Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa
File:                     b5f5f32e-5188-314d-a26e-19c0504c484c.roa (raw, json)
Hash identifier:          Np6EEWaGjqNvF6CSEvvnYyTyq2i7zYMKYfpgdaN0pLc=
Subject key identifier:   AC:8B:8F:C0:33:7A:3E:D9:BA:B4:6A:5C:8C:6C:BC:D9:5F:23:B3:5F
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A3050387B92DF5E6499DDBCA7
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     11290
IP address blocks:        209.54.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:38:7b:92:df:5e:64:99:dd:bc:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=5a1bb82c-e20c-482f-8073-119e6c048944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5a:47:9a:13:dc:bd:ec:be:f8:2d:10:a4:be:
                    7a:9d:f3:cc:fc:92:a7:87:18:ec:63:61:76:a9:4d:
                    b4:8d:1c:7f:70:12:90:1f:57:37:17:ff:cb:5e:24:
                    57:f2:74:2b:83:97:bc:9a:d0:72:d5:84:1b:6f:e8:
                    a4:61:9a:bf:4a:2f:df:01:da:64:4f:e4:2b:f7:af:
                    e2:89:58:c2:bf:68:08:ad:94:d7:4a:6f:9f:d2:77:
                    22:4d:91:35:4f:63:3b:ae:a9:ff:d6:e7:8c:ca:74:
                    34:61:3e:c7:5e:5d:f7:4d:12:bd:27:d7:84:c1:c5:
                    9d:6b:1c:04:d1:29:ad:d0:16:45:90:59:e8:cd:69:
                    b4:d7:6a:c2:be:7e:6d:38:e8:be:bc:24:54:16:43:
                    49:08:3d:11:d4:c5:bd:2e:f2:e9:3d:67:f6:72:a2:
                    83:d5:1b:5c:8c:fc:db:ef:10:04:fe:9a:a7:31:25:
                    af:0d:82:b8:f6:7f:80:08:cb:c5:31:40:b6:82:48:
                    cd:92:4e:45:b9:d2:75:b1:9e:b7:f5:7a:e3:0b:38:
                    56:f6:ce:02:c9:91:af:98:0c:60:96:5f:7a:68:55:
                    e3:83:9f:26:00:47:4c:ee:fe:6a:4c:a6:45:31:b8:
                    15:dd:2b:e9:22:9a:e4:c0:5b:e7:f3:35:43:f6:ce:
                    c7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8B:8F:C0:33:7A:3E:D9:BA:B4:6A:5C:8C:6C:BC:D9:5F:23:B3:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.54.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b3:ef:c3:60:07:6d:79:ad:78:72:1d:6e:13:98:36:a8:44:
         9e:d2:eb:6d:bf:9d:25:9e:09:6d:18:fc:b1:03:33:9e:34:0b:
         82:35:6f:ac:8e:90:fd:b7:45:2c:93:42:c9:18:dd:43:ee:ff:
         c2:ec:b1:a1:6e:07:4b:1c:46:b3:34:bf:5a:2c:be:6a:8b:55:
         5b:da:8f:67:cf:e1:4c:03:52:38:cc:c0:f1:b1:5e:4d:17:59:
         46:f0:49:c7:1a:80:2a:28:7a:1a:46:1c:ba:29:f5:59:11:15:
         78:98:24:49:4b:76:d6:b2:e0:56:6e:ab:76:f9:c6:ee:4d:c6:
         65:f7:2b:5b:22:01:dd:26:36:dc:25:07:d9:a0:73:d2:bb:6c:
         a2:46:92:5a:9f:7c:54:06:07:57:a9:49:d6:40:67:64:02:4c:
         51:b2:dc:9b:b3:a9:3b:1d:b4:76:4e:57:a0:e7:04:bc:a4:41:
         1c:6f:c2:c0:ed:fe:7b:a7:5b:63:55:43:7c:8f:e2:db:91:c7:
         99:63:e9:eb:3a:43:68:60:7e:88:b0:e1:c7:64:26:d6:86:be:
         63:a3:2b:b2:31:32:83:1e:1c:c4:85:f7:c1:e8:d0:8b:17:96:
         ae:44:c4:37:0b:23:52:ee:b6:76:6e:12:07:f3:a2:19:54:9d:
         10:58:2b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:10:52 2025 by rpki-client