Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15f3441c-a8f1-366e-8704-5145af9d12b5.roa
File:                     15f3441c-a8f1-366e-8704-5145af9d12b5.roa (raw, json)
Hash identifier:          hZBnmAY++g1K8QiBHWLJy4GiCCL8AzCeraNTl5Nwqe0=
Subject key identifier:   17:B4:DF:DE:C4:C6:6C:46:B7:F4:DE:00:05:FA:D6:89:4C:D3:A5:22
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EBD2CCBD975F1DD1A75BE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15f3441c-a8f1-366e-8704-5145af9d12b5.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        24.147.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:d2:cc:bd:97:5f:1d:d1:a7:5b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=06fbeb5f-eaa8-425b-aad8-93029c7e9542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:7a:08:c5:0e:8c:56:f1:76:d4:2f:b0:18:
                    31:f2:ff:30:ed:1b:f5:ef:fc:af:55:03:c8:bd:53:
                    c4:ec:7f:06:13:4c:68:51:91:b5:ab:e5:ed:a6:49:
                    b2:0a:47:6b:47:43:f0:87:78:b7:bd:36:00:09:ec:
                    47:34:49:8c:f3:d5:52:ba:cc:47:d0:5e:67:1e:d7:
                    30:36:1b:9f:82:85:ce:7e:1f:ef:aa:e4:87:62:f5:
                    51:58:f3:61:3e:00:a9:bf:ca:6f:30:4d:28:27:65:
                    7b:b0:4f:d5:1e:2e:67:d2:0d:d1:79:ab:50:e7:2e:
                    c2:b7:b2:08:fe:2b:47:ce:84:b3:3b:28:c8:cb:b2:
                    25:a2:2d:e7:32:9c:51:8c:e5:cd:66:8f:94:eb:a0:
                    c9:98:24:61:97:8c:42:87:fb:53:b3:38:dd:bf:c6:
                    4a:15:7f:d6:b3:d0:f9:47:d7:64:70:aa:cd:7d:da:
                    72:7f:9b:68:cd:f0:a0:a9:0f:8d:8a:6d:55:b1:0a:
                    99:a0:4f:14:8e:f2:12:4c:33:d3:f0:e0:d5:f9:13:
                    e2:b1:93:4c:79:b2:bf:4b:84:46:62:01:69:18:ba:
                    a5:70:a1:11:cf:69:65:4d:10:a5:34:c1:9a:26:cc:
                    68:26:7f:6e:b9:f3:20:46:08:76:d1:f3:33:03:0a:
                    2d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B4:DF:DE:C4:C6:6C:46:B7:F4:DE:00:05:FA:D6:89:4C:D3:A5:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15f3441c-a8f1-366e-8704-5145af9d12b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.147.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:50:e7:06:ca:57:d7:5a:3f:ed:a2:ab:7d:66:dc:fb:16:d1:
         47:7a:ea:eb:f4:88:f2:f8:f9:b5:7f:91:69:65:17:d5:42:70:
         b4:13:55:8e:1d:6b:87:70:49:b6:be:14:bb:ca:45:55:17:45:
         45:4f:9e:b2:9f:5f:69:4d:55:e8:56:9a:c5:fa:1d:57:43:e0:
         d9:b9:89:41:67:b9:e9:d8:a0:b4:1d:60:e7:ab:7d:18:fc:ef:
         b2:a6:38:00:bf:c4:a8:61:66:2e:cd:f8:ef:dd:f6:22:41:fd:
         01:bb:e2:89:39:30:64:6a:b3:0e:49:f7:63:fa:82:7d:40:76:
         63:7d:0d:a9:f6:2c:c3:5c:53:96:cb:c3:3a:96:8c:ef:b0:7a:
         0c:cc:bf:e5:62:a3:e6:8b:91:05:52:e7:34:91:de:15:7d:5b:
         a5:ab:2b:c4:d4:6d:c4:3a:0e:06:9b:19:fb:f5:91:59:3c:4e:
         b0:e5:6f:60:a4:ca:b1:a2:03:cd:67:db:48:3f:b5:af:1d:db:
         fb:a8:56:05:53:f0:f8:54:68:d8:8c:23:f2:91:fb:a4:e1:7f:
         f3:f0:47:97:60:77:61:e5:f9:50:8c:c7:86:05:4a:6d:53:60:
         c5:e4:94:06:4d:ad:74:b2:f3:48:3f:be:ef:30:0b:07:f3:82:
         22:a9:1f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:12:23 2025 by rpki-client