Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/627d333d-65f7-39b1-b408-68b02d6fd4e5.roa
File:                     627d333d-65f7-39b1-b408-68b02d6fd4e5.roa (raw, json)
Hash identifier:          vtk438+90ovhgnXNQQrNfuG98mfCK4D28KriB/MWrBM=
Subject key identifier:   6B:D0:3C:A1:5C:B0:E4:11:22:98:0C:23:5D:2B:6C:0F:98:56:E0:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EBD0B41850812D1EA46E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/627d333d-65f7-39b1-b408-68b02d6fd4e5.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        24.147.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:d0:b4:18:50:81:2d:1e:a4:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=f16347e7-ae06-40a3-aa5a-e879202d3d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:69:21:dc:b1:75:25:be:5a:fe:54:9e:47:
                    ba:83:d1:05:47:ff:b5:db:60:ae:23:e0:0b:72:c0:
                    3f:4e:d6:8a:a2:34:e0:01:76:55:5a:f7:bc:e5:84:
                    a5:9f:3c:91:c3:1c:68:e1:71:3e:6d:b9:f5:4a:bb:
                    79:e4:3b:ad:6b:3e:6d:ac:33:81:7f:4c:46:6a:ed:
                    e8:19:ae:32:22:f5:a2:34:62:a2:83:79:cc:3b:5c:
                    40:d6:2c:51:14:27:90:76:af:07:12:4b:8e:53:87:
                    37:71:f4:4e:f2:bb:f2:80:35:84:4a:d6:af:f0:0f:
                    bb:04:59:7c:7b:67:90:12:2e:2e:0e:30:9f:d6:10:
                    8e:f5:76:f8:bf:70:51:13:11:1a:54:cb:d6:0f:da:
                    a2:75:85:39:d9:1c:de:7d:bc:c2:da:9f:ea:24:d7:
                    10:95:3d:67:a0:6a:b3:8e:66:c1:ce:93:19:4d:fe:
                    bd:5e:3f:89:50:30:f8:67:2a:7f:d0:7c:a2:e5:4e:
                    bc:e5:26:47:6b:f6:08:af:44:c9:28:54:2f:04:c3:
                    3f:6f:c1:27:5c:fa:da:04:7c:56:95:dc:b0:0a:68:
                    20:25:2e:32:b8:a1:cb:8a:b3:ab:e1:d7:92:ef:b1:
                    00:95:0a:38:79:45:ca:38:48:5a:b8:6c:69:40:36:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D0:3C:A1:5C:B0:E4:11:22:98:0C:23:5D:2B:6C:0F:98:56:E0:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/627d333d-65f7-39b1-b408-68b02d6fd4e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.147.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:2f:a1:fd:e1:7f:85:0c:7e:7d:3d:96:0e:72:4a:1d:5f:32:
         71:28:39:e9:cc:4f:28:8a:a3:80:58:69:dc:aa:86:a2:e3:2f:
         72:21:4e:d7:62:f7:2f:c8:a3:07:98:6a:96:3a:9f:0c:c3:19:
         fb:3c:1f:fb:67:be:32:a1:05:b1:77:d4:8f:36:c9:20:96:60:
         ac:29:6b:eb:d0:f8:35:d7:5c:f6:db:fc:e9:09:e7:30:eb:11:
         e2:d6:8e:f2:6f:73:61:a0:58:37:a9:52:5c:87:01:c7:09:5d:
         30:4b:9a:e7:de:4e:c5:b1:1a:0a:d9:c3:19:ec:b0:83:c6:07:
         f2:45:fc:af:44:e8:b5:ee:0a:c3:6c:21:03:6d:c6:4c:03:a5:
         37:c5:3c:ce:61:51:22:d1:44:38:35:81:4c:28:fd:67:5c:96:
         95:d1:1c:0c:06:e3:f3:16:c7:9e:82:0d:0b:30:1c:b5:10:56:
         e9:f1:6d:8c:7f:b0:00:c5:11:dd:8c:42:cd:77:b2:bb:d5:16:
         96:a2:be:99:b4:40:38:f1:4b:95:bb:f8:5f:47:78:ee:ec:34:
         81:67:57:bb:0a:42:5c:cd:53:77:65:27:e2:fe:e6:44:3a:11:
         c2:8e:7f:7e:17:ce:76:ce:1c:e4:af:2a:f3:ac:62:5f:f8:6b:
         49:ea:3d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:36:48 2025 by rpki-client