Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4844797-2886-3b62-adf1-6833cad88a33.roa
File:                     c4844797-2886-3b62-adf1-6833cad88a33.roa (raw, json)
Hash identifier:          E5+HmO9gy4kae3Z0H/u/k/PPwk9T8c4vy7YvvdHtgNE=
Subject key identifier:   E3:73:97:18:4E:C7:07:F7:6C:BF:B8:37:E9:B4:51:B3:53:52:FA:A7
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A374ADC19662CBD2BE98A0100
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4844797-2886-3b62-adf1-6833cad88a33.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     11290
IP address blocks:        24.122.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:dc:19:66:2c:bd:2b:e9:8a:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=d7ffcfc2-f5ac-4660-a03c-df6e8b9516da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7e:0e:26:02:18:98:f7:15:0a:73:15:cb:7f:
                    f7:7e:27:93:93:aa:c4:ce:ae:08:18:02:eb:73:64:
                    6e:9c:ed:7e:1d:b4:55:b7:87:37:cd:06:c1:bd:51:
                    9c:bf:fa:6b:9d:74:2c:e1:d2:fd:4e:9d:1d:be:e5:
                    ed:a1:8a:cb:2a:7a:55:b1:4f:e3:5b:f7:c3:4a:a8:
                    51:97:ff:ed:95:ff:42:06:ab:bc:4c:10:b8:5b:20:
                    81:6c:77:bd:44:2e:d9:47:ee:a0:7e:72:16:2c:81:
                    54:a7:79:75:f9:b2:a3:88:13:d3:c2:e6:54:38:7f:
                    03:a4:3c:86:19:d6:73:6c:51:f0:53:3d:0a:4d:87:
                    49:bf:d0:a7:93:21:fb:00:ca:c3:1a:0d:84:ee:18:
                    6e:16:9c:c4:5e:ad:70:56:53:90:9c:42:09:2d:4d:
                    14:a5:c6:97:8c:fc:0e:48:bd:73:89:2e:5d:72:5a:
                    8a:f7:09:b4:2f:c6:88:78:fa:39:d9:ba:00:ab:a9:
                    78:8b:0c:d6:7a:e1:ea:e3:14:01:30:80:9a:22:e7:
                    c7:d0:2e:fe:df:27:6e:06:fb:93:27:3b:14:77:f3:
                    cc:a7:86:f8:6b:45:35:d6:09:be:90:b6:29:ff:1f:
                    8b:89:20:87:58:98:69:c0:5c:b4:27:f6:63:42:bc:
                    a5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:73:97:18:4E:C7:07:F7:6C:BF:B8:37:E9:B4:51:B3:53:52:FA:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4844797-2886-3b62-adf1-6833cad88a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:38:06:1d:aa:1b:38:4a:2d:6e:90:39:9f:48:cd:a5:ce:53:
         69:a1:00:1b:e5:97:47:b9:ac:e8:bc:11:50:58:1b:72:b6:65:
         9c:b3:f6:6a:50:0c:dd:84:48:10:61:2e:b8:45:15:6f:dd:48:
         3f:e8:c7:64:54:34:f2:dd:e6:a1:25:1c:d1:ea:03:30:0e:93:
         53:70:76:f2:f1:be:3a:76:f9:56:38:75:91:b8:90:ff:68:95:
         5e:b0:f0:7a:c7:fc:0a:bd:71:da:78:88:06:f2:d6:ab:74:00:
         20:ad:b2:42:c3:a9:d3:91:7b:a9:83:dd:2f:91:30:9b:fa:13:
         95:5f:aa:71:a4:d1:4d:fc:0f:a6:bb:d2:c6:82:14:95:7c:a7:
         22:d0:be:23:14:09:67:69:8f:f1:b0:1a:73:41:81:f6:1f:71:
         5b:72:55:e3:7d:b2:18:61:f1:bb:2f:a6:0e:b6:14:ad:f2:48:
         d8:5a:cc:0a:ee:3b:61:50:9e:da:e0:08:cd:47:dd:0a:4b:1f:
         44:17:ed:df:31:0b:6b:89:31:18:ae:ee:a0:98:60:82:43:1d:
         07:f0:e9:b0:ea:0e:fc:13:4a:4a:dc:65:68:cd:2b:f1:c9:51:
         25:52:2a:28:2d:93:9c:54:19:5c:ea:17:a3:29:2a:7d:fe:86:
         78:be:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:54:44 2025 by rpki-client