Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a7791d6-d64b-3060-af7d-1c2c03215236.roa
File:                     9a7791d6-d64b-3060-af7d-1c2c03215236.roa (raw, json)
Hash identifier:          2Cd0b4Kjawj7H4YLeRPRd+7Sas95LevQ84/DlvRsvIc=
Subject key identifier:   2E:BA:3C:4F:EA:19:A2:B0:D7:87:BE:3C:54:5D:DB:44:6B:22:CB:2D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED9A7585F4795C4A664240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a7791d6-d64b-3060-af7d-1c2c03215236.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        24.63.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:9a:75:85:f4:79:5c:4a:66:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=6281870a-30dc-4693-9b03-6890788f96a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:83:0b:99:55:e3:2d:dc:25:6f:0f:2e:76:
                    bb:f0:e4:7d:84:01:84:c8:c4:45:80:0b:ad:41:e6:
                    d0:7e:f8:ff:c6:09:01:35:46:8c:fe:d8:f7:cd:1f:
                    8a:bc:c6:39:24:35:6f:28:86:70:5e:99:ec:48:7a:
                    2d:db:12:2e:6f:ed:30:88:99:7c:4d:33:b0:c7:95:
                    d7:b2:aa:f7:17:2a:52:2a:2c:bc:c5:9d:89:6b:9a:
                    86:6a:e0:cc:8a:5c:1f:6f:2a:54:f0:b5:4f:c3:37:
                    36:cb:6c:17:f2:fc:f5:d9:f3:98:ff:71:50:da:90:
                    11:51:01:87:04:6b:08:4d:62:a9:9a:ee:68:ba:32:
                    3f:2a:76:11:af:64:ca:09:20:e5:83:03:ac:42:d2:
                    6c:32:d7:94:7e:8c:da:9d:be:95:1a:18:a0:1f:47:
                    b3:1d:5c:44:16:27:d7:fb:6a:6c:07:62:93:81:70:
                    e3:c2:09:60:85:9c:48:40:0b:57:d6:0d:dc:f7:18:
                    db:51:71:67:f0:ef:c8:d8:2b:31:34:d9:4e:9c:ae:
                    ff:21:8f:63:7b:cb:78:30:71:21:07:bd:a5:4a:fe:
                    46:55:d6:de:57:3d:d6:96:15:a1:91:5d:e5:91:bd:
                    0c:f2:48:ef:6e:71:43:c4:ec:ea:5e:43:68:9d:31:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BA:3C:4F:EA:19:A2:B0:D7:87:BE:3C:54:5D:DB:44:6B:22:CB:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a7791d6-d64b-3060-af7d-1c2c03215236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.63.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:40:8e:49:ae:fa:10:84:13:1a:f9:a1:46:b3:2d:e7:91:9f:
         ff:27:bf:3e:6e:23:96:6b:44:7e:2b:41:e1:c6:71:d1:8b:da:
         2b:3a:c8:9e:1a:13:f5:80:12:1c:4e:5a:52:c5:2b:16:1d:24:
         5b:58:57:64:d5:26:70:3d:e8:fd:bd:06:e6:79:6b:4b:09:b7:
         24:87:2e:f8:d7:53:ac:16:33:d5:ee:8e:66:65:1f:e2:a2:86:
         55:f0:9b:55:85:f7:c3:0c:42:fa:83:9e:54:cc:cc:ca:ee:97:
         8e:73:ab:39:9b:3a:77:34:19:20:f1:44:30:60:20:a0:b8:1f:
         23:0a:90:cb:d5:2b:c6:1b:b2:9b:0b:aa:71:2a:1b:1d:27:cb:
         b1:8e:79:4d:1b:fc:b0:9e:e8:1a:b3:cc:52:c8:3f:d4:7e:80:
         8d:90:e8:91:02:21:19:bf:ce:25:78:b4:2b:4c:c5:e7:a1:96:
         3e:c4:8e:05:bd:af:da:e2:a4:de:b5:51:41:cc:1b:3a:1c:95:
         64:df:8a:d3:c8:0c:4e:c3:2f:b9:3d:65:f3:0e:17:eb:bc:9c:
         13:b8:e0:89:2c:6e:ca:57:0a:75:70:1c:7d:a6:ca:52:cb:21:
         5b:d5:a5:3f:6e:61:17:bd:a8:63:7d:0f:23:02:d1:86:2f:5e:
         6e:41:29:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:14:26 2025 by rpki-client