Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c29e5c9-3233-30eb-9078-927268b81dc6.roa
File:                     6c29e5c9-3233-30eb-9078-927268b81dc6.roa (raw, json)
Hash identifier:          /bXY+nQ8nj0UHKge39v7IKGqwtFUdPQnTFcQ5tLxvsc=
Subject key identifier:   DE:47:7B:E5:73:22:2B:AD:B1:5B:45:CC:A4:53:E8:12:93:9F:F1:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED9666E1D06B3C7CC2F800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c29e5c9-3233-30eb-9078-927268b81dc6.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        24.61.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:96:66:e1:d0:6b:3c:7c:c2:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=5f0b0b15-ee46-4273-86d0-e784709420e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:77:e3:a7:ea:37:d4:0f:52:9b:a4:3d:43:6d:
                    ce:7c:ee:ee:c6:7a:c0:25:74:47:73:ec:c1:3c:37:
                    36:65:84:de:21:de:65:44:13:3e:b0:bd:16:93:a1:
                    fa:33:d4:9b:bb:fe:29:5f:44:ff:96:83:3c:d7:25:
                    c1:7a:c3:3f:1d:a4:64:c2:ef:af:f0:3c:39:d1:60:
                    32:20:da:6f:2a:97:2f:2b:87:39:29:2b:fe:87:67:
                    48:7f:9f:2b:7b:12:77:72:cd:bc:a3:e5:51:b0:84:
                    89:a4:6f:5b:d6:04:43:4f:77:86:49:8c:a1:4d:8a:
                    05:11:08:a8:db:33:6c:bc:aa:e2:8a:7e:82:08:d9:
                    42:09:94:2a:0a:56:04:27:13:c7:6b:ba:b1:00:44:
                    b6:3b:2b:be:35:18:91:83:1c:d0:aa:3c:85:0d:c6:
                    70:f3:53:fd:7f:4b:af:01:e0:2b:42:b4:3b:93:f4:
                    cb:a9:40:84:75:11:e4:9b:6f:f5:0c:61:e2:e3:12:
                    bd:10:db:2a:4e:5b:18:8d:f1:d7:6a:1d:57:bf:d3:
                    cd:7b:ce:1a:50:d5:51:5b:4b:4a:35:e4:56:a9:8f:
                    c0:ee:67:c0:02:cb:98:16:33:fc:b5:7f:38:65:80:
                    ea:1c:49:9d:a3:3d:08:87:f1:a4:dd:5f:d1:5b:42:
                    7c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:47:7B:E5:73:22:2B:AD:B1:5B:45:CC:A4:53:E8:12:93:9F:F1:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c29e5c9-3233-30eb-9078-927268b81dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.61.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:39:49:87:33:48:13:7a:3b:0d:ca:aa:46:4b:12:8a:1d:98:
         61:8b:be:47:31:47:16:a1:b4:46:1a:9d:aa:d9:4e:ac:2b:aa:
         d7:eb:a1:27:85:c1:fc:49:21:ad:bc:05:31:9f:88:70:53:2c:
         07:97:43:80:9e:54:db:ac:37:05:34:e0:80:98:8a:78:e2:24:
         7e:1b:1d:55:55:ab:47:b0:3f:ee:cd:41:af:02:6d:b9:5c:59:
         74:3d:65:60:26:32:5c:0f:94:0a:58:cf:8b:12:ec:b6:64:65:
         a1:7b:b5:63:d1:3d:87:a5:0f:3c:b6:17:a4:d3:25:63:a9:20:
         8b:1b:1f:02:0f:4c:6e:55:cc:49:97:26:ef:3c:78:d6:2b:77:
         bf:71:66:6d:e5:33:0f:e7:d8:63:ac:33:d6:f1:01:bf:7c:ac:
         c1:68:b1:1d:96:85:6e:98:2f:5b:04:9a:b7:7c:d3:37:f8:0e:
         8b:2a:95:75:0c:de:13:bc:65:cf:94:1d:02:a3:08:df:51:48:
         b9:34:c8:f0:38:b3:72:55:69:72:a5:e6:97:a2:d2:8c:db:e1:
         8f:84:5e:41:67:ee:57:ac:ee:10:81:32:7d:ab:f2:a1:34:d5:
         19:b8:5d:4c:f9:07:63:d7:16:b0:2e:d0:37:a1:69:a4:47:64:
         bd:9a:68:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:55:02 2025 by rpki-client