ED:34:21:25:D8:F9:2B:E4:B9:EF:71:95:E6:1E:71:FC:C7
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A30503E1BF5B90EF7C380B080
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b27820e0-c23f-35d7-86be-712ff0297dd4.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     11290
IP address blocks:        205.237.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:3e:1b:f5:b9:0e:f7:c3:80:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=9567fb29-a4ec-4eb4-9513-84d6672255f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:50:8e:32:62:fd:90:75:dd:bf:85:c0:0f:
                    2b:db:2c:b3:d5:34:8d:11:4e:98:b8:eb:f4:36:dd:
                    de:4b:00:f6:ef:66:16:97:16:4a:21:ee:b5:1b:f9:
                    6e:7a:2a:1b:4b:cb:d0:b5:c5:1a:19:41:77:46:1d:
                    af:9e:07:e0:6a:7a:dc:ca:b8:0b:54:5a:12:89:7b:
                    d6:81:9d:f9:71:c1:75:71:ff:4f:3f:f0:59:b6:41:
                    27:03:8b:f6:8a:cd:7b:0f:b1:00:f0:1f:0c:42:20:
                    ac:70:5b:4e:0d:b4:99:40:95:07:3a:ec:76:93:74:
                    37:5a:90:41:b6:2f:66:8c:38:d4:3f:dc:9c:36:a3:
                    37:c2:27:b3:f7:55:7e:0a:54:7a:18:3f:c5:87:89:
                    c7:33:9c:af:77:44:32:f3:21:b3:22:fa:7b:10:42:
                    03:26:26:54:00:94:9f:92:1c:e9:07:a2:d1:75:ab:
                    d3:e9:b2:c8:54:e8:53:86:a9:a4:c5:72:7f:6f:a0:
                    99:23:77:34:b5:eb:90:34:ec:2e:9b:6c:31:51:13:
                    f4:37:35:a6:57:23:35:39:3a:bd:00:61:e5:d7:d1:
                    44:56:69:78:57:2d:49:95:52:d0:f9:84:75:2e:87:
                    13:14:52:6e:6d:04:40:0f:1b:d5:fa:c2:9e:8b:e7:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:28:FE:ED:34:21:25:D8:F9:2B:E4:B9:EF:71:95:E6:1E:71:FC:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b27820e0-c23f-35d7-86be-712ff0297dd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d5:0a:73:77:30:37:2c:b3:af:49:30:95:55:c6:f4:de:d9:
         ed:88:96:84:e1:5f:67:3b:ef:be:e6:c0:7f:a8:31:a7:23:44:
         3d:d0:50:51:42:61:0d:bf:20:1b:f2:18:81:d1:0a:65:61:44:
         45:a8:ab:c5:04:cf:13:53:06:5a:c5:c4:8e:e7:c7:c9:2f:58:
         c2:40:77:6b:a7:32:9a:e7:18:5f:83:37:c7:c1:73:5f:96:e4:
         f2:ad:42:f7:be:a1:05:51:57:23:2a:8c:7e:5f:9b:1b:7f:70:
         02:00:ab:c7:42:eb:18:b8:45:c8:e6:aa:81:c6:d5:96:cd:67:
         2c:3a:58:9e:c1:09:8f:40:10:87:eb:98:91:55:4f:44:03:b7:
         c4:34:11:a7:1a:e1:74:9e:2c:dd:5a:44:13:bd:bb:48:84:1f:
         7e:4f:8b:2d:a9:ce:d0:4a:a4:bf:44:9d:d0:8d:58:70:41:05:
         e2:29:df:8a:64:36:ec:19:07:7e:5f:20:d6:d2:be:7f:b7:cf:
         57:1f:b0:84:5e:4f:f2:b3:40:ea:19:51:fc:bd:93:32:46:32:
         3e:4d:b2:22:14:75:a0:f7:7a:0c:18:b3:f9:65:73:63:24:7c:
         d2:e7:6d:be:44:6f:39:5a:08:e0:d5:24:3b:a1:52:d9:34:58:
         a9:37:8e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:32:39 2025 by rpki-client