Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1e459e3-a34b-32f8-977d-a99ea14941f7.roa
File:                     a1e459e3-a34b-32f8-977d-a99ea14941f7.roa (raw, json)
Hash identifier:          bI3XzGbfGrFNkGGihfmDZq7y30lFunBKBSrX6CAmdq0=
Subject key identifier:   14:41:80:03:A7:0F:CB:5C:E9:51:EA:50:DA:CD:2C:1D:AF:CD:27:3D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4EBDF19D0640218BF06A680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1e459e3-a34b-32f8-977d-a99ea14941f7.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        24.62.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:df:19:d0:64:02:18:bf:06:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=aae1eb93-e9d7-4fe3-8e30-8f3005bd4754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:35:a2:d6:b5:67:18:b1:ea:df:bb:bb:b3:e7:
                    cd:c8:ca:1e:67:70:39:78:fe:f1:54:95:66:66:16:
                    57:ae:2b:13:e3:12:84:d5:98:cd:a0:65:49:bc:e7:
                    77:ca:61:47:93:32:9d:64:41:ee:e2:ba:8f:04:95:
                    a4:48:28:80:fb:69:5d:9b:7c:85:ea:8b:a0:bb:95:
                    35:f1:eb:9f:75:46:1e:82:90:4d:1d:b7:70:f3:5b:
                    74:f5:62:3a:ff:c9:93:a1:3d:e6:a8:54:1f:3f:01:
                    d5:2d:aa:ab:9e:0e:2e:e7:45:37:46:61:54:26:83:
                    a1:6b:8e:69:59:c9:9e:88:9d:c3:08:03:d3:04:4e:
                    60:be:ef:b1:cb:5b:d4:50:bd:2f:85:6f:22:b8:8f:
                    ea:5e:1b:97:2d:6e:57:cc:bd:82:b5:bb:ce:40:f7:
                    83:4c:88:ef:44:aa:af:eb:e6:e6:4a:a9:bd:6d:01:
                    3e:d2:95:09:d2:a6:c3:9d:6d:91:a2:6d:f7:1d:6a:
                    df:3d:0e:d8:66:e5:7b:a9:3c:a8:6a:5d:90:54:51:
                    ae:6c:c0:f7:61:be:8a:fd:55:15:39:3f:ed:7d:b9:
                    7d:3e:53:20:86:a1:4f:44:a6:84:d5:79:dd:30:33:
                    51:1a:da:02:87:4b:7d:2a:3a:47:f9:72:6b:5f:b9:
                    0c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:41:80:03:A7:0F:CB:5C:E9:51:EA:50:DA:CD:2C:1D:AF:CD:27:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1e459e3-a34b-32f8-977d-a99ea14941f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.62.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:23:ad:e8:b9:66:ae:68:fb:a6:44:02:94:c4:68:89:7a:94:
         b7:a2:de:bf:93:ad:25:2e:79:2c:35:f8:8d:a2:f5:b8:33:45:
         54:c3:8a:24:8a:b9:c6:a5:b2:5a:20:02:99:2e:78:a2:1b:63:
         ca:52:98:ae:4e:ec:7c:42:f8:9d:18:ad:c6:3a:94:0a:b4:44:
         58:74:3b:3b:8e:da:db:96:a0:b0:9b:ea:d6:86:0a:5f:9f:99:
         fb:54:6f:17:5a:a5:70:0f:22:17:93:52:88:b0:ce:d4:a9:c5:
         15:ad:8a:66:35:36:43:46:e5:e8:f7:9d:69:23:6d:a2:02:83:
         1d:ea:cc:a7:f5:27:f7:46:7d:a0:e9:f0:fc:14:99:40:97:7f:
         e8:26:85:c6:7b:97:98:3b:6f:3e:fa:5c:79:ca:3b:c8:a2:28:
         e5:30:f8:c4:ec:bb:72:f1:83:b1:8b:9d:94:13:30:6e:ef:f7:
         14:ad:20:54:62:5f:34:ee:bc:c9:32:1b:7d:2d:f1:07:50:b1:
         c1:6a:d2:b8:d8:4d:1e:11:fd:77:b4:9d:d1:16:ac:29:79:95:
         8a:31:e9:bf:98:04:c7:e1:0e:ea:c9:ff:ff:00:cb:18:89:e9:
         3b:22:c1:80:5e:04:8b:57:18:ee:2e:47:80:c6:27:c6:95:d6:
         b9:b0:24:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:10:43 2025 by rpki-client