Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/f088c934-1ae8-3dcb-8f44-03ac065af8f1.roa
File:                     f088c934-1ae8-3dcb-8f44-03ac065af8f1.roa (raw, json)
Hash identifier:          bLi2PX37hFWhLQdcT078XQVPy2CTCYcDMi7oIrvfYZE=
Subject key identifier:   2C:3A:37:F3:8C:D0:DF:06:83:2A:E6:D5:81:03:7B:4F:91:32:73:7A
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584E9A7FD4B3F5C44AB67FEC8D00
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/f088c934-1ae8-3dcb-8f44-03ac065af8f1.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     11290
IP address blocks:        24.122.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d4:b3:f5:c4:4a:b6:7f:ec:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=8bb8c5eb-afdb-4e17-ae41-830f7f92a436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:9b:97:00:c3:2d:c2:6f:7f:96:09:fb:a0:
                    4e:3a:d5:01:8f:7b:6c:49:c2:76:f9:d5:d3:d9:66:
                    45:b6:a7:53:72:01:1f:35:46:5c:11:4a:36:dc:34:
                    19:69:6a:b0:13:69:81:01:84:03:00:85:c8:22:ca:
                    d1:8f:4e:df:3a:fc:d3:fb:23:d8:17:15:98:57:44:
                    75:d1:37:78:2a:45:06:dd:8c:3e:8a:1e:ba:9e:7c:
                    4f:78:ad:dc:b1:75:17:53:26:51:46:c8:e1:5e:90:
                    16:01:7f:41:bb:b7:04:f1:43:a3:c8:29:b9:f7:32:
                    6f:1a:84:ed:14:5b:73:44:09:8b:28:94:72:29:7a:
                    8a:70:17:18:c4:9f:f6:d0:2d:aa:f4:2d:86:bd:21:
                    7f:e8:8e:ed:de:14:d6:4d:ac:c0:a4:14:77:14:b8:
                    ba:43:f6:1b:9a:c1:a4:a1:33:b4:22:b1:0a:ce:b7:
                    bd:db:a6:c1:b9:d0:46:dc:0f:b1:81:ab:03:61:89:
                    e3:9a:95:b3:0a:33:00:3e:99:63:7c:34:15:85:57:
                    ee:d0:3c:f2:52:1a:7b:a2:2f:19:ce:43:7b:8d:55:
                    4a:4e:50:1b:d3:02:f7:79:e1:67:66:31:62:65:b4:
                    8c:1f:07:4a:37:48:d1:08:35:13:90:17:42:d0:2b:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3A:37:F3:8C:D0:DF:06:83:2A:E6:D5:81:03:7B:4F:91:32:73:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/f088c934-1ae8-3dcb-8f44-03ac065af8f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c0:dd:dd:c2:44:50:9c:16:82:7b:7f:e3:bc:4f:d7:40:c4:
         03:6a:cf:cd:7d:eb:4c:87:37:44:f5:f8:bf:f0:af:25:08:c6:
         9c:e6:ed:cf:52:1b:2b:65:e3:c0:6a:18:a9:c8:94:30:23:09:
         8a:29:3a:11:af:0c:1c:b0:bc:98:69:19:fc:52:0d:f6:09:6a:
         a2:39:46:06:65:1e:6d:85:a1:8a:b8:3e:ed:43:fc:cf:6f:0c:
         04:b5:89:76:0e:3c:51:0c:5f:a2:f7:40:0a:b9:e4:49:fe:64:
         2a:50:ec:87:cc:92:09:99:c0:8b:9f:71:cd:32:7f:3f:c9:a4:
         25:4e:46:12:62:fa:96:47:df:84:b3:fd:32:93:9b:d6:d6:04:
         52:fa:d3:cb:7d:cf:bb:34:f1:44:92:28:97:03:e9:b4:30:94:
         5e:4b:12:91:47:f4:fb:00:f2:74:e4:d2:02:a8:9f:e4:8b:c7:
         19:17:c8:d1:08:fb:95:12:da:7f:30:bb:12:48:5e:c1:00:ee:
         25:83:0f:19:ec:ce:91:16:31:ea:74:d2:11:f7:a5:b6:90:10:
         bf:14:58:fe:e9:17:69:a4:8a:9f:64:07:a8:27:b7:f6:f6:5d:
         ba:09:24:7a:49:30:59:8e:23:20:28:18:6f:b7:e7:64:ff:c7:
         31:76:e4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:40 2026 by rpki-client