Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/5d0613bc-579f-3cb3-a0cd-79cff2831eae.roa
File:                     5d0613bc-579f-3cb3-a0cd-79cff2831eae.roa (raw, json)
Hash identifier:          aX09FVt5JbIkP6WCSmjQZO/sArspje7MbllppCRy6xk=
Subject key identifier:   87:D9:75:BB:A6:F3:50:DD:16:58:18:1E:44:CC:B1:3D:5A:04:4F:AD
Certificate issuer:       /CN=43dfd777-de1f-43d4-839f-074c5f3bd298
Certificate serial:       010D0C9F4328584ADECBD810A1E7E020C57C2780
Authority key identifier: AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/5d0613bc-579f-3cb3-a0cd-79cff2831eae.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     400110
IP address blocks:        184.169.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:d8:10:a1:e7:e0:20:c5:7c:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43dfd777-de1f-43d4-839f-074c5f3bd298
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=c010f128-05c1-456e-857c-5db8d9ae16c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4a:af:82:f5:2e:fe:17:2f:2a:96:47:79:fe:
                    6c:f4:17:65:7e:4e:89:01:7b:6f:1a:68:80:7d:fd:
                    71:28:84:b9:20:6c:08:fd:a1:f8:9b:bd:be:a9:ce:
                    f5:1e:fb:d4:dd:41:9d:45:85:4d:74:1a:7c:45:d3:
                    bb:00:ec:3e:57:6d:28:56:62:b0:c5:b5:d8:f5:61:
                    56:a1:9d:5a:cd:04:7e:4f:ff:e3:c0:32:fe:49:97:
                    00:96:ec:b1:47:f6:41:69:48:f7:49:14:bd:4b:1c:
                    da:54:d1:a3:58:c6:e1:9e:86:0f:bd:3b:0a:2b:67:
                    a2:1c:60:e0:ef:26:5c:91:ce:b8:a6:15:09:b5:c7:
                    a2:4c:21:14:7b:0b:e4:bc:6c:ca:91:96:2f:3c:b7:
                    dd:23:f3:f7:b2:50:87:4f:10:d0:45:e6:07:4a:c2:
                    b9:54:5d:d7:86:d3:16:dc:12:a4:d1:0b:cd:ba:78:
                    55:04:25:ca:5e:c6:b2:c0:31:71:f3:a6:73:cf:24:
                    50:55:0f:19:7e:7a:8d:90:61:6b:40:bd:30:46:77:
                    36:cb:9a:71:b3:d9:d8:f8:6d:cb:88:a0:1a:ca:0f:
                    bc:4f:f0:66:00:5c:f2:0c:a6:65:31:76:32:cc:8f:
                    ad:38:8a:55:31:b6:59:f8:6c:6e:5f:00:c1:89:ce:
                    c0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D9:75:BB:A6:F3:50:DD:16:58:18:1E:44:CC:B1:3D:5A:04:4F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/5d0613bc-579f-3cb3-a0cd-79cff2831eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298/43dfd777-de1f-43d4-839f-074c5f3bd298.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:7A:7E:85:8F:00:FA:B2:64:2A:20:7B:82:62:38:AC:4F:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/43dfd777-de1f-43d4-839f-074c5f3bd298.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e0:49:19:54:f2:a6:90:99:e9:00:bb:81:f2:5c:b3:4c:cc:
         6e:01:f8:78:2a:26:8f:ca:86:7d:b9:9e:73:fd:28:94:0b:05:
         d3:75:5f:83:b4:d9:39:7d:d7:70:05:cb:16:3d:73:4b:c2:33:
         c2:a2:17:ef:43:21:79:3d:dc:71:96:e9:8d:38:0a:35:a5:cd:
         00:04:61:25:5b:e2:44:f2:3a:0c:c3:c9:16:8e:db:49:1a:96:
         4f:c3:52:6c:d3:d4:44:cf:31:83:8a:cc:2a:aa:28:b5:6f:31:
         4c:1c:36:07:2e:7a:ca:1a:2d:89:71:9d:fd:ef:4f:a4:2e:3c:
         e1:22:dd:3e:54:7f:db:07:63:70:9f:df:7f:22:bc:1a:5c:a5:
         34:bf:ec:7a:b0:a5:11:ca:d9:55:b5:0e:07:d9:83:1d:20:7b:
         af:7a:ef:e7:fe:6f:f4:52:fb:fa:15:ce:48:71:25:d0:a4:d5:
         4c:0e:cb:dc:ed:22:4b:84:33:b7:71:1a:25:9e:f2:4a:85:ad:
         59:32:56:31:ad:94:c0:0e:df:0f:99:f7:a0:c2:99:3d:d2:61:
         5c:9b:7c:31:68:7f:94:ed:a7:35:0a:ee:e7:75:f0:83:de:d2:
         c7:c9:27:23:7c:63:45:c1:46:65:92:0d:a7:65:2c:fa:eb:cc:
         ec:6f:13:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:37:53 2025 by rpki-client