Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/44317ae9-344d-3b8c-9ed1-37939fb83b58.roa
File:                     44317ae9-344d-3b8c-9ed1-37939fb83b58.roa (raw, json)
Hash identifier:          KMu02Vb7u4IBBPIe8Mn0WFW5aAEwD5D/NGe2XSlSOtw=
Subject key identifier:   29:E8:25:62:A6:1C:4C:A2:F6:35:A3:07:6E:D2:7B:4B:08:4F:60:40
Certificate issuer:       /CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
Certificate serial:       010D0C9F4328584AD5065A96B5EF1FA452962B80
Authority key identifier: 10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/44317ae9-344d-3b8c-9ed1-37939fb83b58.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     16276
IP address blocks:        40.160.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:5a:96:b5:ef:1f:a4:52:96:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=2e81f1d9-5779-4505-9fe5-5aae6a0f4784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:76:fb:54:87:39:28:4f:06:46:ea:19:69:24:
                    20:27:20:04:ef:b0:3e:ac:09:29:e6:00:50:54:4e:
                    12:e4:64:55:04:e0:cc:03:57:a5:03:05:95:e4:6d:
                    62:b1:61:e1:51:66:13:1a:00:4a:36:9a:2d:69:44:
                    59:68:d9:a6:b7:f3:c8:7e:ed:fe:22:01:e2:57:a2:
                    5a:c4:c4:9e:91:0f:95:a6:08:69:b1:21:fc:69:eb:
                    a9:6b:ee:db:ec:18:2e:8c:88:1c:a6:75:f7:6a:94:
                    66:1f:10:fa:6a:f0:6a:19:84:65:cf:58:ab:1a:20:
                    6e:9d:11:e0:86:d8:8b:9e:9c:9e:81:06:aa:90:62:
                    0d:4e:a7:c8:1a:e4:ce:09:a2:ba:21:c7:80:46:be:
                    3f:1a:9f:24:18:bd:28:f3:89:ce:05:0c:71:ac:50:
                    69:2e:84:cb:81:97:33:d3:0a:2a:77:a2:5a:1a:ef:
                    16:1f:ac:4e:f1:24:5f:f5:6c:b6:78:bb:c8:77:ac:
                    80:5e:04:bd:4b:89:4f:81:87:a4:e7:7d:a6:70:59:
                    22:d1:35:74:86:27:ac:85:91:78:72:55:28:cf:14:
                    6f:25:96:0a:cf:31:ed:45:82:6d:e9:56:ee:d6:02:
                    5f:1e:c6:3f:85:be:f5:cf:2d:00:93:5e:c6:9c:87:
                    23:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E8:25:62:A6:1C:4C:A2:F6:35:A3:07:6E:D2:7B:4B:08:4F:60:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/44317ae9-344d-3b8c-9ed1-37939fb83b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl

            X509v3 Authority Key Identifier:
                keyid:10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.160.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:77:1f:60:ab:db:1c:2e:d1:c1:9b:34:98:fc:fa:92:4a:4f:
         59:20:c5:08:9a:d0:53:98:2b:38:d1:2e:d8:70:7a:66:7e:c6:
         5d:de:f4:7a:04:ae:75:07:9a:4d:89:91:5c:b8:a2:29:37:3a:
         ff:52:2d:38:87:61:db:6a:8f:61:ac:94:61:d3:f2:06:8c:a7:
         08:a9:a4:da:97:6d:6f:e1:8b:15:b9:e7:bb:0a:22:13:df:8c:
         70:63:63:94:3e:b6:42:e8:00:05:6c:0b:82:4c:7e:85:9b:80:
         10:c6:98:bd:b6:ae:f1:dc:ef:91:26:76:ba:17:1a:b6:52:87:
         87:40:31:40:f7:b2:0d:42:7f:c8:f0:42:c7:0e:ac:8a:1f:91:
         7f:1d:ec:e8:5a:dc:7b:4a:34:fc:fd:db:16:dd:b9:f1:d9:ca:
         e9:0c:0b:69:5d:26:7a:15:85:09:dc:4c:a4:62:31:fa:26:f5:
         87:1f:79:17:9c:4c:b7:82:7c:8a:cc:24:c8:b9:8d:74:35:4d:
         d5:86:d8:cd:63:7d:2e:90:12:35:0d:81:4f:43:a7:10:1b:2b:
         1b:e0:89:a7:9e:a9:7e:f9:fc:ea:87:8e:28:29:ad:50:7d:ac:
         08:1d:af:8c:21:9d:bb:44:4a:bd:e4:6e:e2:b3:fa:1e:bf:cb:
         52:d0:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:39:12 2025 by rpki-client