Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7b98ab8-045a-3c42-8890-8720128badbe.roa
File:                     c7b98ab8-045a-3c42-8890-8720128badbe.roa (raw, json)
Hash identifier:          C41uE8poLOMHHMUrlnsV0UlZu+w0FGNaJnJV9oyJxIY=
Subject key identifier:   9A:FE:9F:AD:03:F6:05:77:81:27:5D:85:22:0E:38:66:CF:E0:1E:09
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB220E787FB1B5DDD5BC1E180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7b98ab8-045a-3c42-8890-8720128badbe.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     13367
IP address blocks:        24.118.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:e7:87:fb:1b:5d:dd:5b:c1:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=7e26b5e7-e4da-4064-83aa-4fd5da9ad7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ab:08:c7:4f:ce:0f:15:e8:03:40:a9:e0:9b:
                    b2:ca:d6:e5:0d:ad:43:f7:db:f4:73:c5:cf:52:4c:
                    8a:b0:ed:2c:76:54:cc:09:fc:9d:59:7c:d8:0a:5f:
                    e0:01:3a:3b:fe:60:3e:91:33:63:61:40:5a:3e:df:
                    f7:f8:45:34:57:6a:82:97:eb:1b:fd:84:a9:b7:07:
                    80:f9:d8:79:04:d9:ab:9f:c7:5b:d5:da:27:45:c9:
                    8b:84:c7:48:fe:5b:40:af:bf:59:9a:c6:67:0a:cb:
                    17:9e:b0:a7:e0:19:85:9a:1a:9c:7b:d1:90:ab:a2:
                    69:b1:fb:25:db:6e:b4:c1:7c:23:51:21:e3:3b:2c:
                    06:c0:cb:67:6d:2e:9d:91:12:92:52:cf:e0:9a:0f:
                    b0:e5:df:25:3e:0c:00:4a:80:21:04:a1:28:0c:21:
                    06:ee:a6:4e:8c:cc:b6:bf:9b:5d:09:a0:9e:36:81:
                    3f:11:ff:4f:07:56:8f:2e:a5:78:00:64:da:ca:ff:
                    97:4a:2d:be:18:e4:c7:41:73:9a:a6:24:6a:7e:0a:
                    cf:53:58:3e:56:0d:54:26:b8:04:90:bf:06:75:58:
                    32:a0:c8:06:6a:d7:fd:0b:2c:ac:4e:42:2c:18:87:
                    b7:64:9a:39:21:b9:02:f9:4f:ea:73:ee:0e:be:70:
                    5c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FE:9F:AD:03:F6:05:77:81:27:5D:85:22:0E:38:66:CF:E0:1E:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7b98ab8-045a-3c42-8890-8720128badbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.118.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:72:ba:82:fc:38:ec:f4:ff:73:6d:df:d1:2a:60:bb:6b:34:
         74:2c:8a:19:05:d9:b6:be:e5:f6:35:df:b5:23:69:bb:54:a1:
         e8:1f:e4:2f:fc:a3:fa:23:1c:a5:1a:bf:3d:2d:c7:96:45:ab:
         f7:17:e9:75:71:29:4f:39:62:b6:63:5c:62:aa:aa:06:05:0f:
         35:e2:bc:78:4d:62:6e:f1:75:3f:4f:bf:70:8c:2c:b4:16:a7:
         84:04:ef:b0:6b:71:40:98:59:ff:24:62:6f:67:b9:4c:64:3f:
         3d:d4:f8:7f:c7:f3:a3:20:f9:3b:29:77:e5:ab:a0:cb:77:8b:
         4c:97:70:fc:26:e8:8e:5c:60:34:00:66:1a:58:9a:9e:e8:c8:
         c7:cc:ca:d0:48:ad:d1:be:26:4e:45:9d:c1:97:41:a4:df:ff:
         13:b0:94:33:bb:ed:b0:8b:8b:47:45:9d:cb:e9:fb:22:be:56:
         73:72:1f:97:88:32:11:3f:84:1e:6c:74:ab:2f:cb:ba:ab:63:
         e7:7d:3b:be:e9:46:a3:c3:a5:49:75:e6:20:bc:80:cd:8d:45:
         dd:ed:30:c7:23:10:70:96:17:14:6f:9e:b5:3b:67:e1:b8:3c:
         e0:b1:96:04:63:b9:bf:22:b8:1f:87:15:2e:53:e2:cc:00:94:
         f9:c0:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:45:50 2025 by rpki-client