Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa
File:                     3c61c44a-b3fc-304f-b232-cf0f14a43933.roa (raw, json)
Hash identifier:          oWV2MpBhy4bRum7ONcYF1oF4JXQRFHeBXp2m2j8Xo5Q=
Subject key identifier:   A9:18:0E:45:9C:64:19:BD:27:BE:D7:9B:86:F1:0E:36:B2:26:A3:E1
Certificate issuer:       /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295
Certificate serial:       010D0C9F4328584E6F3A46DA6BB1EF87358F2440
Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     53281
IP address blocks:        192.122.149.0/24 maxlen: 24
                          209.209.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:46:da:6b:b1:ef:87:35:8f:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=fc69f23b-f17b-443a-9b85-9ac7feb1310e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:95:3c:dc:38:fb:2e:dd:c6:50:d0:a5:e4:
                    5c:c0:6c:e9:9c:cc:ed:2d:3b:93:58:74:e1:7a:e5:
                    1d:cc:75:d3:90:02:aa:af:e3:54:73:89:4e:14:9d:
                    9a:e0:d7:4f:48:7d:20:06:d6:2e:cf:da:18:e1:65:
                    b5:b9:d0:22:fc:58:24:0c:f0:fc:05:8e:15:9d:80:
                    f9:ed:63:15:d8:15:2f:f9:2f:ba:92:68:ce:4d:85:
                    9e:fb:0c:63:85:9a:d0:0e:6e:d2:4a:78:b0:db:b2:
                    3e:1f:31:c6:25:5a:5a:66:75:5d:fa:bd:b9:0d:e4:
                    a9:50:aa:ee:a0:65:26:5a:5c:6d:95:9e:b6:e3:2e:
                    14:65:d7:a0:db:e0:62:e8:ec:2a:74:8d:22:8e:af:
                    a3:35:cf:70:49:77:47:56:b7:ca:84:b7:ae:ea:a9:
                    02:05:ba:6a:a9:01:85:f9:e0:47:37:51:b0:1e:2d:
                    a4:90:49:1e:31:53:ac:27:ae:ec:31:9f:58:50:42:
                    bb:2e:15:c7:62:88:ab:d7:3b:f9:71:be:46:6a:ea:
                    e7:fe:32:12:bd:0a:8e:ba:60:aa:8c:1d:c8:05:fb:
                    98:1c:f2:f8:90:a8:8f:4a:90:4b:d6:df:d2:f8:13:
                    f5:67:89:45:81:9a:dd:a8:83:c9:37:45:93:98:2e:
                    eb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:18:0E:45:9C:64:19:BD:27:BE:D7:9B:86:F1:0E:36:B2:26:A3:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl

            X509v3 Authority Key Identifier:
                keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.149.0/24
                  209.209.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ab:d8:23:37:d6:be:1e:24:a7:f5:99:c9:49:48:75:35:1e:
         f7:c2:20:b5:f9:89:f6:1a:13:89:6e:9f:ba:7a:36:ae:dc:d5:
         5b:ca:15:cc:43:97:7e:24:08:53:14:55:98:3c:1b:89:f3:5d:
         bf:ad:8a:40:23:ca:fc:ac:d3:82:09:a8:d1:09:52:5f:92:44:
         88:86:db:45:1f:d1:96:2d:be:d6:e5:4b:ed:59:26:7e:ec:06:
         10:2b:ea:31:c6:ac:01:2f:ea:1c:b1:65:ea:d8:e5:80:73:e6:
         25:72:ec:f9:67:21:a9:64:3e:7e:92:32:ec:e6:c6:99:0f:12:
         84:fa:38:52:1b:ff:df:4c:f8:e8:5a:11:e8:bf:36:7d:87:19:
         0f:b1:8a:72:7b:4d:c3:57:93:4d:69:42:ad:ba:2e:8b:e4:fe:
         32:f6:17:51:8a:bc:e7:83:77:22:a8:a6:92:a0:d5:51:a7:b4:
         b4:11:28:89:96:ba:f9:d8:a6:0d:23:0b:70:ad:fb:bf:3d:49:
         20:9d:d3:fe:1d:7d:6b:cc:af:70:85:4b:ac:eb:6a:29:f5:69:
         a4:4b:6c:7b:fb:86:c2:3e:14:cf:7a:81:30:0f:82:8d:70:e0:
         d5:4f:8e:34:ed:f5:21:f2:97:8e:02:69:d3:37:38:49:07:8f:
         f8:a3:a0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:43 2026 by rpki-client