Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0466929d-be23-3f03-a067-25603b997610.roa
File:                     0466929d-be23-3f03-a067-25603b997610.roa (raw, json)
Hash identifier:          wfHK92mJXLwsb9sBRlRTKtv1KS2YFb8RdNYfy9n4XeE=
Subject key identifier:   EE:74:D4:77:27:84:3D:BA:DE:BA:28:00:44:53:B7:8F:51:3A:C3:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EBDD186EC13964B53D3E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0466929d-be23-3f03-a067-25603b997610.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        24.61.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:dd:18:6e:c1:39:64:b5:3d:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=dc745f90-accf-4bc6-8a34-cc81aea693b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:63:bc:8f:42:69:a9:93:53:54:8c:c0:e2:d4:
                    96:2d:a1:e7:f6:2e:25:d5:2b:09:42:57:55:ab:f8:
                    d7:21:dc:58:b3:cd:2e:88:93:00:ba:07:10:85:69:
                    a7:3a:de:45:0e:29:93:68:37:b3:59:56:e1:d0:6c:
                    76:b1:cd:6d:da:11:8c:21:5e:5d:ae:33:3a:62:89:
                    03:c3:80:5e:ca:e9:ce:d2:55:a9:c3:79:e0:2a:d0:
                    59:b7:f5:f5:65:87:24:18:a1:d2:7e:80:fb:b9:03:
                    cb:c8:2f:15:41:aa:a8:2a:f2:7a:12:59:6b:6c:15:
                    13:a2:26:be:57:f7:15:84:45:23:02:51:f7:2f:2c:
                    96:59:b3:ee:6a:ad:bf:44:ab:4e:41:27:09:17:d2:
                    6a:0e:be:78:e6:96:92:0c:fe:ce:74:65:c6:d2:3b:
                    5b:df:1e:35:fa:58:9e:48:79:34:75:7f:29:8e:c9:
                    0b:da:6f:96:27:bd:f3:e0:60:e1:76:56:dd:04:92:
                    ac:2b:04:4c:e4:34:22:db:cd:ca:e7:a4:b0:5e:1e:
                    56:38:74:37:c2:9c:5a:5b:2e:fb:ce:39:0e:29:b1:
                    0d:b5:fb:34:5f:f8:1c:84:6b:40:44:20:5a:82:e4:
                    88:b6:8f:f3:a2:1c:0a:e9:76:9d:99:3f:20:05:49:
                    26:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:74:D4:77:27:84:3D:BA:DE:BA:28:00:44:53:B7:8F:51:3A:C3:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0466929d-be23-3f03-a067-25603b997610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.61.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:74:c1:48:24:bf:c6:47:6a:6b:e8:e8:7b:37:e4:72:ee:ee:
         aa:65:4c:01:d1:01:65:11:d3:3d:4c:9d:7d:ec:ab:53:a8:b6:
         a2:31:e6:3d:76:46:f7:35:10:e7:76:f9:b4:f6:3d:79:b7:2c:
         5a:eb:72:52:9b:83:05:e9:92:c8:82:9d:03:df:1f:24:32:18:
         1d:1b:ab:0f:74:62:9c:4d:aa:1a:6c:77:57:70:cd:86:bd:64:
         53:65:8e:b5:d9:80:18:cb:9c:ae:7f:f4:a9:91:53:5c:ac:55:
         03:80:c8:fd:56:95:c0:4b:5c:3f:99:88:c3:ae:c6:8b:ad:5a:
         3a:7a:95:af:66:f2:b0:0c:fc:32:89:ee:ba:a6:f4:71:1a:75:
         f4:53:51:a1:be:69:c9:49:85:aa:a3:b7:7e:18:d5:f1:73:22:
         3d:8a:a6:dc:79:47:49:30:42:84:55:dc:25:2f:b6:41:a2:86:
         8a:c8:76:1e:a4:fb:10:a6:31:02:30:a6:13:5e:35:b9:60:90:
         a1:59:69:6e:d2:c6:d8:39:ea:b6:85:64:52:7a:c4:12:34:5c:
         ee:30:9e:e8:8f:6a:2c:50:c8:b8:f0:d4:bc:25:ca:f2:6f:00:
         05:8a:98:8e:93:7b:95:10:39:96:8a:34:ca:63:04:49:95:7c:
         9a:16:9c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:27:12 2025 by rpki-client