Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a91395db-8f35-3e47-962d-19b64b128e81.roa
File:                     a91395db-8f35-3e47-962d-19b64b128e81.roa (raw, json)
Hash identifier:          I8q62WuLxh8MX9lg9NNDKC36CP1SX8HW9umm+creJ3w=
Subject key identifier:   DD:9A:03:09:D7:3D:55:CB:CD:98:CF:CD:59:0F:49:84:87:72:EA:89
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F4328584AB4EB685E354E041F871CE7C0
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a91395db-8f35-3e47-962d-19b64b128e81.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     55440
IP address blocks:        149.20.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:68:5e:35:4e:04:1f:87:1c:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=2e457c3c-89f1-43f4-912d-f8a68de51e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:b3:4e:e1:fb:35:b5:d5:93:60:10:5b:38:
                    4f:36:4e:46:e7:dc:74:2c:b9:04:ed:78:56:c6:81:
                    b4:bf:f2:33:b6:1c:95:4a:c7:e2:fb:3a:c6:1f:70:
                    f9:79:c3:54:cb:f4:fd:c6:cc:a0:57:00:fc:96:a6:
                    5d:c3:41:cb:ad:85:3b:3a:75:2b:79:23:e3:7b:d4:
                    55:96:9f:d5:b5:96:3d:61:1e:66:a6:7e:82:e5:e2:
                    93:c2:e9:8c:75:3e:80:5f:a9:cc:40:fd:97:15:19:
                    2d:08:f0:ca:cf:0e:c6:f8:9f:d7:15:76:01:b2:41:
                    2c:1d:2e:74:89:7d:3e:10:33:f6:58:23:a0:47:a3:
                    3e:b9:e4:1b:a3:9c:26:34:bc:f2:ca:a1:1c:d8:92:
                    27:cb:28:42:da:19:d8:6a:3e:7b:a3:47:48:46:6e:
                    91:43:28:21:5a:43:02:bd:f2:4f:d1:f8:72:4a:12:
                    42:de:71:23:28:9e:41:f9:ad:ed:a7:4d:f3:8a:02:
                    fe:75:5d:fc:12:4b:48:8a:3e:39:85:61:0c:f2:8f:
                    c2:fb:de:1b:45:b0:a3:12:6a:95:bc:c3:86:aa:be:
                    02:aa:65:db:60:92:2b:ef:b9:4e:02:dd:75:06:c2:
                    6e:8e:da:61:10:24:6e:4b:b8:6b:3b:64:b6:29:30:
                    54:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9A:03:09:D7:3D:55:CB:CD:98:CF:CD:59:0F:49:84:87:72:EA:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a91395db-8f35-3e47-962d-19b64b128e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:9b:b1:44:2f:40:cc:dc:de:98:7f:ed:f1:a7:25:bc:fc:bd:
         3c:d4:4b:70:cc:60:69:cc:be:a5:08:d4:09:06:16:cb:87:13:
         5a:98:82:62:04:86:1d:79:8e:75:07:33:10:ec:9b:4c:5c:a1:
         49:28:51:0d:99:54:8f:99:73:c3:83:e4:bb:2a:11:f7:61:a4:
         6d:a4:02:16:66:cb:5c:18:38:3e:3b:08:23:9e:a6:71:f3:f1:
         dc:b6:c4:01:a7:68:6b:28:7c:22:bc:84:5f:6e:39:76:2e:dc:
         3a:50:0e:4b:40:a2:9d:60:47:b8:98:02:92:5f:6e:26:98:05:
         3f:1d:a0:59:da:ba:23:e2:0d:38:0d:49:4d:1f:46:b3:67:4a:
         71:fa:f8:8e:02:d4:49:09:50:af:1b:ab:89:bf:91:d2:34:6e:
         44:02:1d:1e:91:34:ce:4a:2f:0b:db:fb:a7:ff:94:09:00:4e:
         53:95:25:f9:0d:b4:82:0d:b1:f8:5d:49:13:0f:d7:cf:51:5b:
         43:7a:5b:71:df:af:53:d8:8c:d7:df:3b:34:02:e4:c7:9a:7e:
         dd:78:54:f8:a9:06:9e:0e:c0:a2:76:3e:7e:fc:69:b9:f9:ae:
         66:bb:80:30:45:2a:64:e2:e4:b3:22:f7:bb:0e:cf:ff:3c:aa:
         80:d8:57:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:43:55 2025 by rpki-client