Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2c733a41-1d85-3fff-a8e9-5ef96865182f.roa
File:                     2c733a41-1d85-3fff-a8e9-5ef96865182f.roa (raw, json)
Hash identifier:          g4W4/15jR9gnIk1U8E0/sFQeT2wSqHLNXWzrk3JKi/g=
Subject key identifier:   42:6A:01:1E:94:0A:E0:52:F2:90:B8:EC:C8:5D:8F:85:AA:D2:A2:F3
Certificate issuer:       /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
Certificate serial:       010D0C9F4328584E8C8A3DA895CDEFC953B9DC80
Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2c733a41-1d85-3fff-a8e9-5ef96865182f.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     395437
IP address blocks:        143.55.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:3d:a8:95:cd:ef:c9:53:b9:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=b59e9c02-2a81-4923-884c-990888a48bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e6:1c:84:8b:d4:22:07:21:4b:d8:4d:02:77:
                    71:53:ac:89:15:1d:e7:3b:f4:cc:e8:bd:c7:2c:86:
                    ae:ee:95:da:35:06:de:df:c7:99:ed:0e:69:49:47:
                    64:c9:a2:43:bc:8b:84:ba:4e:56:87:78:d1:88:aa:
                    78:79:8c:88:f0:f0:06:83:e4:6f:12:32:90:24:fa:
                    b8:31:04:89:53:bc:81:95:76:05:14:9c:db:e9:78:
                    75:ef:9b:13:8f:ae:aa:16:ba:5c:d4:d5:77:2c:05:
                    0b:98:a1:1f:9e:42:e8:42:6a:41:ab:98:90:70:01:
                    22:67:61:89:04:d3:f3:e8:61:04:40:b0:2a:db:dc:
                    f1:5e:45:c6:f7:9c:c1:f7:97:9e:43:5c:b7:86:a9:
                    27:a5:62:89:75:ac:87:fd:d9:6c:8f:93:28:e6:02:
                    78:67:bd:44:9c:97:4c:a3:22:78:fc:a2:24:93:dc:
                    60:14:6b:03:a4:be:c9:ae:b9:0e:2e:bc:2b:ba:61:
                    fe:97:48:b0:de:ca:04:5e:3c:d2:ca:ab:af:19:39:
                    8a:ed:f3:10:cc:75:57:84:89:2b:51:92:69:45:63:
                    68:19:af:74:6a:fc:e2:a2:49:76:f7:07:8f:51:ba:
                    3f:c8:0c:c4:bf:18:16:e0:3c:9f:eb:1d:8b:23:21:
                    6c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6A:01:1E:94:0A:E0:52:F2:90:B8:EC:C8:5D:8F:85:AA:D2:A2:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2c733a41-1d85-3fff-a8e9-5ef96865182f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:0d:98:18:25:4c:39:d9:4d:7f:e2:d6:b3:63:28:8c:9f:
         e3:79:6d:88:6d:37:eb:bd:b6:97:9f:a0:a0:c4:fc:78:5b:15:
         45:4c:f8:dd:13:0a:c5:ef:6f:97:00:91:4a:4d:be:d4:41:13:
         fa:3c:6b:36:3f:bc:13:6e:38:44:03:20:c2:17:18:f8:3d:a0:
         2d:19:a8:1d:09:fd:c7:db:1e:93:da:7a:1b:43:72:f4:ac:98:
         bb:f6:9f:b0:ae:fe:1d:1a:f7:67:db:b9:3f:e0:1d:bf:86:2c:
         75:2f:05:43:03:ac:df:3b:d2:43:b4:c3:84:91:b2:6c:a1:05:
         c7:03:12:ff:57:27:67:2d:69:04:0a:e0:f8:ee:da:73:3e:e4:
         a9:3e:aa:5b:d3:1e:db:a0:9a:42:9a:74:35:f3:e4:46:6e:45:
         1f:7b:24:94:ff:02:5d:4a:3f:36:df:0a:11:ab:ef:f0:b7:4d:
         06:b4:4e:01:1d:3a:56:7a:dc:a7:65:50:1c:95:78:18:82:2d:
         16:15:d8:3d:49:b6:b5:12:e1:4a:71:91:27:b6:04:88:c4:e8:
         1a:56:15:88:fb:61:ae:c5:ce:f3:f1:4c:08:b4:51:39:21:05:
         24:5e:d2:ce:35:65:30:da:e5:f3:a4:cd:65:06:6e:55:75:d6:
         5b:e4:c0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:51 2026 by rpki-client