Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dee838bc-f216-31c6-87dd-91cad1fcab6a.roa
File:                     dee838bc-f216-31c6-87dd-91cad1fcab6a.roa (raw, json)
Hash identifier:          Odb7OTX/Q17fF6lxTtJM9nMW1Y8GDldb4Jo1f/8aZkg=
Subject key identifier:   7E:24:F7:1B:11:FC:AF:AE:02:B6:41:01:2E:84:3A:A6:55:BF:52:E9
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584E9A7FD4548A753976B6C87100
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dee838bc-f216-31c6-87dd-91cad1fcab6a.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     11290
IP address blocks:        24.122.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d4:54:8a:75:39:76:b6:c8:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=0f8ec637-b8b5-4be6-9765-53a241f39170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d6:63:fa:40:f5:4a:2d:48:83:d8:26:c3:e7:
                    a6:e8:8c:6c:96:db:42:8c:36:7d:f6:73:bf:b3:f8:
                    02:5c:25:79:55:47:ae:a5:64:1d:89:75:0c:45:dd:
                    16:9c:34:57:01:c1:6a:d2:d3:91:67:c3:f8:3d:d4:
                    c9:8d:f5:8d:0e:83:25:21:48:f1:1a:d1:ab:7d:ed:
                    f0:9d:02:15:43:66:e5:2f:ec:73:78:97:3f:c8:96:
                    dd:d1:f4:be:00:8a:72:07:b9:73:08:73:b8:3a:01:
                    49:bc:a3:e6:fe:8a:1c:98:18:7c:11:bf:33:70:72:
                    ec:b6:70:89:3b:4c:20:5e:a8:e5:68:91:b7:33:b5:
                    da:3e:d6:34:c2:42:7b:0a:99:07:f3:df:60:2a:6c:
                    91:92:4a:ac:9b:2e:b7:d2:d4:07:db:57:93:f1:ab:
                    9e:b6:49:4c:7e:8b:43:1f:a9:6e:58:42:93:56:cf:
                    67:40:d9:9e:15:a5:0d:d6:20:df:98:03:7d:47:d0:
                    3e:ed:77:e6:06:4c:52:a3:17:64:67:0b:69:4c:d7:
                    7c:7d:ba:c4:9e:e8:f0:04:2f:47:fd:ac:2f:41:1f:
                    a5:7c:58:4f:b0:ae:74:67:94:48:7c:78:4e:07:b7:
                    c3:6c:a1:ae:dd:0d:37:5d:6c:e1:5a:fe:ee:62:39:
                    5f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:24:F7:1B:11:FC:AF:AE:02:B6:41:01:2E:84:3A:A6:55:BF:52:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dee838bc-f216-31c6-87dd-91cad1fcab6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:1b:44:65:8c:1c:ab:75:69:e0:e0:dc:72:1a:fd:a3:3f:1c:
         6e:a0:ad:73:8f:d1:6e:68:b5:31:eb:57:07:49:5b:3c:aa:5e:
         9d:6b:98:49:9c:4d:37:68:8a:67:c3:aa:db:3f:4d:15:20:ed:
         df:bd:ef:1d:5f:a2:53:4a:8c:6c:b2:1d:d4:72:93:13:7f:2a:
         ad:9f:17:42:b1:9e:c8:4a:7d:cf:8a:3f:b3:e9:e9:c8:33:4a:
         be:75:72:02:5b:1e:4a:63:e4:02:f8:e9:c3:c9:9d:ac:a6:f5:
         a8:3e:76:c1:d7:8b:a7:49:49:16:31:43:5b:d1:58:ff:4c:c1:
         01:6b:fa:a0:9f:c0:28:0c:e9:50:59:f0:54:f7:77:45:20:38:
         79:fe:9c:84:84:f9:88:04:ca:36:ab:b3:8c:dd:4f:30:74:3f:
         33:51:1a:78:ad:06:e8:9e:74:48:37:b8:f2:5b:ca:ff:24:94:
         06:e3:e0:55:19:f5:7e:33:93:20:e9:a2:7b:fd:df:dc:fa:59:
         21:c7:8a:db:38:76:a8:b2:e4:58:55:c0:4f:dc:b4:b1:be:88:
         66:c0:2a:0a:92:c9:e2:f4:5b:67:f9:d0:56:34:42:15:f4:6a:
         20:63:94:c3:04:19:3d:f4:40:52:ee:29:7d:18:08:ce:17:83:
         57:67:e6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:53 2026 by rpki-client