Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa
File:                     cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa (raw, json)
Hash identifier:          lT3YE3gRycdWUctVcb6cTVlcbuyN7EcnVXetLnJH3TU=
Subject key identifier:   71:54:75:6E:2F:09:FB:E9:EF:E2:DF:B1:37:A5:80:25:81:77:1C:A7
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A374ADCCA138B1E35AC8C5918
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     11290
IP address blocks:        24.122.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:dc:ca:13:8b:1e:35:ac:8c:59:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=33083e29-efd7-45ff-9f58-8768dde236ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a1:0f:eb:54:1b:54:f7:5f:56:6f:b1:30:83:
                    0f:33:e6:e0:66:e2:9f:51:f0:97:c7:21:f4:1f:6c:
                    d9:32:2c:b4:97:38:55:6f:b8:d0:dd:7f:63:a7:02:
                    08:db:21:f8:a9:4d:c3:29:f0:7e:01:25:5a:d3:59:
                    03:01:01:f1:e7:63:82:d5:09:a4:51:48:8a:82:6e:
                    5b:85:28:f6:3d:2c:fd:cc:e1:74:6d:19:df:9d:7e:
                    ee:7a:14:9f:15:2a:dd:cd:97:6d:9e:ed:b3:20:40:
                    a4:dc:96:8a:63:d8:ad:f8:10:60:a6:47:86:63:d4:
                    2e:53:c1:11:13:3f:92:30:16:f5:00:8b:cc:b2:a1:
                    32:30:a4:fd:eb:7d:31:1d:5c:c2:22:0b:f6:ff:ad:
                    68:2f:2c:e4:ce:a4:1b:79:ef:6a:76:5e:64:42:6a:
                    2f:34:8c:8e:b1:56:e3:89:62:74:22:51:ed:71:94:
                    5e:c8:21:db:82:95:0f:a6:f3:0b:89:05:c4:a8:94:
                    95:de:58:78:bd:03:2b:b4:1c:26:63:05:d2:34:6f:
                    d2:2a:2c:8b:58:d3:5d:44:0e:1e:e9:ab:3b:ca:45:
                    27:2a:3a:25:ef:1b:39:d9:d1:45:1f:6d:e4:02:97:
                    9c:08:89:20:c8:71:01:83:54:99:80:de:d8:6b:75:
                    38:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:54:75:6E:2F:09:FB:E9:EF:E2:DF:B1:37:A5:80:25:81:77:1C:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:54:1f:09:85:ea:6f:5d:ea:da:51:26:78:12:5c:cf:48:48:
         bd:46:68:65:63:54:8c:db:52:1b:bb:7f:90:51:1a:03:9e:90:
         15:4f:da:f2:fb:1e:75:ad:bf:1b:0d:21:3f:df:a0:47:7b:06:
         16:c6:59:b6:2c:ee:28:96:f7:87:32:3c:9a:ab:0b:a0:1f:53:
         9b:0c:5b:96:2d:d5:c2:67:f9:6d:f1:c5:32:b4:aa:28:10:a6:
         f6:38:56:8b:cd:aa:ab:a1:c2:b2:5a:6b:61:42:bc:b9:4b:b4:
         70:f2:8e:b3:47:01:c1:b5:99:49:05:a7:82:7a:ae:7d:63:52:
         01:82:28:a1:85:cd:67:a5:86:da:52:60:02:c6:58:23:de:9d:
         8e:91:8a:6d:f1:28:b4:6e:dd:3d:1c:1b:fd:d0:84:2a:7e:8b:
         7e:f8:51:c8:17:ff:12:35:5b:e5:cf:44:a9:5a:e4:e5:53:97:
         2c:36:44:6d:d0:d3:a5:22:2b:3b:97:95:2d:b4:59:10:4a:a3:
         83:8c:b7:76:e9:d0:3f:b2:80:e2:4f:21:59:94:0a:cf:3e:50:
         65:3e:7d:fd:b9:42:84:25:cf:6c:d1:74:06:10:12:d3:14:a4:
         8d:77:a4:4d:00:93:e8:c1:69:88:4c:24:d5:71:1c:34:06:6c:
         5a:3c:eb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:11:56 2025 by rpki-client