Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fa1681d0-8765-3498-93bb-ed37569fe8e6.roa
File:                     fa1681d0-8765-3498-93bb-ed37569fe8e6.roa (raw, json)
Hash identifier:          3d/OTvWfwKVWm/NBXTSdO0Ar9kS6a5jDj1Lbi8lTq18=
Subject key identifier:   50:1D:C8:BC:A7:BE:9D:D9:1A:06:35:E5:CC:89:C6:34:7F:38:57:FE
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A23C016FE102C83A471CEFE00
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fa1681d0-8765-3498-93bb-ed37569fe8e6.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     11290
IP address blocks:        24.122.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:16:fe:10:2c:83:a4:71:ce:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=8f26453d-e6a6-4dc1-89ec-b2dcdcc33ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:83:95:ea:ca:c9:03:0d:06:20:fc:db:92:a4:
                    e0:ab:eb:1d:2c:e7:87:78:80:75:cc:6e:51:06:10:
                    8a:ec:03:29:dd:ec:11:b5:42:b9:36:e5:81:3f:84:
                    33:1a:91:d7:4c:12:42:29:69:2a:c8:5a:1b:10:fd:
                    84:94:17:0b:fa:91:36:af:99:ef:ef:94:2f:e0:aa:
                    33:94:61:66:ad:3d:6e:31:18:60:83:1b:24:3b:01:
                    77:2e:a7:91:db:b1:d5:3e:da:95:e5:86:b0:db:35:
                    08:1f:05:de:b4:1f:24:b9:6f:ce:c1:8d:8d:88:d3:
                    5a:05:ea:24:97:a8:78:2e:ad:3c:fe:35:c9:3c:68:
                    83:45:5d:85:aa:ed:b3:47:4f:7f:45:87:34:35:ec:
                    23:2e:5f:64:4d:a6:26:e6:e9:08:74:90:c6:93:3f:
                    ef:a9:94:6d:ec:e5:51:c4:12:e8:a3:84:3d:eb:47:
                    0e:71:37:17:4f:2b:81:74:88:d1:b8:f7:4b:8c:64:
                    36:89:fe:a7:92:9d:b6:1f:e6:8e:46:8b:70:12:ea:
                    9f:01:e2:22:29:75:54:1d:da:61:75:13:a4:08:44:
                    df:ac:7f:d0:9e:bc:26:ee:37:07:96:f7:55:53:b0:
                    68:69:8b:f2:62:7e:5e:57:21:78:22:e5:dc:23:2d:
                    09:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1D:C8:BC:A7:BE:9D:D9:1A:06:35:E5:CC:89:C6:34:7F:38:57:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fa1681d0-8765-3498-93bb-ed37569fe8e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:44:e3:1e:da:6f:71:bd:f2:37:96:3d:0e:5c:78:f8:a5:bb:
         d3:ba:1c:1a:24:8f:1b:78:5b:58:e5:93:01:85:17:39:80:4e:
         e6:30:46:e6:a7:f0:e9:c6:bd:6d:54:39:ba:bc:08:2e:a1:f8:
         b8:6e:3e:22:6a:3b:dd:85:82:98:66:63:da:a0:4e:8b:54:c5:
         4e:a1:71:29:e6:cc:b3:be:b4:3b:70:82:7f:e3:71:02:ab:5e:
         77:96:6c:97:cf:1a:cc:f5:94:c1:2f:ca:8b:1a:51:d5:ab:21:
         7e:25:69:bc:86:8b:1a:4f:e0:3d:0c:52:76:7d:14:4a:51:68:
         53:ab:79:6e:36:56:2a:40:61:7d:4c:fe:3a:db:f3:92:37:4b:
         5d:19:d8:5f:e6:61:5c:22:71:f8:c0:30:04:80:6c:fc:34:36:
         0b:8d:78:f9:e2:59:c7:d5:d9:0d:1a:0c:76:4e:97:7f:9a:d4:
         25:af:27:26:b8:ca:ab:00:4d:c4:3c:1f:b0:7d:d0:99:ef:ce:
         c2:86:aa:b7:31:50:fc:2f:f1:f8:91:73:9f:87:76:b6:45:96:
         d2:10:d9:b7:d6:0f:5e:74:b7:8e:16:d3:a4:d7:1b:f5:62:1b:
         d8:78:27:15:01:65:20:d5:ec:0c:a2:e8:e7:0a:f2:1a:77:7b:
         f2:82:b6:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBb+ECyDpHHO/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk
OGYyNjQ1M2QtZTZhNi00ZGMxLTg5ZWMtYjJkY2RjYzMzZWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIOV6srJAw0GIPzbkqTgq+sdLOeHeIB1zG5R
BhCK7AMp3ewRtUK5NuWBP4QzGpHXTBJCKWkqyFobEP2ElBcL+pE2r5nv75Qv4Koz
lGFmrT1uMRhggxskOwF3LqeR27HVPtqV5Yaw2zUIHwXetB8kuW/OwY2NiNNaBeok
l6h4Lq08/jXJPGiDRV2Fqu2zR09/RYc0NewjLl9kTaYm5ukIdJDGkz/vqZRt7OVR
xBLoo4Q960cOcTcXTyuBdIjRuPdLjGQ2if6nkp22H+aORotwEuqfAeIiKXVUHdph
dROkCETfrH/Qnrwm7jcHlvdVU7BoaYvyYn5eVyF4IuXcIy0J7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFAdyLynvp3ZGgY15cyJxjR/OFf+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZmExNjgxZDAtODc2NS0z
NDk4LTkzYmItZWQzNzU2OWZlOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHpQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAtE4x7ab3G98jeWPQ5cePilu9O6HBokjxt4W1jlkwGFFzmATuYwRuan
8OnGvW1UObq8CC6h+LhuPiJqO92FgphmY9qgTotUxU6hcSnmzLO+tDtwgn/jcQKr
XneWbJfPGsz1lMEvyosaUdWrIX4labyGixpP4D0MUnZ9FEpRaFOreW42VipAYX1M
/jrb85I3S10Z2F/mYVwicfjAMASAbPw0NguNePniWcfV2Q0aDHZOl3+a1CWvJya4
yqsATcQ8H7B90JnvzsKGqrcxUPwv8fiRc5+HdrZFltIQ2bfWD150t44W06TXG/Vi
G9h4JxUBZSDV7Ayi6OcK8hp3e/KCtiY=
-----END CERTIFICATE-----
Generated at Wed Jun 18 20:58:12 2025 by rpki-client