Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b93f0bfa-6321-30a0-9834-67e1293e1040.roa
File:                     b93f0bfa-6321-30a0-9834-67e1293e1040.roa (raw, json)
Hash identifier:          KvV993qFuI0RPLedlTymrXTuw9lWJrI7sfT1CbNDmp8=
Subject key identifier:   20:13:70:38:8B:0F:58:C7:72:1C:B0:C2:35:1E:FD:AB:1C:30:06:DE
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584DB1DAD1ED27F6D4B944937E00
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b93f0bfa-6321-30a0-9834-67e1293e1040.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     11290
IP address blocks:        205.237.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:d1:ed:27:f6:d4:b9:44:93:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=002ebf92-5693-4b8f-a7f5-765332eab82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:70:7f:d9:6b:b4:06:1d:b1:32:87:34:85:
                    37:19:30:59:08:94:d9:f8:ef:bb:65:7a:6a:22:8a:
                    5e:17:55:00:03:53:4d:d1:11:9a:74:21:8d:9d:80:
                    5e:5c:f2:b4:51:5f:41:4c:d1:4d:96:df:b4:b5:a8:
                    78:85:0e:a0:46:1c:9f:99:ca:e8:74:0c:d1:cc:05:
                    9b:13:a4:cd:42:8e:37:d1:88:74:ad:b2:61:9e:21:
                    73:e0:d8:bb:e4:f5:dd:08:68:66:58:1d:f1:db:ab:
                    1e:28:77:1f:0d:62:32:62:98:15:99:71:4c:2e:8f:
                    d8:2e:4e:81:14:a3:96:ca:ac:3b:2d:fa:2b:7f:7f:
                    be:1d:a6:01:37:d8:94:e6:25:b4:b1:8d:22:c8:7b:
                    26:9c:62:86:a6:8f:77:6b:da:57:a7:88:a4:87:a3:
                    6a:7b:80:25:d8:48:3d:0a:b1:cb:48:92:8b:f1:ca:
                    94:1c:ac:11:4d:7b:9a:cb:94:9b:74:56:4f:fc:a1:
                    f2:71:2a:6a:0f:e7:91:e7:2f:ec:d7:82:48:36:65:
                    79:af:bc:6e:92:a9:12:10:4a:f2:fc:24:8a:8a:46:
                    40:2c:e7:05:66:c8:0e:13:c0:71:c6:35:8c:6e:37:
                    22:2f:47:a5:ce:5b:37:9c:0f:c1:30:fd:d9:d2:79:
                    6e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:13:70:38:8B:0F:58:C7:72:1C:B0:C2:35:1E:FD:AB:1C:30:06:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b93f0bfa-6321-30a0-9834-67e1293e1040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b4:4a:b5:a8:37:ee:26:3f:67:e2:eb:1f:ec:bf:41:7d:d0:
         8a:01:c7:43:42:c5:1d:92:23:f3:52:02:d8:66:fb:5f:b1:6f:
         a4:5c:fb:f7:64:a5:8b:f6:4c:11:d6:0c:82:ca:9e:90:31:6d:
         27:24:78:89:80:45:fe:d5:ab:a1:50:fc:42:2c:22:00:94:03:
         b9:f1:2e:0c:74:48:2f:41:a3:95:1c:fd:ef:2d:3b:20:13:38:
         26:28:e7:78:9d:10:dd:65:8a:c4:f1:e6:37:b1:86:8b:79:b4:
         cc:bc:9b:37:3e:ab:b7:1b:84:32:88:4f:9c:16:de:b4:4d:e8:
         4f:26:fa:21:1c:22:56:55:85:ab:3a:eb:3d:e1:30:3d:fa:23:
         2c:60:7b:09:85:9a:78:37:98:96:72:14:2f:68:5a:27:a6:54:
         d7:93:be:7c:58:1f:44:dd:d6:f9:f5:1e:5b:b7:2c:3b:0b:b3:
         6f:bf:4c:b4:92:a1:10:7d:96:65:02:a3:88:21:6e:18:dd:e4:
         7c:dd:79:a0:cc:50:29:d3:92:e6:93:7b:8c:78:50:96:25:06:
         99:77:76:df:9c:cf:27:51:f4:6f:dd:29:72:8d:a3:e4:a3:ce:
         f9:27:6c:15:09:ce:9d:82:f6:5a:76:71:b6:12:e1:51:9f:76:
         3d:7a:7b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:34 2026 by rpki-client