Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/14e0d68a-e9a3-3874-a835-a415908609c9.roa
File:                     14e0d68a-e9a3-3874-a835-a415908609c9.roa (raw, json)
Hash identifier:          wCpQgnXsyA8GdtR6Is/nmjnb29HHGnyAfP8+mGoqHb4=
Subject key identifier:   B4:3D:CC:75:F8:08:6F:9A:4B:D2:33:79:7B:F0:43:02:D2:E6:3A:D1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AAEEEAE72085AFF826A43C4A0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/14e0d68a-e9a3-3874-a835-a415908609c9.roa
Signing time:             Tue 29 Jul 2025 21:32:20 +0000
ROA not before:           Tue 29 Jul 2025 21:32:20 +0000
ROA not after:            Mon 27 Oct 2025 21:32:20 +0000
asID:                     20115
IP address blocks:        173.40.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ae:ee:ae:72:08:5a:ff:82:6a:43:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 29 21:32:20 2025 GMT
            Not After : Oct 27 21:32:20 2025 GMT
        Subject: CN=6e17052b-95b9-4f1b-8bd2-c97b5a1d2440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:1e:c7:2e:cd:1f:d5:9c:1b:4f:c1:df:0d:
                    a1:99:ff:ca:03:f0:3f:84:3f:47:c4:02:6e:76:6c:
                    6e:48:be:cb:bf:1d:a8:8e:24:51:c2:4e:e3:e8:a0:
                    2d:57:be:bb:a0:29:f8:5a:25:92:c9:c2:54:b3:b5:
                    92:6d:fb:33:1e:48:f4:ed:88:f3:70:60:f4:af:0d:
                    a5:a5:30:c1:0b:74:99:11:0b:31:3f:ca:6e:6a:92:
                    d4:7e:0d:29:64:e3:7c:fb:a7:27:ab:d4:74:08:9c:
                    96:3c:2d:7f:c1:4b:5b:17:9b:dd:4e:14:55:2b:52:
                    a3:55:02:e0:46:09:b3:13:b5:e4:d1:0c:d2:96:60:
                    86:3a:2d:ae:b4:0a:c4:60:c3:40:f8:c4:f2:ce:f3:
                    47:04:20:ee:f0:82:4c:40:23:7d:b9:b7:22:6a:90:
                    73:12:87:d4:73:13:15:c8:d7:fe:5a:70:db:42:54:
                    dc:09:f6:8a:b9:fb:13:c6:0d:69:42:9a:ae:e8:46:
                    5a:25:04:32:69:22:f9:ca:84:14:3d:4f:2f:91:71:
                    df:38:0e:9f:7e:27:46:2e:72:67:28:cb:bd:10:68:
                    aa:7f:5d:f7:61:ae:3f:05:2a:10:9e:a9:7a:45:37:
                    1d:90:20:55:ec:5a:77:ae:71:bb:1c:89:c7:91:be:
                    a8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3D:CC:75:F8:08:6F:9A:4B:D2:33:79:7B:F0:43:02:D2:E6:3A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/14e0d68a-e9a3-3874-a835-a415908609c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.40.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:84:4e:31:50:de:cc:5b:4e:ad:cf:aa:87:b8:7a:f8:57:66:
         fc:2e:fc:d9:70:70:70:28:0d:ce:f8:ab:9e:4f:65:14:54:9f:
         0c:72:b9:e3:08:03:e4:08:a9:e9:33:bd:34:cd:85:b2:e1:7c:
         db:4c:30:2c:ba:ec:83:69:1b:71:23:32:9a:af:5e:38:d4:93:
         eb:d5:d3:21:85:fb:78:c7:c4:33:73:9e:6a:eb:f6:02:e0:47:
         96:05:9b:b3:6f:ba:99:50:49:68:da:8b:61:ec:1e:8a:5b:b8:
         30:d0:d7:37:64:6c:7c:75:8d:a3:ea:25:02:2a:2b:e0:24:37:
         79:ac:98:60:b2:f3:f0:18:79:ad:b3:44:16:f3:c6:f1:56:15:
         52:46:50:06:0e:1f:37:aa:cd:7b:7c:6b:2a:ea:b8:1d:f3:28:
         be:e8:21:54:b3:4d:80:2a:68:ad:6d:09:3a:a7:bc:04:95:22:
         cd:53:08:f1:e9:61:a6:cc:4a:76:29:86:81:a2:19:38:fe:45:
         1b:18:69:3b:63:0d:85:f1:cf:6b:7b:07:34:0e:1f:86:cd:4c:
         cf:7b:4d:f0:2b:ab:22:1b:f6:cd:7b:7a:c7:25:bd:63:ad:2c:
         04:db:94:48:32:8d:c0:10:cd:28:a4:2d:c0:41:d3:a1:e2:80:
         6c:42:31:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:49:00 2025 by rpki-client