Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/e4c840a6-7c44-37cd-8d84-325c36434df5.roa
File:                     e4c840a6-7c44-37cd-8d84-325c36434df5.roa (raw, json)
Hash identifier:          SDNuZIjUxFrmiG6pOAMrK8YMDthdoBR5AqRTKz69tG0=
Subject key identifier:   1C:7D:45:63:8E:32:07:8C:82:C1:5F:EF:2B:13:B3:A7:66:2E:A9:12
Certificate issuer:       /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
Certificate serial:       010D0C9F4328584DAC456B3B430698D2C1A3A380
Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/e4c840a6-7c44-37cd-8d84-325c36434df5.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     395437
IP address blocks:        143.55.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:6b:3b:43:06:98:d2:c1:a3:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=14b6c4bf-0325-4ccb-9fe3-4c3a68d2e2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:36:e4:e5:b3:46:77:44:96:43:28:04:4a:
                    cb:5e:d0:32:56:ef:04:62:e1:45:09:fe:ae:fa:c7:
                    16:c4:32:f7:43:d6:97:7c:bb:50:5f:be:cb:f3:7c:
                    8a:53:70:30:22:44:50:57:4c:a0:e2:99:f0:39:08:
                    59:c3:c5:d8:b8:08:42:c6:ff:41:d0:62:ac:a3:cd:
                    c1:29:05:4c:b6:de:17:d6:81:50:41:e1:9e:7a:36:
                    3b:89:bd:24:a1:37:c6:a2:0b:e2:cf:b6:43:a5:80:
                    43:42:ae:1e:9b:af:95:20:bc:d6:d4:8a:48:5d:e9:
                    7b:93:89:cb:bd:89:e3:1e:34:c4:93:b3:1a:08:0a:
                    b7:bd:2e:cd:ad:8c:fb:94:d5:f9:29:32:5a:09:e0:
                    6a:09:6d:d8:a4:85:d6:53:9e:70:3c:33:61:f2:a1:
                    5b:66:b0:3c:b3:d6:34:d5:8a:df:c0:84:2f:46:65:
                    e3:4f:8b:7b:31:7d:32:62:96:63:6a:2a:6d:3d:a5:
                    ed:78:0c:64:e3:2b:d9:b2:15:ce:5b:17:87:3f:eb:
                    f9:ed:09:1a:de:c1:43:02:c4:be:8a:fd:52:da:b8:
                    6a:c5:75:39:d7:35:29:33:9b:9c:32:6b:d2:6f:cb:
                    5f:ea:1d:2d:a1:a4:13:02:20:16:7c:82:81:10:07:
                    b7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7D:45:63:8E:32:07:8C:82:C1:5F:EF:2B:13:B3:A7:66:2E:A9:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/e4c840a6-7c44-37cd-8d84-325c36434df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:dd:67:1b:34:22:7a:b1:46:e5:bf:32:fe:fb:64:bd:e3:6e:
         dc:b0:6c:9a:b5:4f:92:f0:7c:c7:74:00:c4:2b:b3:31:ed:fc:
         6d:de:83:83:4b:36:fe:e8:85:be:a4:f9:1d:3f:54:7c:f9:d2:
         32:18:aa:1a:f1:27:16:87:ab:88:34:ff:59:f7:fe:3b:4c:aa:
         da:60:b8:17:a8:af:1c:5c:ae:cd:4b:92:12:b8:61:66:59:ef:
         aa:e8:31:86:b0:32:3d:c0:9e:7d:c3:a3:41:37:ae:ad:a1:34:
         c8:0b:9d:2c:2d:db:82:d5:c5:08:cb:80:10:34:f1:5c:60:38:
         45:c3:2c:76:9f:90:77:4e:cc:ed:90:c5:a2:28:ad:51:22:0f:
         b3:30:17:b2:3b:b2:14:e4:24:ce:ad:1c:d1:1f:a9:96:66:93:
         b1:e2:6c:b2:be:71:58:d4:1a:69:55:4a:74:09:ef:93:59:f3:
         c8:2a:81:5a:24:9f:09:5a:15:9a:38:5c:f5:53:d8:0a:84:df:
         27:73:4f:82:8d:6f:0b:fd:2b:de:a1:c9:1b:eb:8d:2a:79:89:
         96:32:21:22:19:4e:64:e1:a3:55:25:47:e2:0c:7d:41:28:94:
         60:9f:50:8b:f9:03:f6:d0:e0:98:a5:4e:59:58:39:01:5d:e3:
         46:60:bc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:41 2026 by rpki-client