Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/086668dd-3dc1-3668-b5aa-74ca2e451681.roa
File:                     086668dd-3dc1-3668-b5aa-74ca2e451681.roa (raw, json)
Hash identifier:          l9fV/skz5vUJBCWbqcHgKjcn9UUV9V58RLea1Gecv48=
Subject key identifier:   93:60:F1:8C:3F:47:2E:3E:DF:59:A4:F1:0C:E8:51:7F:09:D4:BB:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED991C32FE2B3576C10C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/086668dd-3dc1-3668-b5aa-74ca2e451681.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        24.63.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:99:1c:32:fe:2b:35:76:c1:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=540035b2-61b0-4285-8f7b-51d7305ab735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:ce:e4:7f:36:07:5c:b2:54:7b:68:f5:96:
                    33:d7:10:88:03:30:4d:4b:f5:75:f1:ee:db:bc:9b:
                    a5:9d:cd:f7:a1:1a:7e:ec:61:09:39:1c:b5:3b:9b:
                    7f:6b:83:58:b3:50:be:c0:44:93:75:59:16:47:f5:
                    36:2e:89:ca:de:5d:99:2f:da:e7:ba:82:80:e8:e9:
                    9b:db:8c:b8:e3:5e:fe:ab:b4:0b:50:13:3c:45:f7:
                    d0:d2:b6:bf:ec:78:b2:82:9f:bc:8a:7b:e6:36:ea:
                    eb:21:db:00:58:02:c3:b6:f6:fd:50:cb:1c:5b:10:
                    0b:e5:42:70:67:71:53:9b:45:b3:87:cc:c3:aa:fa:
                    ee:8c:dc:20:b7:85:3c:cd:c8:c7:00:4d:8c:a8:fe:
                    a2:1c:65:a4:a0:35:90:87:b9:0a:d6:02:ea:a4:a0:
                    65:35:36:85:a4:73:61:c9:a9:94:20:ba:75:ff:ed:
                    f2:c3:82:ed:b7:e4:78:01:e6:f4:cc:90:56:38:55:
                    19:03:d8:c5:fb:07:ad:ca:b8:21:06:bd:84:e9:9c:
                    d3:24:10:c9:2d:4a:23:ba:29:77:bf:75:5a:d1:42:
                    9b:3d:1c:89:01:0a:19:28:66:b1:92:68:ad:c2:80:
                    94:f6:f8:6e:d8:de:67:23:ee:47:39:96:7a:e3:80:
                    40:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:60:F1:8C:3F:47:2E:3E:DF:59:A4:F1:0C:E8:51:7F:09:D4:BB:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/086668dd-3dc1-3668-b5aa-74ca2e451681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.63.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e0:83:dc:fb:21:2f:fa:bb:d5:58:93:9d:44:85:b1:95:a4:
         35:a5:d5:d2:a4:f1:73:43:4e:d7:86:8b:58:15:1b:40:71:97:
         d0:a4:6d:5b:17:c7:b2:5d:bd:4a:17:59:6a:1d:3d:7c:fb:62:
         92:6c:89:3f:f1:d5:62:29:1a:4d:2c:49:6c:ee:99:98:d5:6d:
         79:35:1b:56:43:38:ac:8e:26:ea:61:3b:45:89:4a:1d:2e:a9:
         97:ba:9c:d2:00:43:26:8d:cb:62:5d:c7:72:75:ea:81:0a:c5:
         f4:86:5e:36:29:32:0e:31:ea:d6:f0:83:d4:24:ec:e9:a4:93:
         19:17:b7:33:a2:9e:40:4e:51:d8:33:78:cc:8b:8a:6d:5e:c7:
         9f:bc:34:43:66:5c:6d:e1:e3:75:75:94:fe:ec:39:3b:9d:9a:
         28:e3:a2:e9:bd:53:0b:76:12:ed:7f:fd:d6:17:7f:41:fd:f0:
         a6:50:30:34:79:df:85:41:fe:09:12:a5:3c:72:2f:0c:2c:c8:
         9e:8e:e9:d5:e1:65:b3:d9:cb:80:26:04:76:db:48:fb:9b:4e:
         89:62:22:4a:fe:cf:94:b5:26:9f:0a:3d:3d:d1:66:fa:fa:38:
         03:fb:20:28:57:d4:5b:f2:5d:91:0c:50:be:36:c4:fa:82:57:
         d5:0f:17:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:09:46 2025 by rpki-client