Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94a49f78-aa01-3760-a513-867975d6019c.roa
File:                     94a49f78-aa01-3760-a513-867975d6019c.roa (raw, json)
Hash identifier:          +A1YhlyGa16r0jXoYffE7L4ePjLH6Hg8V05Jtf/J4GM=
Subject key identifier:   0E:D5:BC:10:08:F7:D1:D4:D8:86:91:BE:AA:61:62:59:DF:6E:33:86
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED4CF64618CCEE4AEC3280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94a49f78-aa01-3760-a513-867975d6019c.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33490
IP address blocks:        24.21.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:4c:f6:46:18:cc:ee:4a:ec:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=6dd1c369-457a-4d3d-8fbd-88fd4e9d1084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a3:cc:de:74:62:aa:6e:1e:87:bf:c0:5e:cd:
                    07:8d:d3:f3:7e:23:4b:3e:7d:ec:d3:3a:93:da:69:
                    4a:59:f8:e0:a2:05:68:9e:1e:e6:65:b2:00:84:c7:
                    70:3b:0a:47:25:f8:c4:6e:3d:ce:1e:57:37:21:c1:
                    6c:32:7b:61:d9:66:98:48:67:75:88:07:ac:f5:39:
                    c7:e2:67:a6:c1:3a:fa:d9:eb:76:7b:83:28:04:7d:
                    39:b2:85:bf:f5:84:78:0d:eb:74:24:81:28:b4:20:
                    02:d8:5f:3d:47:a7:4f:f6:96:f9:1f:0b:f6:2f:36:
                    58:f8:d8:a9:37:37:77:ae:d4:85:23:ec:f9:6d:f1:
                    c8:fe:77:cb:87:27:11:50:29:7b:ea:bd:a5:1e:5d:
                    ec:aa:49:82:31:d6:48:27:9f:00:1f:7d:90:9f:24:
                    ae:d3:de:cf:aa:41:12:84:fa:43:1c:51:e6:37:fb:
                    4b:9b:03:0d:ce:e5:2f:41:63:5f:fd:b8:9c:77:73:
                    07:7b:ea:99:36:40:68:25:fd:a3:d0:98:ea:d3:33:
                    2a:b3:88:fe:d5:41:90:67:71:ec:52:6e:69:31:84:
                    62:1c:f8:ce:22:07:a6:de:e7:3c:42:79:2c:1f:b4:
                    57:06:e3:00:a2:a5:8a:8e:19:0b:bb:eb:72:4a:d4:
                    a5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D5:BC:10:08:F7:D1:D4:D8:86:91:BE:AA:61:62:59:DF:6E:33:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94a49f78-aa01-3760-a513-867975d6019c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.21.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:1b:74:4b:12:12:16:b7:17:ce:6e:6c:c0:82:ad:c2:e7:d8:
         89:34:3b:d3:bb:17:f6:38:e4:1c:4a:c1:78:7b:b4:9c:ea:f4:
         f1:49:d9:92:00:63:1f:5f:4f:b1:d3:11:1a:11:ad:ba:01:aa:
         8f:94:9a:e2:13:e5:d9:20:ef:57:94:e9:c2:26:fe:a4:9b:f7:
         85:ad:4a:24:ae:36:d1:51:1f:08:c3:df:7e:88:39:ed:fc:54:
         4c:bf:03:61:86:c0:a4:0d:41:a0:cf:7e:29:2d:3e:77:14:5f:
         52:55:a3:d9:c6:17:eb:b8:9a:e3:ae:60:82:2c:f1:c8:57:e1:
         e7:86:fd:d5:6a:ac:cc:48:39:9a:96:9d:db:63:3e:bb:8c:e7:
         da:e8:fd:82:6a:96:b3:7e:d8:13:c0:01:48:55:dd:79:56:f0:
         e3:d3:7e:d1:0a:c5:27:f0:79:55:ed:26:56:43:85:d9:1b:7a:
         cb:3b:4c:4f:7e:69:e4:5c:c6:1f:17:d0:3c:5d:06:ae:5b:9b:
         80:55:4d:69:c5:33:79:a6:26:f1:70:ea:2b:11:f9:47:2a:f8:
         47:2e:b8:96:04:22:6b:cf:ba:ed:88:1f:de:4c:2d:30:13:14:
         e9:36:ae:4f:3b:19:0c:a8:3d:e0:29:ee:3c:dc:3f:cb:89:ba:
         2f:7b:86:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:03 2025 by rpki-client