Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df25439f-a8a5-3d84-9c28-12364575d70b.roa
File:                     df25439f-a8a5-3d84-9c28-12364575d70b.roa (raw, json)
Hash identifier:          KS8gUuazUreV+YQgh9lVVpFWi4qoRCNo+sV+IsknXK4=
Subject key identifier:   4C:56:A6:28:40:95:0A:FC:B8:D0:F4:1B:73:BF:8F:E5:4F:18:74:4B
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584E9A7FD46B4DE15503FA9DCA00
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df25439f-a8a5-3d84-9c28-12364575d70b.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     11290
IP address blocks:        24.122.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d4:6b:4d:e1:55:03:fa:9d:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=2c1de674-9ad5-456f-b496-69f6f6f78328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:03:99:3f:e6:57:79:f1:82:58:ec:af:00:
                    ee:53:3b:77:ee:71:f8:31:96:99:20:26:f9:9b:b8:
                    a4:bd:b3:67:89:b6:ec:cd:2f:5b:e3:20:54:3c:51:
                    18:d9:cc:41:1c:fb:86:52:35:80:ad:e1:ca:2b:da:
                    4b:2a:b1:50:b3:65:e7:ed:4b:57:27:78:b1:4a:1d:
                    a9:7e:7f:aa:41:68:45:21:9d:df:84:e8:5b:1c:5c:
                    41:ea:2c:f9:f8:89:1f:0c:27:b5:d9:68:29:01:a3:
                    b0:c8:1c:2d:bf:20:f9:61:fc:31:4b:9d:87:ed:00:
                    03:a3:e7:aa:66:1b:63:f2:fc:30:d0:ef:b8:18:be:
                    1d:df:b9:6f:e5:fb:7d:2e:b5:bd:ff:32:38:d6:58:
                    43:08:32:57:f7:6d:f7:59:86:06:58:9d:58:f8:b6:
                    2f:98:8f:e5:b5:21:f3:00:00:4a:15:14:16:9b:35:
                    74:70:5e:c0:e7:90:84:8d:22:5e:58:7c:95:26:9f:
                    67:d8:3e:2c:16:a5:1c:ea:7d:44:53:5d:83:aa:5e:
                    f1:26:cf:0c:1a:de:9f:43:49:e7:47:f0:0a:a9:ae:
                    93:f9:88:ff:e4:56:0f:26:96:09:a6:5d:fd:e4:7b:
                    2c:94:9c:5e:13:e2:0f:1b:fa:4a:63:38:7d:e5:a4:
                    e0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:56:A6:28:40:95:0A:FC:B8:D0:F4:1B:73:BF:8F:E5:4F:18:74:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df25439f-a8a5-3d84-9c28-12364575d70b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:03:9e:83:22:22:d1:10:0f:42:3a:bd:44:52:1f:71:f4:30:
         c7:0a:2e:b1:58:d2:27:18:3c:48:d3:7a:1b:ff:e5:38:02:7a:
         ab:c6:0a:26:5c:3d:fc:be:cc:93:c2:e5:dc:68:3a:9e:54:5c:
         03:38:cd:08:d3:a1:cc:18:8d:38:20:93:b1:c5:d7:0a:58:83:
         06:38:71:86:10:f8:4d:8d:be:e9:9a:6e:cf:14:89:55:57:c0:
         07:9a:92:66:e3:42:2a:0f:5d:ec:3d:0b:6f:64:ba:3a:29:71:
         2c:d5:5c:27:c1:2b:2c:aa:37:9d:6a:45:3e:f6:f2:99:cf:f9:
         b0:b6:7c:00:a1:5d:ab:23:32:1c:8c:ea:37:e8:7b:64:3f:68:
         57:19:87:e7:be:66:79:93:10:9e:e8:82:69:22:cc:42:68:a5:
         d8:9f:27:52:53:2a:ed:d7:05:b6:00:31:af:57:9c:7d:de:58:
         00:41:ef:22:9f:b5:65:bd:ef:8c:34:0e:6f:04:39:c7:6a:9b:
         f2:45:f1:70:9c:0a:31:99:78:2e:d7:fd:2d:7a:57:8b:3e:23:
         54:c9:da:ed:b0:14:08:91:e8:f7:c3:64:2a:58:89:fc:1a:67:
         dd:99:fa:b3:ee:a6:bf:fe:98:2c:7a:f2:0b:a4:d2:1c:3a:e0:
         f9:84:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:20 2026 by rpki-client