Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa
File:                     b36d5e8f-bac8-378b-8482-3e6f208fa162.roa (raw, json)
Hash identifier:          IEfpKIgIm3yEpPwcj3olKp48s7oi5to/xG48Qhzj0ZY=
Subject key identifier:   83:FC:9E:26:8D:AF:56:D3:E7:AE:5F:F7:DF:C2:D6:00:47:80:0B:32
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584B84E787C59C1F7BC05A3AB480
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     22065
IP address blocks:        40.143.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:87:c5:9c:1f:7b:c0:5a:3a:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=5d9fe1b8-dd89-48e3-9f15-d1b61ea71cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7f:68:c8:7a:97:4b:aa:6a:23:32:02:21:51:
                    a2:f8:57:40:f7:4a:5e:7f:77:c6:50:2c:c8:3c:72:
                    ba:f6:82:0a:5c:a9:0e:6f:a6:d4:09:2a:a6:a9:c3:
                    92:c9:cd:40:99:84:da:aa:fb:be:48:be:47:e9:5a:
                    91:0d:5f:7d:32:54:d2:71:8f:6f:5e:f9:bc:ba:c0:
                    86:97:c3:1c:63:34:38:05:2d:54:00:31:a4:3a:bf:
                    d3:22:b5:21:32:38:de:a1:c3:6b:64:32:7a:b2:4f:
                    14:be:40:25:91:53:0f:26:d3:22:7a:68:c6:90:38:
                    c1:f0:bc:6b:75:78:76:0d:7f:19:b9:36:18:fc:e3:
                    52:49:48:7c:b5:21:b6:b1:8d:52:1e:56:a8:5f:83:
                    07:0d:82:69:f2:e3:5e:f6:17:bd:68:ce:49:7b:c4:
                    13:ae:4f:74:e0:00:56:de:b4:c7:55:da:77:67:d3:
                    ee:3d:63:c5:4b:ed:0e:f5:6a:c7:4c:fa:e5:0e:49:
                    52:71:d8:f6:94:31:46:a6:a4:af:ce:a8:3e:36:9f:
                    b5:e0:cf:e2:ce:a2:7d:16:46:57:2e:c5:00:59:7e:
                    32:6c:26:65:3c:78:a1:c3:bb:07:04:64:58:86:38:
                    c6:4e:5d:8a:49:65:bd:e2:db:33:06:6f:e6:3d:f0:
                    32:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FC:9E:26:8D:AF:56:D3:E7:AE:5F:F7:DF:C2:D6:00:47:80:0B:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/b36d5e8f-bac8-378b-8482-3e6f208fa162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.143.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:94:fe:bc:c9:26:d0:d3:bc:c5:e6:e7:7f:34:0d:da:d0:34:
         5c:89:e5:28:8a:d9:89:b5:98:b8:06:b1:1b:7b:2d:39:9d:55:
         f6:e7:b4:c4:3c:ff:9f:ee:01:48:df:89:aa:48:47:64:50:fd:
         c9:5a:2f:8c:ad:ae:5c:cf:a4:22:45:63:a5:c2:f5:8d:8a:c2:
         7a:eb:a1:94:8d:59:90:cd:6f:3d:99:a2:fe:06:ae:df:90:b6:
         31:a4:24:ed:e3:8e:29:40:51:5e:d4:0a:b1:c6:a9:c6:b3:d6:
         79:8a:79:f4:0f:b9:16:38:38:94:78:84:a4:25:9e:9e:ff:bf:
         ee:ee:53:18:bf:83:92:b9:1b:83:89:b4:19:09:6d:08:04:19:
         b2:3c:b9:c9:39:3f:9f:73:6d:02:52:d6:d3:80:1b:1a:9c:30:
         12:93:4d:b0:11:6b:8b:90:c5:aa:c2:dc:ab:23:66:9e:82:34:
         3f:23:e3:6b:33:70:27:6f:31:14:f9:74:dd:aa:19:48:ea:81:
         ef:87:64:cd:d8:c3:d1:f8:00:5d:86:ae:b6:ca:c9:ab:37:78:
         5c:40:26:aa:ba:22:b0:63:81:f6:88:ef:3f:e6:79:41:d5:f5:
         45:6a:a2:8c:8c:ab:20:5a:3e:17:16:48:96:f8:6e:49:7c:5e:
         71:1d:5f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:43:08 2025 by rpki-client