Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/5aee81ee-b86d-30fc-8175-236e6876842c.roa
File:                     5aee81ee-b86d-30fc-8175-236e6876842c.roa (raw, json)
Hash identifier:          GMBtStyNMqSsrMM6bmTUZjx7B5Llu8EnekISpTyrv20=
Subject key identifier:   BF:10:AB:24:18:5B:B3:F3:12:30:4D:C8:73:C4:A9:22:9F:31:B3:3C
Certificate issuer:       /CN=40cd115f-d8b2-4c56-834e-28a4b39f52d1
Certificate serial:       010D0C9F4328584AF52130DF3971C29F241D5180
Authority key identifier: 4B:6A:CB:FC:3F:E3:50:4D:B6:60:1B:F5:14:C1:A1:51:7E:7C:A3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/5aee81ee-b86d-30fc-8175-236e6876842c.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     394280
IP address blocks:        66.205.248.0/23 maxlen: 23
                          204.153.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/40cd115f-d8b2-4c56-834e-28a4b39f52d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/40cd115f-d8b2-4c56-834e-28a4b39f52d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:30:df:39:71:c2:9f:24:1d:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cd115f-d8b2-4c56-834e-28a4b39f52d1
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=5753d493-15a6-4cf7-bcc9-2d0fc42ed055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:cc:68:ef:39:1e:78:f3:bd:24:31:a7:10:
                    1b:92:41:4e:1d:4e:35:74:21:53:20:4c:20:8f:bb:
                    9a:96:c8:88:07:72:8d:f7:76:25:ac:f2:5a:7b:be:
                    d1:e0:d8:7e:f7:b2:c2:7b:c3:1a:85:41:3e:82:2d:
                    bb:f0:d1:4e:3d:32:3e:05:b5:01:35:ad:0a:48:42:
                    72:7c:ea:c4:73:9a:76:ee:f0:d2:a4:37:a1:29:ce:
                    a0:3e:cc:00:86:a8:b1:9c:c3:0d:6d:bb:95:da:d9:
                    f0:f0:28:12:75:56:04:14:10:be:b6:7e:a1:1c:c9:
                    78:a4:0f:f1:ea:10:02:5a:b6:a8:c7:4c:ea:ab:50:
                    f5:bb:ff:c2:08:52:1e:06:21:f7:2e:50:48:d6:c1:
                    0e:53:aa:a0:0c:f1:f3:d1:89:6d:82:03:81:ea:35:
                    ac:25:37:37:94:ce:f6:96:7d:b1:03:5e:7c:0e:b9:
                    8b:a5:44:3c:d2:12:4d:d3:50:c6:87:ad:43:a1:71:
                    a4:ff:73:84:f2:d9:1e:0e:84:c8:3f:7a:30:09:90:
                    5f:3f:69:fd:be:bc:ef:17:a3:5a:d8:ea:97:62:53:
                    8f:aa:d5:52:36:42:00:7f:09:e8:b2:09:4c:43:af:
                    5d:8c:05:6e:d9:f4:29:2b:a2:82:1b:27:c2:7a:a2:
                    6a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:10:AB:24:18:5B:B3:F3:12:30:4D:C8:73:C4:A9:22:9F:31:B3:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/5aee81ee-b86d-30fc-8175-236e6876842c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1/40cd115f-d8b2-4c56-834e-28a4b39f52d1.crl

            X509v3 Authority Key Identifier:
                keyid:4B:6A:CB:FC:3F:E3:50:4D:B6:60:1B:F5:14:C1:A1:51:7E:7C:A3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40cd115f-d8b2-4c56-834e-28a4b39f52d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.248.0/23
                  204.153.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:01:4b:5e:b8:b9:76:31:db:bd:ca:c9:a5:38:c0:4a:62:dc:
         fc:5a:e2:bd:6c:70:6b:3b:e7:21:17:47:cd:c7:18:d1:d1:46:
         cf:a3:96:7e:a8:a9:31:66:21:4b:ec:7e:4a:33:e0:d1:b8:e1:
         28:e7:a8:2f:4e:54:9d:71:f5:5a:0c:2d:de:7d:a0:cc:95:16:
         cd:48:c3:bc:ba:78:eb:8a:46:30:c2:dd:5d:9e:18:4b:ae:ae:
         91:13:52:80:3f:6c:77:4e:b5:1c:bd:be:44:15:ea:e5:7e:f9:
         6d:5b:59:ba:38:85:bc:5e:6b:05:1e:11:69:ac:21:3f:23:32:
         04:c4:31:c6:d1:fc:3f:44:d5:fd:d1:09:8e:04:f2:c5:90:d3:
         cd:ac:21:1a:4e:c7:31:39:d5:5f:a9:39:2b:4c:df:69:a2:1d:
         a7:7b:82:f6:30:2a:3e:eb:1f:8b:79:9d:15:a9:3d:f8:05:7f:
         75:3f:71:61:85:a0:1c:63:22:3f:98:da:87:9b:c8:86:df:10:
         24:33:bd:d3:ed:b0:3a:8a:81:1c:02:3e:d0:1c:3c:20:bb:5e:
         d9:26:d6:b0:d2:88:8c:0f:ee:45:28:3d:99:a1:50:5c:8f:35:
         17:45:f3:16:c6:a5:bd:93:06:ee:db:99:db:bc:61:a7:d3:f1:
         13:60:26:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 06:07:25 2025 by rpki-client