Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa
File:                     b5f5f32e-5188-314d-a26e-19c0504c484c.roa (raw, json)
Hash identifier:          SWGetxwSWrkXKa9AmbHaVIW/sWWvYnAoom0tTHlVy5k=
Subject key identifier:   B8:9B:DD:76:27:19:B9:3C:50:E4:3B:72:F3:32:E8:40:FF:AB:BF:67
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584F348272504DECF124E1611980
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     11290
IP address blocks:        209.54.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:72:50:4d:ec:f1:24:e1:61:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=0345442f-9526-4930-8b5f-dda251e672b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:27:94:6f:43:a5:f7:91:66:07:2d:83:8c:7c:
                    62:65:1a:b5:1e:4d:1e:6b:e1:86:fa:c5:5f:34:83:
                    3d:70:52:b8:47:0f:39:f9:80:b2:74:29:7b:b7:ad:
                    cf:ea:6a:19:de:dd:72:b5:ce:32:5a:f5:77:d6:ab:
                    a2:4d:61:7e:a4:0d:c7:4a:fc:1c:8a:28:66:9c:eb:
                    aa:d8:ae:6b:8c:4e:cc:56:f2:c9:cf:5e:2b:59:16:
                    e6:ad:95:2d:ae:18:21:db:0c:fc:c6:f2:c5:75:a0:
                    1f:d1:74:c7:4d:3c:cb:f2:1d:fd:2a:4d:80:41:23:
                    27:e3:a9:4a:6a:24:8d:54:54:08:e1:9f:0e:ae:ee:
                    47:8b:77:c7:aa:5a:13:41:3c:bd:24:49:c1:dd:f0:
                    26:3e:f4:e0:7b:85:04:c8:95:34:a8:c7:94:09:77:
                    b7:0d:5c:7b:b1:86:14:d3:13:a2:ff:89:0a:38:d0:
                    dd:06:70:b0:9f:51:19:9a:f4:fc:dd:76:c9:8f:b0:
                    c5:37:af:d4:23:ff:e4:4b:20:eb:0d:70:e9:7d:df:
                    32:ad:f2:17:fe:b4:47:c2:fe:a4:c7:79:cf:62:21:
                    8b:ce:49:e1:e9:87:c7:58:00:13:8e:53:f9:f5:90:
                    dd:6e:10:26:c3:10:ce:c6:59:ea:d9:c3:0d:e4:ad:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9B:DD:76:27:19:B9:3C:50:E4:3B:72:F3:32:E8:40:FF:AB:BF:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.54.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:17:3c:10:71:88:5a:13:8f:51:61:e8:ef:80:0f:f8:84:3f:
         e8:9f:ea:c9:a7:ba:0a:07:da:46:ef:3f:39:68:4f:45:15:d7:
         8f:21:10:20:27:67:22:7e:6b:dc:c6:49:07:06:52:14:fb:bc:
         aa:05:72:ac:f8:16:9c:68:8c:fc:b4:1a:a6:db:cb:eb:ab:56:
         07:9c:64:ca:1d:b9:8f:e8:71:cf:b7:8e:19:ea:a3:93:00:f6:
         b7:82:d9:70:80:6e:4f:e3:04:4d:94:68:08:c1:4e:a4:4d:8f:
         5f:d9:15:82:2d:b4:8b:d0:c4:57:e4:d5:ee:57:d5:57:7b:36:
         dd:fe:14:41:d4:79:05:11:d1:05:03:51:08:83:12:06:b2:c5:
         c7:60:14:67:b1:fd:7e:d6:ef:95:b2:4f:87:b2:f1:4e:59:e7:
         4d:fb:13:53:de:dc:04:96:74:67:5b:fc:c7:58:84:80:54:89:
         72:47:ff:07:d6:13:4f:cb:53:e9:42:2b:c1:10:08:6d:b9:99:
         cc:8a:c6:f8:34:92:55:b8:eb:5f:53:c5:a6:6d:64:77:15:4a:
         1f:92:82:d2:37:da:be:14:d4:f8:ca:b6:3f:2e:ad:9b:ec:ad:
         b9:af:7a:e2:9a:3d:86:5e:09:d0:79:b7:bf:50:15:5f:0e:ef:
         1f:67:e1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:33:23 2026 by rpki-client