Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c79bef03-9c1a-32d5-8e9b-2883bc06835c.roa
File:                     c79bef03-9c1a-32d5-8e9b-2883bc06835c.roa (raw, json)
Hash identifier:          WmjW6WJtFKOvWjcjlKKUJ69gXx5914BPIGUPSymv/LA=
Subject key identifier:   05:39:24:EE:1D:15:D2:65:15:14:FA:09:54:DD:EB:D5:EE:23:C3:0D
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A374ADCEC438C2790C298AF00
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c79bef03-9c1a-32d5-8e9b-2883bc06835c.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     11290
IP address blocks:        24.122.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:dc:ec:43:8c:27:90:c2:98:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=b6bbf233-6bd0-4832-ba77-a78b0eac818c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:db:64:e7:52:61:42:87:67:c9:ec:dd:f9:75:
                    4d:f9:c3:49:b4:6c:38:e6:0a:76:83:68:a2:a4:b7:
                    c1:dc:97:34:f0:0b:7a:9d:c9:43:d8:5f:cc:ee:30:
                    0f:0e:38:72:68:2f:cb:3b:29:96:54:4e:c6:60:1f:
                    06:00:8d:17:d1:37:6c:43:4c:21:a2:77:41:57:76:
                    a6:54:95:8c:8b:54:29:72:8a:b2:41:03:59:ad:72:
                    0b:10:f4:fa:22:ef:38:9f:a2:6b:1e:17:a4:e4:ea:
                    d2:36:7f:0d:7d:21:79:7a:9b:74:8a:a4:ce:b1:96:
                    d9:51:79:76:99:92:61:eb:c2:3e:5e:11:6d:cc:22:
                    92:e8:90:cb:55:09:cb:0c:f2:4d:97:4b:55:70:b7:
                    36:6d:f4:7c:d2:f3:80:f3:32:2e:f9:8f:6d:bf:61:
                    86:ff:a1:f7:9b:85:3f:8b:82:c5:e3:8b:c3:c9:d6:
                    b4:4f:2d:8a:e7:66:d8:d8:74:18:70:c1:57:79:2c:
                    7e:57:6e:b7:99:9e:31:bb:b1:d7:71:1d:03:39:0f:
                    49:e6:96:2c:ad:a4:5a:19:3a:ce:2f:69:db:94:9d:
                    ef:d1:59:03:ba:eb:cc:30:5c:10:79:eb:91:a3:56:
                    96:a7:dd:6e:17:06:da:75:4f:37:96:d0:5a:43:9f:
                    02:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:39:24:EE:1D:15:D2:65:15:14:FA:09:54:DD:EB:D5:EE:23:C3:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c79bef03-9c1a-32d5-8e9b-2883bc06835c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:39:24:05:74:2b:ce:77:9c:9a:bf:30:fb:0c:6f:7e:32:5d:
         fe:6a:52:6f:0b:2e:a6:87:5b:7c:3d:d5:31:95:12:1c:ef:1c:
         7a:bb:0f:07:e9:27:37:ff:cb:bd:5f:0f:fb:70:f1:a8:48:46:
         d3:2e:5f:15:38:20:27:87:1a:a2:91:ac:f5:ed:e7:0b:cd:aa:
         a4:95:40:d8:d4:a3:99:9b:43:92:f5:e6:df:d2:04:20:cc:18:
         4d:b0:9a:d8:5d:37:2f:ee:04:35:b9:b4:84:e6:01:88:2b:22:
         d2:90:68:ba:e8:c2:ec:e5:18:fd:0f:64:f0:7d:ad:8c:36:9c:
         5a:d9:df:12:37:8d:b2:53:6d:9d:79:11:74:94:e8:b5:1e:0d:
         1e:7f:f7:ae:7a:9c:9c:f9:96:84:b0:90:c7:95:4b:3d:eb:91:
         fb:93:f9:89:5f:90:91:93:a7:24:c6:5e:61:38:81:26:58:08:
         44:58:84:be:1d:0d:a7:4f:8b:f1:23:bd:ad:50:c8:df:12:69:
         a6:f9:2a:18:44:12:ff:5a:97:e8:25:98:36:b7:cd:05:7d:a3:
         fa:5b:bb:a2:65:ae:76:9d:06:46:2c:d0:c8:35:14:1b:3b:5f:
         d5:4b:9c:25:13:19:c8:3c:a1:50:97:3a:32:a7:c9:b2:82:9a:
         38:3b:f2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:54:14 2025 by rpki-client