Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/40884838-fc3f-4f54-ba39-55d57ba477eb/44b13f76-9166-3b65-8242-fc4fae2a4234.roa
File:                     44b13f76-9166-3b65-8242-fc4fae2a4234.roa (raw, json)
Hash identifier:          ukKsPoWD/tnKoKjcLE/0ju9aB/vFCqI6ad0pjy7pxJs=
Subject key identifier:   10:2C:1E:24:BB:85:AB:E2:DA:E5:AB:9B:26:2B:67:AC:C4:8C:F8:A1
Certificate issuer:       /CN=40884838-fc3f-4f54-ba39-55d57ba477eb
Certificate serial:       010D0C9F4328584AE98216E93E4F3636B0126400
Authority key identifier: CB:ED:5C:0B:03:8A:FA:D0:A1:44:EB:0F:A8:71:DD:95:38:AB:DB:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/40884838-fc3f-4f54-ba39-55d57ba477eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/40884838-fc3f-4f54-ba39-55d57ba477eb/44b13f76-9166-3b65-8242-fc4fae2a4234.roa
Signing time:             Tue 19 Aug 2025 21:06:13 +0000
ROA not before:           Tue 19 Aug 2025 21:06:13 +0000
ROA not after:            Mon 17 Nov 2025 22:06:13 +0000
asID:                     33083
IP address blocks:        199.4.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/40884838-fc3f-4f54-ba39-55d57ba477eb/40884838-fc3f-4f54-ba39-55d57ba477eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/40884838-fc3f-4f54-ba39-55d57ba477eb/40884838-fc3f-4f54-ba39-55d57ba477eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/40884838-fc3f-4f54-ba39-55d57ba477eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:82:16:e9:3e:4f:36:36:b0:12:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40884838-fc3f-4f54-ba39-55d57ba477eb
        Validity
            Not Before: Aug 19 21:06:13 2025 GMT
            Not After : Nov 17 22:06:13 2025 GMT
        Subject: CN=1a1d8106-e866-4c38-9448-6c45fb816209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:6e:90:af:a5:a7:6b:a5:d2:2a:ca:c7:13:
                    82:1f:f6:72:8d:cd:2b:aa:49:c2:9f:49:ee:af:2e:
                    e0:a6:95:5d:8a:c8:55:7b:9f:4d:8c:73:42:37:a4:
                    db:b8:c7:78:2e:f3:20:e8:af:78:b7:5b:50:7d:65:
                    e2:68:26:3a:6a:0c:79:34:5a:1e:96:a4:f0:40:65:
                    65:da:93:d0:6a:b9:97:ab:2d:cb:c7:e7:d0:50:94:
                    21:cf:32:2e:a6:f6:ea:8d:b8:a2:a8:61:19:96:1c:
                    e3:e6:2b:f0:49:8e:56:fe:90:02:92:90:f8:74:0e:
                    3c:98:d5:bc:3c:44:ff:73:10:98:fd:e5:d1:44:94:
                    1b:65:f7:72:c5:01:24:94:a4:3e:ea:ac:02:e7:ad:
                    ac:e1:11:0c:76:e2:00:8a:95:88:f3:f9:e7:84:85:
                    db:98:f5:41:db:9b:22:8f:88:c3:59:17:20:cf:45:
                    df:f0:64:b4:fd:65:45:d2:4f:97:b2:32:6a:c5:cf:
                    7c:4b:2e:17:87:b3:9f:c8:40:ce:28:af:ed:23:c7:
                    24:54:7f:bd:5e:b1:d2:bf:a7:0e:84:64:48:d2:87:
                    55:d8:97:b5:6f:59:b4:ce:18:ad:2d:0f:97:80:48:
                    01:27:3b:a3:59:85:a7:a2:83:45:65:fa:2a:59:da:
                    d2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2C:1E:24:BB:85:AB:E2:DA:E5:AB:9B:26:2B:67:AC:C4:8C:F8:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/40884838-fc3f-4f54-ba39-55d57ba477eb/44b13f76-9166-3b65-8242-fc4fae2a4234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/40884838-fc3f-4f54-ba39-55d57ba477eb/40884838-fc3f-4f54-ba39-55d57ba477eb.crl

            X509v3 Authority Key Identifier:
                keyid:CB:ED:5C:0B:03:8A:FA:D0:A1:44:EB:0F:A8:71:DD:95:38:AB:DB:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/40884838-fc3f-4f54-ba39-55d57ba477eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.4.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:d5:c4:65:2f:9e:0b:d6:b8:ce:b6:2d:03:e0:13:ef:18:23:
         66:2c:66:05:25:b4:51:e9:ff:15:e3:c6:1c:5d:b6:e2:91:47:
         1a:08:dc:1c:94:de:14:6d:08:ed:c4:ec:c6:34:15:1a:56:82:
         cf:4e:ac:c8:53:7d:12:53:d7:21:45:94:86:7f:05:0a:dc:99:
         cf:79:12:a7:43:7e:b1:cb:16:50:1f:b6:e5:89:c7:23:a5:d9:
         0f:fb:6a:09:19:84:88:05:63:89:4b:49:b1:77:67:c4:4c:33:
         31:52:bb:4d:78:21:fd:85:87:e8:a6:2d:f6:e3:4a:ee:9f:c4:
         ad:32:ab:0b:61:90:55:f6:c0:26:9d:2b:e1:a5:8d:38:9c:76:
         e9:3e:02:0d:55:fc:1c:9b:01:4b:e7:3c:54:f8:c8:75:7a:4f:
         98:50:90:f5:09:0a:9a:9a:a4:b7:99:1d:30:a1:d1:37:7d:54:
         ed:4b:21:41:7c:8b:a7:c3:45:09:72:f5:b3:6c:73:b7:e8:e8:
         8a:16:2e:6e:54:f9:e8:25:f4:51:c2:d5:2d:0b:38:ee:06:ba:
         bb:76:21:90:31:8c:1f:db:73:fb:10:2d:07:a4:4d:2e:40:5e:
         43:83:fe:23:17:89:50:ab:a4:f1:9a:db:d0:09:35:7d:15:92:
         89:f8:d4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:32:05 2025 by rpki-client