Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa
File:                     18e83aa2-2384-3c89-b95f-7230e577205d.roa (raw, json)
Hash identifier:          AGg7YYxRm9ZJXQ9luztNvs8ynS40XHxAHU9LNZBag5c=
Subject key identifier:   A1:B4:7E:AE:58:10:9C:16:E6:6C:87:30:45:F0:11:BC:45:01:D0:E8
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584E94EA5C550F9CADC99206B020
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     11290
IP address blocks:        170.249.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:5c:55:0f:9c:ad:c9:92:06:b0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=e1b71c5d-9dd5-4287-9c0c-b3f2936ee418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:b3:42:43:42:15:ee:be:7c:8a:0c:c1:75:
                    f2:aa:2c:1e:8e:60:f4:98:ec:dc:1c:7c:83:ee:32:
                    ec:bf:fa:f3:11:9e:44:2f:da:57:dd:77:3e:ee:cc:
                    f6:e7:51:49:7b:15:e1:c3:ab:69:3c:d7:20:3a:64:
                    ec:bb:c7:18:45:0c:46:ad:f4:ee:19:2a:eb:80:30:
                    8a:f8:a9:de:43:e8:1f:5d:ea:06:80:bb:3f:48:67:
                    0b:4d:f4:ac:1c:ea:d0:9b:0d:40:3c:fb:b9:fa:aa:
                    67:ba:66:71:61:d3:84:79:8d:19:e8:1d:5f:f5:b2:
                    db:62:e8:b1:a8:d7:65:70:4e:79:34:8b:92:65:d5:
                    f7:05:72:59:64:2d:e6:72:d7:6a:87:44:bd:38:f5:
                    f8:58:43:11:0a:54:c8:86:09:19:61:d4:90:42:9c:
                    29:84:31:21:9f:1d:53:38:51:32:85:47:40:70:c5:
                    f7:07:1c:c8:6c:d0:62:34:9f:0f:79:7e:35:84:32:
                    a1:41:a0:6e:d4:f5:1c:17:98:82:4d:f9:ed:3f:f2:
                    3b:c9:6a:15:4e:41:3c:9f:36:59:ef:17:5e:3e:f8:
                    b6:9c:a0:f4:57:55:03:ae:6e:b9:13:6d:6d:9a:f5:
                    c5:42:8a:a0:91:77:d2:3b:af:00:6c:4c:a0:26:77:
                    d8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B4:7E:AE:58:10:9C:16:E6:6C:87:30:45:F0:11:BC:45:01:D0:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/18e83aa2-2384-3c89-b95f-7230e577205d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.249.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:41:18:3b:1d:c6:3f:a1:f5:d7:65:3c:23:2e:2e:d1:14:33:
         5e:1d:29:24:fd:dc:1a:9c:06:13:3a:a4:65:8e:85:0e:11:41:
         58:dd:7c:da:e7:e8:75:97:03:0f:0b:2c:22:08:73:97:40:e5:
         33:4a:1e:31:64:4a:22:5a:d1:09:87:be:b9:83:aa:1b:70:b3:
         11:2a:02:38:71:20:12:ba:1f:46:fe:48:a1:aa:2f:cc:9d:e3:
         5d:81:ce:c6:34:9c:be:bf:03:63:be:e4:7e:be:cd:6c:ea:a2:
         37:cf:b2:21:bd:64:6e:ec:4e:59:38:2b:2c:a5:29:eb:9d:25:
         cf:56:a7:58:b1:3c:bf:41:a7:6b:59:1e:50:a9:4b:25:a5:eb:
         97:2b:b7:0d:07:98:ec:7b:cd:2c:2b:1e:90:c5:74:97:2b:fc:
         ac:cc:21:df:37:11:15:7c:81:fe:15:45:69:2e:df:a1:c1:d3:
         90:39:be:bf:d0:19:55:24:62:bf:34:4f:09:18:63:bf:60:cb:
         96:56:9c:c2:fa:28:5d:03:c2:81:3e:7e:9d:2f:65:9d:49:84:
         c9:02:6f:c5:6f:94:3f:1b:2f:3b:06:8f:94:99:aa:47:c7:3d:
         1d:45:9d:cf:05:f7:28:a2:ed:ed:87:e3:da:e5:47:da:9e:74:
         07:28:c3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:24 2026 by rpki-client