Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b17ab14-2bd2-3c69-b266-978e7b553c97.roa
File:                     8b17ab14-2bd2-3c69-b266-978e7b553c97.roa (raw, json)
Hash identifier:          TVjqC+LOqDV+eK9LPh5E5OnKiEntNxHci5dhbVLc+1s=
Subject key identifier:   24:90:92:67:87:1B:B8:06:C4:71:03:6F:BC:3E:8C:CC:3D:AC:08:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED4BE0B546C088210E3C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b17ab14-2bd2-3c69-b266-978e7b553c97.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        24.21.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:4b:e0:b5:46:c0:88:21:0e:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=4c403a9a-4c85-462e-b361-3179bf6696d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7a:61:66:d9:91:94:dc:37:da:74:84:42:47:
                    86:cd:1f:5c:62:a3:e5:66:1c:15:49:34:27:0f:d0:
                    3a:85:76:44:02:f3:ec:2f:e8:f2:cc:16:46:43:c9:
                    0d:d3:18:57:24:05:61:72:cc:94:05:a5:e4:a5:9b:
                    18:fe:db:12:8a:e2:1c:6c:6b:04:4f:f1:9a:b4:6a:
                    7f:f2:ea:ab:2b:62:58:fe:9e:ca:8f:49:cc:e8:df:
                    e5:c1:4e:10:fd:ae:48:7b:f9:36:34:f7:ad:24:b0:
                    6c:d4:71:19:f1:fc:26:d9:55:97:e2:58:9d:ae:63:
                    34:0d:33:11:e5:f5:0b:21:e8:76:7b:e4:e1:85:8d:
                    00:7f:02:86:ed:41:df:d6:84:29:6d:7b:4e:84:64:
                    6b:ad:cc:80:4b:bd:c7:79:c0:f6:fc:ac:db:19:cc:
                    9d:53:14:0f:48:47:6e:71:94:b8:5a:84:56:c6:62:
                    bf:40:ec:43:34:66:56:a9:9e:f0:64:0a:96:82:82:
                    10:66:e5:b5:45:7b:8b:0f:d6:41:8b:c8:2f:a5:ed:
                    6a:90:64:55:b3:d0:7d:72:e3:90:3c:d8:3f:3c:e0:
                    3d:95:e1:4a:10:f5:f9:32:a2:42:ae:fe:dd:f9:04:
                    1f:89:03:de:d7:11:e0:3f:ea:bd:3b:66:62:3f:fa:
                    98:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:90:92:67:87:1B:B8:06:C4:71:03:6F:BC:3E:8C:CC:3D:AC:08:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b17ab14-2bd2-3c69-b266-978e7b553c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.21.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:93:df:b5:b8:ea:42:67:37:e6:7b:ea:56:7f:65:cf:ab:f6:
         29:33:bf:6d:c9:32:ee:7d:87:55:17:f4:1e:7f:fe:2d:e6:66:
         d6:6f:6c:55:80:8c:18:21:92:58:b7:14:b0:7f:7d:a4:a1:94:
         47:76:6a:b2:db:3d:6d:c4:09:9b:46:86:b8:a4:c6:25:7f:dc:
         f7:43:a9:bf:48:36:28:90:2b:b8:86:d1:95:08:79:35:8d:1a:
         1a:29:e0:b1:d2:a2:d9:82:94:52:a2:27:5e:f8:77:6b:e5:4d:
         a8:5a:ca:3d:90:52:b1:71:86:3f:1e:79:76:5d:45:66:07:8d:
         91:5e:c3:f2:8e:27:0c:26:b1:f2:71:e9:93:72:84:4a:d9:67:
         83:83:61:dc:0c:78:3e:34:90:f9:0c:f5:4e:3f:2b:93:3e:10:
         e6:dd:db:76:e5:45:d6:19:7a:7f:54:1a:7a:ab:66:64:2b:51:
         af:97:95:e3:5b:5a:64:82:44:80:6c:df:c3:18:52:ca:58:44:
         65:1c:1c:ec:bf:57:ef:80:22:b9:5c:c0:a0:75:0f:80:76:4c:
         30:d9:b5:33:c7:0e:1f:4f:7f:b1:d5:34:a9:58:1b:e8:13:32:
         6e:12:a5:31:9e:c2:8f:04:c6:34:b2:88:e8:b0:ea:ef:ee:ff:
         5e:ed:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:59 2025 by rpki-client