Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4b0948fd-844c-3fea-8a44-af6bcc1940cd.roa
File:                     4b0948fd-844c-3fea-8a44-af6bcc1940cd.roa (raw, json)
Hash identifier:          Io/NLWRlLOJC1uGFMCSlOl0oioNmi6jbCAGJ4cH+Fy0=
Subject key identifier:   26:79:C7:84:DE:7A:BB:47:B5:DA:CF:1F:D9:6C:94:A1:C0:E6:07:95
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A30503E2DE0CA511441087980
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4b0948fd-844c-3fea-8a44-af6bcc1940cd.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     11290
IP address blocks:        205.237.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:3e:2d:e0:ca:51:14:41:08:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=b25a4e03-816f-41ba-a20b-af086e00cf42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:5b:45:62:1e:01:cb:0f:0a:0c:74:de:17:
                    19:d7:59:5f:71:e7:e6:5a:f0:2e:60:b3:3f:36:32:
                    d5:eb:b6:a3:ca:00:22:ba:01:b2:c2:14:94:e5:aa:
                    2e:04:6c:7d:58:d5:d1:2a:05:f5:1a:37:e5:73:73:
                    20:ca:56:f2:e1:29:d0:71:15:0a:65:11:08:6d:4c:
                    0b:bb:40:ce:e1:39:bb:28:ee:15:73:1e:a6:38:90:
                    7e:51:0a:34:75:99:c3:b3:39:6f:31:93:3c:16:c5:
                    ee:ff:b9:71:8f:b1:52:8c:d4:92:bc:9b:92:6c:a9:
                    7f:38:9a:5c:b5:ae:0a:36:b4:d4:d5:4f:be:b1:00:
                    47:06:9c:e8:6f:04:f6:02:a3:f1:33:ef:49:60:db:
                    51:9d:83:36:b0:15:4a:e5:05:86:8f:7a:0a:3f:62:
                    25:12:5e:40:c6:65:2a:dd:bb:4b:68:33:06:3a:2a:
                    9d:3e:05:8a:08:21:4b:61:2c:69:85:02:58:42:a8:
                    ec:10:35:da:3a:3b:90:22:43:cd:8d:8a:7a:2e:c9:
                    09:a8:29:91:f6:b9:2e:09:6c:c9:9f:e7:96:08:cc:
                    6b:90:d8:fa:07:6a:16:b9:30:a4:6c:0e:54:a8:b3:
                    f0:a0:b9:ba:9e:93:78:2b:82:04:51:e1:af:96:a4:
                    88:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:79:C7:84:DE:7A:BB:47:B5:DA:CF:1F:D9:6C:94:A1:C0:E6:07:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4b0948fd-844c-3fea-8a44-af6bcc1940cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:18:b2:2d:0c:f4:ea:2e:3b:e2:6d:85:43:f6:f6:cf:8e:51:
         84:b6:a0:86:37:04:7f:36:a7:f6:2d:24:d3:f7:ad:71:04:4a:
         c7:85:d9:75:1e:8e:5d:ec:4c:45:d2:6f:2c:c8:bc:46:ca:30:
         1c:a1:82:18:ea:8c:8a:53:13:e8:f2:0a:65:82:b0:0b:0d:f8:
         b9:c5:3d:c6:a0:aa:80:a6:7f:33:e2:a3:e7:95:54:cc:65:2e:
         b2:08:ab:07:3e:90:81:c2:ec:f1:5a:16:8b:5b:89:0e:8c:53:
         ab:1d:6b:eb:2a:ac:a2:c5:79:51:dd:39:fd:ff:d7:1a:f6:5f:
         a1:07:1a:6f:d6:5a:b1:c8:13:11:5c:fa:76:d7:3e:2c:41:b4:
         d1:ca:2b:73:c4:b9:51:a6:fd:4d:0c:c4:a2:be:a8:59:dc:f7:
         1e:30:ce:b8:35:af:aa:fd:90:b0:3d:62:ab:57:89:63:ed:4f:
         10:21:ef:26:5a:d8:bd:66:f9:ba:48:6b:40:44:3e:c8:dd:e2:
         ca:ff:7c:48:3b:bd:37:e9:c5:09:0b:26:a6:f9:ad:49:03:d3:
         0e:31:c0:86:62:72:51:fa:13:3d:1e:af:b0:30:2d:75:80:d5:
         70:c2:c3:91:03:bb:3c:ea:71:67:da:0f:97:f3:a5:b6:dd:10:
         b0:fb:ef:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:41:14 2025 by rpki-client