Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d804f96-b4a3-3f1e-904b-eea374cf494c.roa
File:                     4d804f96-b4a3-3f1e-904b-eea374cf494c.roa (raw, json)
Hash identifier:          MOPzZsTrGYX2o3JEdkE9nI4OiT8H6cvgWW7q2rTEpBc=
Subject key identifier:   B5:6B:1E:F5:94:DB:39:CE:32:8B:CE:B5:F3:62:10:8F:52:92:25:03
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EBD380343A8D60F5FD9600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d804f96-b4a3-3f1e-904b-eea374cf494c.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        24.2.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:d3:80:34:3a:8d:60:f5:fd:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=f005d9f5-2dba-4f56-bfd4-6f80825468b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:ab:a6:e2:ed:7f:0d:34:58:f5:a5:98:7c:
                    b7:3d:e2:da:15:22:7a:55:04:ec:2b:cc:50:f5:52:
                    c3:77:d5:e2:b3:18:ad:76:6c:a9:68:d8:da:97:42:
                    06:11:10:4d:7e:ba:2a:b0:16:9e:06:f8:33:87:98:
                    75:3a:62:25:d2:e6:10:d4:61:9c:ad:74:c5:2d:38:
                    7e:54:cc:93:9e:67:48:2c:6d:fa:be:70:de:6b:33:
                    19:4d:64:07:51:c7:94:cc:ee:dc:d8:5f:bc:65:aa:
                    94:92:56:05:a2:d0:f5:8c:ee:95:98:fb:27:b8:ee:
                    97:39:47:3c:32:5a:9c:a0:7b:9a:17:ca:76:d3:e4:
                    63:d9:02:45:ea:3b:3e:fa:c8:18:05:4a:32:91:73:
                    6a:04:e0:f7:89:c7:55:2c:aa:97:0f:38:54:6d:2f:
                    37:9d:b9:0c:cc:64:d8:cc:a7:b7:7a:40:f1:d1:7d:
                    ce:af:e4:da:ca:bf:51:0d:b4:75:52:5c:3e:f0:54:
                    00:a8:ee:ef:07:73:72:e8:3b:ec:7c:db:b1:5c:1c:
                    2b:38:04:28:0f:f4:bf:86:2b:3c:c0:50:b3:81:c7:
                    88:fe:c3:1f:1e:d1:04:1d:e4:81:85:6a:17:16:b6:
                    3f:19:0c:d8:c2:bf:e8:07:ed:b2:92:cc:94:68:1c:
                    e5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6B:1E:F5:94:DB:39:CE:32:8B:CE:B5:F3:62:10:8F:52:92:25:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d804f96-b4a3-3f1e-904b-eea374cf494c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.2.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ff:8f:e1:0c:18:16:7a:ca:18:cb:ee:be:6f:24:95:ac:cf:
         96:be:6b:52:26:75:32:f6:9e:a1:96:98:c3:e6:a3:37:49:1e:
         c3:2c:a5:1a:c8:06:d1:71:fd:bc:1d:1b:54:a3:f1:07:93:07:
         8e:c5:b3:53:7e:18:fa:96:b3:c4:73:0e:f1:2b:0d:7b:98:ef:
         f6:23:fb:50:c8:01:5f:b1:c4:a7:2c:09:ff:b4:b3:94:12:0a:
         b1:2d:d7:14:12:22:04:c7:52:be:dc:78:38:ca:50:8c:cc:3f:
         20:dd:a8:9c:d9:b2:52:e4:03:48:b0:4e:20:c3:8b:d8:f9:16:
         db:8f:43:f9:77:06:5e:91:e7:5a:5b:47:34:be:40:10:29:2e:
         e4:13:b7:24:5e:50:01:d7:d5:49:8b:cd:87:c8:8c:f4:d6:c2:
         e8:f9:ba:62:b1:77:39:e7:10:e4:cb:df:04:e1:b4:b6:ef:15:
         a9:1c:42:d4:bf:e5:18:63:5c:6a:c1:96:0f:26:53:72:bc:41:
         85:ac:aa:e8:36:37:00:31:0a:44:17:ab:bb:5f:d6:0a:06:eb:
         4f:d8:ce:91:42:91:42:e3:2d:d2:4a:eb:cb:a8:87:e7:4a:29:
         a5:9e:62:23:d3:00:47:d8:1a:9c:f9:71:98:49:c1:b6:3d:8b:
         a9:28:40:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:25 2025 by rpki-client