Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa
File:                     8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa (raw, json)
Hash identifier:          FaQzLp6bPu1KGxQ/ML7K5qxi1n0QFbv7QD+eIbMnjhA=
Subject key identifier:   4E:8B:0F:41:52:CB:4B:82:AA:76:2F:82:82:49:72:25:22:C2:AA:55
Certificate issuer:       /CN=95437874-24a3-4971-a87b-95b645e257bb
Certificate serial:       010D0C9F4328584B477C65994B8EEE15BD213180
Authority key identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     36556
IP address blocks:        207.22.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:65:99:4b:8e:ee:15:bd:21:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95437874-24a3-4971-a87b-95b645e257bb
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=1222ce68-bbf5-4b75-b5bf-1003e6a04ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:65:c2:cc:4d:9d:2d:3b:1f:0c:9e:c8:3a:fd:
                    2b:28:27:2b:38:60:1a:49:1c:25:21:80:5e:d6:84:
                    79:d5:3d:67:81:5c:0a:33:8b:3b:c8:ed:82:29:cd:
                    10:0a:52:85:0d:b2:07:28:7d:4a:f1:4a:57:e5:2d:
                    2e:d5:26:90:b5:73:c3:f5:fb:ec:d8:e9:5c:d6:cf:
                    b8:fd:4a:5e:8f:c3:83:dc:e8:aa:74:5e:07:e2:17:
                    a8:af:41:db:03:c8:07:be:b9:75:a7:66:4c:33:3f:
                    b3:ef:9c:a5:a2:26:9a:fe:ed:57:c2:1d:96:53:4b:
                    e6:60:6b:db:a9:94:b0:e3:9e:bf:55:04:f5:82:b5:
                    d9:d2:1d:1e:63:25:83:a8:f3:3c:f0:61:c9:5e:e7:
                    ce:21:82:71:ff:57:4c:26:52:b2:60:11:43:41:da:
                    ce:3f:a6:e2:e4:8c:c5:4e:38:9d:62:7b:3a:d0:18:
                    e9:e6:37:1f:c1:48:da:3e:05:ee:98:76:69:ad:79:
                    82:6d:ab:1e:ac:c1:34:0a:04:51:18:07:ae:1a:da:
                    8c:7b:7a:6c:60:16:af:a1:65:71:e8:36:1c:7b:c6:
                    bb:f3:49:34:91:55:07:1c:b8:16:d8:52:c3:bb:2b:
                    88:85:8e:07:8e:69:9a:a3:62:77:18:1f:00:39:98:
                    6f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8B:0F:41:52:CB:4B:82:AA:76:2F:82:82:49:72:25:22:C2:AA:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl

            X509v3 Authority Key Identifier:
                keyid:0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:1d:ae:39:37:2c:d1:b4:aa:90:47:71:bb:40:29:1d:1b:1c:
         71:b1:94:8b:d8:fa:d2:63:af:be:d1:32:73:2c:1f:48:0e:e7:
         17:1d:88:3f:39:82:41:6f:94:3b:98:2a:96:2f:65:32:cf:ad:
         91:bc:2d:89:65:ae:ac:f2:b1:e8:b1:6b:60:38:98:14:11:e5:
         16:34:5e:93:dc:a1:87:77:d8:19:2e:61:3a:17:90:60:67:26:
         87:ba:d7:c2:ef:33:a5:d2:00:0c:4e:51:f6:1a:f9:11:1b:f4:
         d4:a8:db:8f:6f:9b:12:0f:1c:e6:9e:37:a9:89:c6:08:69:35:
         4a:71:b9:e6:cf:b4:63:c8:ab:6c:30:56:0a:ba:be:43:64:c8:
         0a:c5:f8:ec:a8:36:0e:87:45:b2:85:78:e4:9a:63:e1:9a:bf:
         77:82:d2:78:3f:77:db:69:b1:a7:eb:d5:ad:f9:3d:fb:1e:bc:
         e2:17:68:c4:cf:fd:5a:a7:67:32:dc:b8:af:d2:1b:1e:e8:80:
         57:b5:0a:28:56:50:e0:49:ae:55:31:87:e6:99:4c:d2:b0:79:
         1a:db:f5:6a:3d:52:b4:82:a5:b6:76:fb:29:0e:72:15:c0:d1:
         16:8f:0a:ef:c5:ff:e7:ab:f4:74:45:38:6e:2a:5e:f8:36:9a:
         bf:76:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:06:02 2025 by rpki-client