Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f37f2a8-649c-3229-8cb3-ccee1052b18a.roa
File:                     6f37f2a8-649c-3229-8cb3-ccee1052b18a.roa (raw, json)
Hash identifier:          9Hi22vjtaMAWhU3kh/I7eokxlvR2kB4DjUV+r61lwvk=
Subject key identifier:   87:C8:EE:61:E4:76:7D:44:33:7F:01:5F:CD:C5:A0:43:71:CA:97:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EBE2D01F889F18BCC71B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f37f2a8-649c-3229-8cb3-ccee1052b18a.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        24.63.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:e2:d0:1f:88:9f:18:bc:c7:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=8860c4f9-f41a-4da1-98b0-f531946235ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:19:0e:d6:46:90:3a:0f:71:b5:cd:97:6f:07:
                    af:3d:ca:0f:c4:ba:c0:24:d3:5a:b6:82:e6:49:5f:
                    38:0c:9e:90:8b:5b:ff:1b:a4:97:d4:13:cc:6b:93:
                    57:62:ac:78:3f:3b:1c:cc:a3:e0:e7:bc:59:77:9f:
                    9c:e5:91:58:be:f5:e5:db:50:42:55:ae:1d:45:af:
                    76:28:bd:8d:0d:1b:bf:42:39:c5:bd:8f:c3:e3:07:
                    1d:e3:a3:e0:ac:c0:b9:59:f1:9f:63:69:b5:34:98:
                    ce:52:08:a8:b9:02:cb:16:54:ba:b2:63:17:bd:40:
                    54:a1:a1:4a:d4:20:0c:1d:97:b4:22:a2:a4:a1:5b:
                    88:3e:e2:0e:77:19:8f:88:d2:18:2c:8e:6f:fb:f4:
                    35:dd:55:a0:fa:2f:9e:06:0a:80:0a:4a:2e:02:e0:
                    6b:87:b5:d2:0d:23:8f:dc:cb:25:46:12:3e:0f:ac:
                    f8:99:5c:2c:c7:23:72:7a:ca:30:f6:40:d0:ec:02:
                    d1:72:60:1e:07:a5:4e:32:17:b4:1a:cc:cf:e6:6e:
                    19:63:e0:89:1b:fe:e2:49:88:67:68:ef:50:3e:19:
                    90:71:30:a6:fa:73:1b:0e:59:00:5a:30:bc:dd:bd:
                    5a:ff:7f:93:f0:6d:aa:68:f9:c1:14:35:16:d8:aa:
                    9a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C8:EE:61:E4:76:7D:44:33:7F:01:5F:CD:C5:A0:43:71:CA:97:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6f37f2a8-649c-3229-8cb3-ccee1052b18a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.63.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b4:08:28:3a:9b:f7:5a:cb:54:8c:54:5d:b1:4a:98:5f:fd:
         3e:91:ae:cc:e6:a2:53:43:78:b1:93:7c:56:1a:e9:22:66:10:
         a1:8c:b7:7a:c2:07:ab:d0:cf:93:84:6d:92:ca:56:1b:f3:e7:
         a5:1f:0e:da:6a:9a:96:4a:92:63:fc:3b:01:0d:f1:56:27:09:
         2a:29:2d:a2:73:0d:54:c3:b6:86:5a:6d:3a:b0:5e:d2:b4:e8:
         54:88:83:5c:09:6f:42:0f:f7:bd:2a:7a:6c:eb:56:43:60:eb:
         71:9c:05:33:62:04:de:c6:de:2f:c8:a1:91:42:c8:d8:d9:1e:
         67:42:10:b9:dd:e8:1f:d7:71:f6:27:b5:36:d8:35:3f:5b:6c:
         89:1f:c8:9f:de:79:4a:a9:ee:4a:23:71:2c:53:8f:1e:e0:0b:
         35:37:d6:7d:db:a3:b1:cb:f0:9d:4a:d3:28:f8:ac:80:49:8a:
         e6:7e:5b:6d:3b:3c:62:71:44:ad:90:82:a1:05:68:1c:8d:e0:
         aa:ae:b1:eb:aa:44:ae:c5:a2:87:27:85:c2:18:a9:e6:02:2e:
         b6:22:4b:56:01:6d:fa:86:1b:10:85:3a:dc:1f:e8:8a:22:75:
         49:f6:17:bc:7d:82:39:2e:03:d3:5a:09:55:15:af:5a:e3:16:
         27:99:d3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:10:34 2025 by rpki-client