Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa
File:                     e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa (raw, json)
Hash identifier:          QMN7OaEM2OMBmOnPnS8B0YotVYpa6YukGBPI+h8wFpo=
Subject key identifier:   6F:A8:5F:62:BF:B7:8C:50:B0:33:2E:2A:4C:B4:59:6C:1B:53:2F:27
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A374ADB703A21336D771A7CE0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     11290
IP address blocks:        24.231.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:db:70:3a:21:33:6d:77:1a:7c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=3af64d24-3bab-444c-8e71-87b4fc3956f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:18:67:a9:16:fd:d2:90:c1:2a:f9:b9:fc:
                    da:ee:03:7b:81:69:ef:06:87:18:dd:d9:b1:8b:5c:
                    88:c3:d9:f1:01:d9:3b:9b:25:57:6a:95:47:cf:23:
                    8c:de:bd:cf:48:e2:a2:b3:3c:4c:39:f5:d1:79:e5:
                    92:98:26:72:fd:00:c3:0f:f0:0e:3f:71:51:72:7a:
                    58:4e:90:fe:06:37:73:2d:eb:2d:c8:f0:1c:36:81:
                    d5:bf:8b:db:21:ec:54:4b:8b:19:aa:d3:ad:3f:86:
                    de:f5:38:c8:49:51:46:33:a8:68:d5:6c:de:ac:90:
                    d2:de:98:ac:60:b7:35:70:87:8f:bc:44:86:9e:75:
                    8b:8a:c9:9c:67:1e:f2:33:04:1d:29:0a:ea:71:6a:
                    94:3d:b1:43:a7:e9:69:03:40:4c:25:5f:63:dc:fa:
                    e3:f6:96:2e:22:64:39:eb:09:ed:77:1e:39:68:b4:
                    10:70:17:7a:4d:73:7d:a2:ca:b7:b6:a7:89:1f:5d:
                    60:9c:40:a4:6a:3f:e8:77:c4:8b:bc:21:da:c1:b2:
                    a0:59:49:ed:8c:59:94:18:c1:1a:b6:59:1b:eb:e3:
                    01:28:b7:b8:bb:f5:b6:62:db:c1:ba:f1:6b:58:9c:
                    13:d4:8c:49:13:d8:d2:b4:f9:4a:a7:57:8e:9b:73:
                    69:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A8:5F:62:BF:B7:8C:50:B0:33:2E:2A:4C:B4:59:6C:1B:53:2F:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.231.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:de:d0:a3:21:81:25:37:d0:94:b4:e1:5c:a6:f9:1a:26:63:
         6c:df:e0:6b:93:95:14:99:84:4f:cb:a2:1a:ce:a0:c7:cf:12:
         17:41:58:a7:ed:89:c6:57:13:ad:e4:29:b0:a5:78:47:de:01:
         cb:1a:7a:fc:1f:a1:4d:9d:67:57:44:48:dd:06:e9:65:d9:7e:
         45:dc:1f:f6:4a:70:3d:b1:87:d8:b6:33:2d:14:a0:54:bb:e0:
         6f:09:72:54:18:0b:ff:29:cf:50:a3:96:6d:33:09:7b:9a:55:
         52:5e:15:52:56:24:4a:64:48:16:30:6d:92:8d:25:6b:f7:2c:
         ae:82:bc:4f:7b:6a:da:ae:40:83:33:17:ff:19:58:d7:65:7c:
         3f:92:1e:12:45:e4:30:f3:11:27:28:52:b8:77:79:1b:01:df:
         8b:82:eb:27:12:3b:f0:d4:26:3a:59:d8:a5:4d:fc:6b:f9:fc:
         97:84:71:9c:ff:42:4e:61:ac:77:44:fa:61:e6:7a:81:9a:7b:
         57:e9:d8:61:c2:3b:c6:73:68:1d:2b:9b:e7:d9:b8:27:ef:f8:
         2c:bc:fc:52:e6:1d:1a:02:80:4b:c1:a6:73:5f:23:8a:02:15:
         21:be:64:34:61:53:e1:75:52:5e:54:ee:17:86:af:ff:7c:23:
         f7:37:a6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:41:00 2025 by rpki-client