Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3eff0cfa-371f-32f7-9a45-34628c453640.roa
File:                     3eff0cfa-371f-32f7-9a45-34628c453640.roa (raw, json)
Hash identifier:          MN4c5ddpzAqHdmYvki5YxzwoF94uSWQeKiTuAj9UXFQ=
Subject key identifier:   21:D0:67:CA:F9:24:A7:27:D8:FC:DA:BC:94:0E:05:87:E4:A3:20:BE
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584E94EA5CDC092264AC2911138C
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3eff0cfa-371f-32f7-9a45-34628c453640.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     11290
IP address blocks:        108.171.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:5c:dc:09:22:64:ac:29:11:13:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=f0618f3c-da9f-405a-b17d-762363c30412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ed:26:ac:72:82:6d:1e:b5:b0:a7:0e:25:60:
                    26:b3:b1:57:a0:33:3c:3b:f5:2b:54:8e:ec:51:bf:
                    30:53:3d:de:51:ec:19:69:fa:2b:a5:a3:da:7f:71:
                    96:e0:54:37:0e:63:e3:f8:78:77:77:4b:4c:39:53:
                    71:19:17:c2:ff:1c:b5:6d:d4:9c:50:d6:17:ad:d1:
                    b9:1c:4d:e3:81:9a:bd:7b:34:44:06:32:84:6b:14:
                    09:46:73:4f:b0:60:07:46:4f:39:87:95:df:2b:ca:
                    74:7b:33:68:be:68:60:9b:16:15:7c:63:92:9e:f7:
                    9f:e9:ba:01:2c:04:9c:33:1c:16:7e:22:f4:62:76:
                    64:d3:dc:20:cd:70:74:18:dc:48:b2:a8:81:6c:7d:
                    6f:cf:2f:92:7a:70:88:87:4b:ab:0f:69:0f:49:d9:
                    62:d3:4c:1e:68:07:75:aa:a5:2f:3e:b7:a3:f7:59:
                    b6:1d:da:a7:ff:2a:73:4f:65:33:32:3b:1f:69:96:
                    f4:76:0a:c9:4b:08:98:31:ab:e3:a5:65:d4:66:33:
                    5a:1e:30:90:c7:05:f6:47:50:51:73:9c:51:39:58:
                    8e:df:42:4c:39:78:dd:cc:47:a2:c2:c0:d4:29:fd:
                    68:a1:af:e4:2f:71:d3:75:6f:00:b0:17:aa:9c:87:
                    64:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D0:67:CA:F9:24:A7:27:D8:FC:DA:BC:94:0E:05:87:E4:A3:20:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3eff0cfa-371f-32f7-9a45-34628c453640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:91:61:1f:22:50:3a:b3:c3:01:1d:9f:59:c6:b7:6e:d0:29:
         ed:91:8c:50:02:1d:28:6e:ba:16:a3:76:e3:ef:9c:e0:09:32:
         29:de:26:1f:37:c9:c8:f6:94:f9:be:39:e7:db:60:3f:7b:be:
         a7:f4:b3:00:b2:dc:42:a9:5c:47:a5:aa:d3:cc:9e:e0:36:c4:
         00:01:b7:ee:2e:6a:8c:bb:a6:c8:5f:fd:32:2e:23:e7:24:26:
         22:08:ca:69:3c:e0:0c:1c:04:5b:f0:b8:bd:01:c4:65:7a:b9:
         bf:31:80:e8:59:8e:a4:76:62:9a:9e:5a:61:c2:b3:78:e9:94:
         34:cb:f2:2c:87:d9:be:7e:1a:e4:cb:22:26:3e:84:2a:2e:33:
         4e:94:4d:00:7b:fc:ac:2a:86:6c:34:78:bc:7d:c4:28:40:86:
         d2:a6:46:7c:50:37:ae:c0:4c:fd:04:56:4b:b2:9c:39:e4:7f:
         da:d4:11:50:da:5f:80:2a:63:16:92:10:75:7f:12:4e:d6:36:
         c1:e4:fe:6b:86:b3:a3:1c:cc:4e:6b:d3:f0:c9:a4:be:90:f9:
         68:9b:9f:20:1c:8f:4a:9e:ca:78:98:ba:74:0e:4b:b5:e7:ba:
         ac:c0:8c:96:38:42:0a:82:01:b1:45:c1:e3:c4:1c:c9:80:79:
         95:17:b7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:23:54 2026 by rpki-client