Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21a474ac-32dd-32e1-8bd9-68c4b19e3e88.roa
File:                     21a474ac-32dd-32e1-8bd9-68c4b19e3e88.roa (raw, json)
Hash identifier:          INpTaTSh5NdU9yUrByh8tEF+tyqgvztiBe5EswuAxQE=
Subject key identifier:   14:D7:B7:D0:6B:B2:A5:D3:97:19:F2:10:05:EF:33:5E:A1:B9:22:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EBD661FB3F1E6EFFF86900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21a474ac-32dd-32e1-8bd9-68c4b19e3e88.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        24.2.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:d6:61:fb:3f:1e:6e:ff:f8:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=312a9456-4c7b-450a-864c-f2d9be736cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:23:b8:54:f4:1b:b0:85:45:6a:1b:98:eb:30:
                    db:ac:35:5b:df:66:2c:2a:91:eb:cd:85:46:6a:f9:
                    e9:b1:ce:3f:cd:b6:c7:1d:65:ca:22:ad:bc:59:5d:
                    9c:1e:bc:32:9f:64:e5:5b:38:ae:82:48:86:3a:8c:
                    26:f9:dc:5f:5c:1d:32:23:e6:a6:81:7e:7a:eb:8e:
                    df:08:d2:ea:50:18:31:4e:93:4a:9c:67:9b:a8:95:
                    a4:79:ce:83:d7:be:39:26:9a:03:11:c0:13:b1:af:
                    67:74:82:c2:86:e0:ad:df:7b:3e:26:93:63:5e:61:
                    11:02:98:9f:f1:b2:0e:94:1f:a9:d0:13:b6:ef:41:
                    1c:ae:97:42:4c:96:69:bf:ca:c0:45:e8:ca:5d:d6:
                    e7:4b:58:e0:99:89:43:01:0d:db:55:48:a5:13:52:
                    19:55:34:4f:f2:f9:2d:42:37:a7:1c:97:22:93:9c:
                    7f:bf:db:84:f7:fe:8a:f2:91:87:5d:ae:af:43:a7:
                    3d:16:05:99:64:40:97:94:8b:08:06:83:0d:b4:4c:
                    c2:df:93:89:7f:ab:b2:56:dc:de:bb:ec:7b:0e:dc:
                    11:d1:d7:cc:bf:d0:b8:b0:cf:c5:3f:7a:f8:a9:b8:
                    ae:e7:92:58:e9:7c:46:86:5a:9d:2f:ec:e3:44:6d:
                    5f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D7:B7:D0:6B:B2:A5:D3:97:19:F2:10:05:EF:33:5E:A1:B9:22:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21a474ac-32dd-32e1-8bd9-68c4b19e3e88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.2.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:35:39:aa:ec:63:90:61:70:21:61:84:11:ec:01:49:83:aa:
         a2:89:71:8d:75:05:c4:c1:98:2f:eb:74:4f:24:bf:33:43:28:
         a0:44:19:7b:0b:ab:8b:f7:0b:dc:72:29:46:c5:36:a3:b1:30:
         06:e2:62:90:58:3f:8c:15:71:b8:f4:88:98:e8:1c:eb:22:3a:
         42:ef:52:b7:f5:ca:8d:78:6c:e4:d8:1d:47:fa:95:75:9c:56:
         89:87:25:8c:21:23:fe:c4:28:98:dd:2e:84:8e:af:86:f4:25:
         ec:65:b8:39:3c:51:48:95:7e:90:f5:2d:af:af:96:a7:65:89:
         f3:60:a3:c6:62:e4:9b:7b:40:ba:04:c4:dd:4f:61:27:71:19:
         eb:43:f6:8e:0e:6c:fe:75:35:e5:0c:87:8d:6e:2b:e7:04:06:
         36:26:0b:97:61:ac:23:fe:02:05:00:5a:7a:97:f1:ab:03:bd:
         af:95:03:17:45:da:53:06:5c:0b:30:e9:ab:8c:e7:e9:1a:20:
         4e:c3:99:d8:1c:40:53:de:e4:d5:77:f0:c1:bf:76:b5:eb:16:
         83:8f:ab:81:e5:07:3a:31:ea:01:0b:bf:b0:d3:4c:61:38:23:
         e6:d8:09:a6:f1:57:39:e4:0a:b8:38:27:be:b9:87:09:ab:8f:
         b5:19:ff:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:43:49 2025 by rpki-client