Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/d836b078-cfc3-3068-83bc-df582fe5c892.roa
File:                     d836b078-cfc3-3068-83bc-df582fe5c892.roa (raw, json)
Hash identifier:          u3305ga3iR6t9f8QQvg74VSVfU4AbSdZmXLI6bxI+Mk=
Subject key identifier:   4E:F1:39:BF:6B:5F:1B:A9:09:6B:B8:64:62:00:D2:8F:03:D6:85:A8
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584AF0F142D283F563DF9F888170
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/d836b078-cfc3-3068-83bc-df582fe5c892.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     11958
IP address blocks:        40.143.85.0/24 maxlen: 24
                          40.143.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:42:d2:83:f5:63:df:9f:88:81:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=25f0e494-8825-414b-b345-e667a9bf979e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:69:f0:96:43:4b:a6:d4:e8:9a:a0:75:1d:
                    d7:37:f9:3b:42:ed:fa:bb:49:e1:9b:f8:bd:c9:1e:
                    47:ce:74:c8:db:fb:2c:c8:55:94:22:dd:c5:a8:37:
                    c5:91:63:29:83:e0:5c:23:b3:f8:1b:11:9d:53:0e:
                    78:87:ea:cf:d0:5e:3b:90:7e:6d:7a:bc:2b:b3:cb:
                    f0:62:33:8a:c0:0e:67:f1:8d:f3:56:55:e3:73:a9:
                    5a:2e:ef:ff:22:a5:65:78:4c:a2:c7:f0:cd:d4:5e:
                    a9:03:e8:f7:f1:fd:a0:01:39:81:62:09:a6:05:0e:
                    d5:8e:6b:d7:01:07:3d:4a:2f:d1:8c:89:bc:9e:d5:
                    74:52:91:5f:17:aa:bd:e1:11:c5:22:23:87:f1:72:
                    2f:e5:66:c0:7c:c0:01:f5:64:f2:ff:a8:a3:f9:71:
                    3f:9c:02:0d:88:e6:a5:c0:43:75:15:d4:ff:f1:f2:
                    2f:7c:12:b5:c5:cc:ea:5f:94:09:99:36:67:75:e8:
                    5d:09:ad:10:27:09:43:a9:7b:5f:6a:c1:35:83:ed:
                    66:da:cc:07:df:42:96:80:99:9d:1f:5b:86:88:ba:
                    38:2a:9e:dc:cf:46:eb:82:c7:5e:c0:7e:18:b3:21:
                    2c:58:d8:d6:20:61:c6:c0:fc:da:91:e8:62:93:79:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F1:39:BF:6B:5F:1B:A9:09:6B:B8:64:62:00:D2:8F:03:D6:85:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/d836b078-cfc3-3068-83bc-df582fe5c892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.143.85.0/24
                  40.143.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:29:08:2e:f2:b1:bd:8d:97:e8:b2:43:55:80:6d:1d:44:1b:
         ac:7a:6a:a9:c9:f4:27:2c:a9:0a:8f:3c:c8:dc:f6:34:fc:4a:
         37:5d:b5:f4:7a:c9:22:16:38:25:dd:36:95:63:85:16:ac:10:
         0a:54:10:b1:87:94:08:b9:ab:4d:af:cf:a6:44:7e:37:ae:f3:
         99:bc:ba:3d:0c:bf:df:7a:d5:e7:df:5e:f4:19:ca:83:62:61:
         e5:66:03:8d:4d:65:df:56:69:6d:5e:0c:52:02:7c:a9:81:a0:
         4a:f5:7c:69:c7:c6:01:da:25:cc:48:80:03:52:49:83:a7:62:
         7d:39:18:d5:df:e4:23:9e:96:aa:62:65:a1:1e:41:be:01:29:
         c8:9c:3c:29:99:f6:91:6b:7f:ff:f1:48:94:8b:ed:4c:5d:32:
         94:5e:05:62:7d:9b:90:e0:49:0a:33:b0:58:66:01:30:26:97:
         06:d0:69:1b:69:d6:e3:bd:07:76:f7:78:65:61:80:d2:32:f6:
         2b:6a:f1:b4:8d:08:1f:d1:1f:6b:90:84:31:ac:f8:47:e4:3e:
         fd:9f:e1:87:15:c1:6a:a6:0a:46:35:da:9b:9b:70:cd:77:c8:
         dc:0b:05:3e:f1:3a:2b:a4:98:5a:4d:59:e9:7f:2a:1f:30:25:
         de:fe:96:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:59:05 2025 by rpki-client