Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ffe60fa9-39e3-38f6-b387-f3206b0f637b.roa
File:                     ffe60fa9-39e3-38f6-b387-f3206b0f637b.roa (raw, json)
Hash identifier:          AVPdrlxNkjgrCm3LiG4A16WKmoWcNFx/zJYoQOyI2fQ=
Subject key identifier:   ED:F9:61:7C:13:18:85:80:0D:74:C1:D4:70:52:8E:96:E1:7D:EA:2B
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584E9A7FD4FC0B807E1A1C130C80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ffe60fa9-39e3-38f6-b387-f3206b0f637b.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     11290
IP address blocks:        24.54.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d4:fc:0b:80:7e:1a:1c:13:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=6a722fb2-4309-45d6-9ba6-b11fafe935f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c6:73:6b:77:16:94:0e:23:2d:a2:14:db:89:
                    3a:21:41:f5:31:15:89:1d:6a:59:bb:70:49:bd:a9:
                    4e:99:48:58:e5:5a:27:34:56:9a:a2:0d:ab:1f:ec:
                    90:49:97:cd:68:e9:80:bc:3a:97:ac:1a:c4:86:d7:
                    4e:42:df:92:1f:29:67:47:0f:20:f6:77:44:3b:4c:
                    9d:57:e3:e7:c1:8e:fc:31:3e:8f:a7:43:05:f5:21:
                    a8:35:99:d8:aa:eb:93:89:68:e0:34:83:41:8a:e1:
                    b0:5c:5d:bb:1f:89:f2:df:26:b0:8c:bd:cc:04:ce:
                    56:8a:52:2b:5e:00:05:24:3e:31:19:0a:ce:2a:01:
                    b5:db:dd:0d:0f:89:5a:ed:72:e3:4c:b8:9c:d9:7a:
                    85:4b:04:80:a1:8a:70:0a:36:28:5b:4f:33:38:de:
                    55:85:72:81:ce:9e:99:c0:1c:b6:d9:b9:60:32:99:
                    bd:ba:90:10:8d:be:cd:4e:99:b6:e4:de:ef:07:76:
                    fd:d6:84:fd:2e:b9:55:44:4d:43:da:97:94:25:df:
                    f0:27:0e:e9:3a:ca:df:72:6f:25:02:ee:4b:af:05:
                    48:a9:56:c8:be:af:73:1e:a8:a9:5f:8d:08:c2:42:
                    f4:2a:79:61:31:e9:c8:6d:e9:50:16:4d:0a:4e:5b:
                    4e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F9:61:7C:13:18:85:80:0D:74:C1:D4:70:52:8E:96:E1:7D:EA:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ffe60fa9-39e3-38f6-b387-f3206b0f637b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.54.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:96:33:8f:5d:65:4d:90:77:18:b1:05:7c:ce:00:6d:e0:4f:
         ab:98:72:c2:d9:c6:d6:57:13:c2:6e:32:a9:3e:1d:75:f5:a4:
         05:44:42:ec:65:a1:47:97:d7:b7:fc:8d:64:c7:ae:8c:76:35:
         83:67:e9:45:70:6a:39:4d:1a:f2:a5:85:bb:5d:94:35:b7:2a:
         4f:18:cf:56:c8:4d:01:c8:a1:25:ca:a0:cd:7c:8c:a5:f4:ed:
         62:6f:2e:04:8e:06:59:ff:95:c3:a4:80:c7:6b:38:6e:4d:b4:
         e3:7a:cf:7a:98:ee:b7:1f:fe:6f:0d:ad:3e:bd:2b:69:14:01:
         f2:5d:72:ab:82:aa:dc:be:31:84:1d:b1:29:44:6e:81:c4:d6:
         13:5a:8e:1a:5c:75:47:a4:f4:41:52:da:fc:e2:ea:68:6a:ce:
         74:0d:1f:27:92:0e:e4:c4:83:f6:e7:f3:de:ce:0c:2a:bb:92:
         95:f2:86:a6:02:ad:e5:44:fa:9e:8c:da:16:e7:ba:85:4b:1a:
         93:18:21:74:74:2a:d9:0f:46:ef:59:46:5c:43:52:66:fe:29:
         10:34:1f:46:62:f2:17:e0:ca:4f:4d:57:43:6d:ce:73:7a:7c:
         84:f0:a8:07:53:bd:a3:79:21:82:f4:cc:82:fe:72:89:5d:71:
         5e:1c:a7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:25:01 2026 by rpki-client