Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa
File:                     fbb7b44b-75a0-304d-8878-021d4d576a6e.roa (raw, json)
Hash identifier:          /nVfhaUxuy9hu831N/KqSsYUSR7pthY64iXPBYL9pHg=
Subject key identifier:   1A:36:6C:79:FF:57:A0:43:8C:2D:C2:A0:DE:1B:3A:6A:BF:13:DE:EA
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584E9A7FD425EDE6736210C36100
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     11290
IP address blocks:        24.153.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d4:25:ed:e6:73:62:10:c3:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=c4142ba4-904d-4dc0-97e6-7cf887a162a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ff:66:1d:67:7a:22:c8:d6:52:80:22:6b:1b:
                    b3:44:5b:d2:cb:ef:e4:10:c0:bc:d8:41:b2:63:d3:
                    ed:b9:ef:84:ba:03:e6:69:db:8d:66:52:51:dd:ed:
                    ce:52:30:23:23:de:84:1d:1a:1c:a0:8c:0f:5f:26:
                    c3:70:9e:48:74:12:74:cd:f3:00:e3:e5:c3:04:20:
                    0b:34:45:cb:52:e9:5d:a0:e7:f9:4f:31:e0:21:67:
                    d9:30:f8:dd:86:50:4b:24:4a:79:24:64:d9:6c:ab:
                    8f:fc:22:7d:f1:f0:e5:fb:95:1c:71:5b:9e:87:a2:
                    0d:d7:2c:87:87:7a:60:bd:8a:cd:2d:70:23:96:5b:
                    cc:13:25:83:1c:b5:47:37:b0:64:e6:89:fd:3c:f1:
                    91:02:b2:70:ad:74:40:7a:de:9e:99:6b:17:c5:44:
                    63:a5:87:e4:4c:d9:26:e6:9b:3f:34:b8:a7:7a:2f:
                    db:26:bf:3b:b2:ed:cf:1b:07:c1:10:b4:6f:fc:ae:
                    cd:b9:8f:4b:ce:90:f0:2f:19:27:5f:dc:6f:7f:bf:
                    57:ad:70:1a:61:23:ed:15:c1:3b:1e:9d:04:ee:25:
                    f7:92:aa:a6:e8:19:44:b1:89:85:61:5c:34:67:d0:
                    7e:cf:46:16:d1:09:7c:71:67:50:2d:b9:25:e4:ee:
                    19:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:36:6C:79:FF:57:A0:43:8C:2D:C2:A0:DE:1B:3A:6A:BF:13:DE:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.153.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b9:84:a8:d4:ed:59:60:b6:5b:8f:39:48:8a:5b:91:68:06:
         1e:be:fd:82:e1:50:17:cf:e4:6f:bf:fd:5a:de:cd:af:ad:db:
         2d:08:76:1c:e2:49:f2:82:4a:37:57:55:6c:c9:ed:c4:bb:08:
         65:73:83:f8:bc:85:d6:3f:fd:aa:da:92:60:34:05:d9:16:78:
         27:73:c7:c3:76:10:c3:62:20:d2:85:92:1e:04:e9:e7:be:2a:
         d5:f0:6e:a6:f9:31:45:14:8c:04:38:3b:32:07:85:a0:ba:5f:
         bc:96:d2:5c:e6:57:3e:f4:19:8f:35:05:ea:56:de:3a:45:13:
         13:f9:94:27:09:e1:7f:5e:c9:5d:b7:20:60:cf:e7:e7:a9:25:
         9a:9f:89:5b:63:b8:ad:b7:a1:ec:b1:d7:15:42:6e:67:ba:c1:
         cc:83:23:a0:d5:08:7f:ff:d6:e4:92:80:0e:8c:de:5a:4c:5e:
         83:51:84:a1:a6:d1:a1:86:4d:7a:a2:bf:4c:cc:e3:f5:ce:1f:
         3a:30:88:ae:90:73:0c:c5:2e:d6:3f:00:61:f6:3c:c8:ea:fa:
         32:d4:28:20:a5:14:5b:ad:65:53:8f:a6:8c:dc:a1:29:1b:3c:
         b2:6b:1e:cb:20:51:16:36:49:30:c5:7a:db:64:3f:98:0e:0a:
         9d:be:d6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:06 2026 by rpki-client