Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/550ddf15-6fa1-3285-af57-1bf52c6f098a.roa
File:                     550ddf15-6fa1-3285-af57-1bf52c6f098a.roa (raw, json)
Hash identifier:          yufcZbQuQmtysXQlzDTOyApzN65H0/baetmWh9iPGBM=
Subject key identifier:   9C:8D:A2:19:F5:38:D0:A6:AC:1B:6D:F8:79:45:2B:87:2F:2C:40:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ECC1B7DDEDA05D9C12F500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/550ddf15-6fa1-3285-af57-1bf52c6f098a.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33668
IP address blocks:        69.244.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ec:c1:b7:dd:ed:a0:5d:9c:12:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=7aafb480-4999-4834-aed8-90aaff5f6bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:da:9c:1c:98:55:91:0b:6a:e2:0a:7a:96:1f:
                    ef:a1:01:2b:f2:5e:70:bf:36:d8:56:53:1d:76:2b:
                    9d:df:ca:c4:d7:3a:be:18:29:77:82:4b:f8:dd:3e:
                    dd:60:1c:64:0a:b9:87:e2:b6:f7:fd:bb:0f:80:04:
                    e9:aa:ab:17:9d:06:31:4a:c7:ab:ab:11:ac:90:14:
                    96:a7:22:83:16:ca:73:76:bf:89:98:5b:50:1e:10:
                    5a:1f:50:9b:a6:da:49:91:d4:3f:ec:33:9a:3f:88:
                    19:3c:83:39:81:73:ed:6e:85:d2:f6:e9:37:c8:15:
                    dd:35:bd:ad:be:71:24:f9:fb:49:f1:6f:df:4f:a4:
                    e3:96:38:92:15:ba:99:fc:39:f6:7d:fb:5d:f2:df:
                    3d:a0:c7:8f:63:b3:97:a5:ad:82:0b:3f:64:c3:d0:
                    c6:bd:15:38:4a:f4:a9:cb:57:26:6e:01:de:3a:ba:
                    d1:46:d8:cd:af:10:de:61:fa:5f:2a:70:10:63:80:
                    9c:97:8d:11:37:1f:b7:23:cc:38:6a:2e:a9:4d:a7:
                    5b:ce:ae:be:be:00:ad:fc:3c:05:e9:c5:21:ae:eb:
                    54:58:6a:5e:ae:2e:e7:ee:04:2b:03:e0:47:16:c4:
                    88:a9:97:c6:2b:8f:51:92:86:73:2d:70:cf:d0:df:
                    cd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8D:A2:19:F5:38:D0:A6:AC:1B:6D:F8:79:45:2B:87:2F:2C:40:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/550ddf15-6fa1-3285-af57-1bf52c6f098a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.244.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ac:3c:a6:33:7d:61:5b:2a:68:7a:72:93:1a:70:7a:8f:26:
         75:2e:e6:9a:ce:5b:a7:e8:a2:6d:c8:86:f5:9d:45:66:b8:31:
         87:ff:82:c4:c5:67:cd:04:16:19:78:b2:3e:33:8c:1a:cc:9f:
         5f:2f:3e:ed:4b:e5:6c:cc:16:a5:19:99:97:51:60:00:e9:82:
         8c:65:db:f1:5c:4c:eb:2f:12:6c:5a:78:43:56:4d:6f:bd:5f:
         56:26:9a:a5:b4:4f:99:2d:fd:2b:44:f2:27:99:bf:a0:9c:3a:
         fc:7b:44:bd:f9:12:5f:0a:49:c8:20:7a:df:2d:88:f3:fb:14:
         cb:02:86:62:d9:c5:0a:da:76:70:cb:2b:ce:7b:82:51:4b:36:
         ec:c1:03:7c:09:65:78:93:0a:36:bf:80:43:1f:67:59:53:72:
         f1:07:de:24:f8:da:33:a4:4f:e8:94:16:1d:47:bf:34:f0:2f:
         79:19:41:44:87:ec:5b:03:23:85:05:31:17:c3:28:45:8a:84:
         64:bd:d7:8c:0e:7c:98:da:24:1c:e8:d5:7d:d6:53:ba:21:16:
         84:19:84:58:8e:38:11:77:a9:e6:64:8d:e4:f6:19:ff:5b:58:
         82:64:b5:44:3e:21:ea:83:cc:6b:57:65:09:fd:9c:e6:a0:b5:
         a2:01:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:53:44 2025 by rpki-client