Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f41f4d6d-606c-3752-ae43-f41721221268.roa
File:                     f41f4d6d-606c-3752-ae43-f41721221268.roa (raw, json)
Hash identifier:          hmyzeTIl6k00Fh46Sbm4FJPE+xgAhY2AgBl0hcPG9Ro=
Subject key identifier:   FC:2E:4D:CA:4C:96:81:E5:76:1D:A8:9D:9F:F5:07:EB:AC:05:74:9D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584BC10AEDAE92C05FE433AA4D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f41f4d6d-606c-3752-ae43-f41721221268.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     7725
IP address blocks:        24.126.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0a:ed:ae:92:c0:5f:e4:33:aa:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=39493ad3-f4c4-4bc7-97cc-94f8bd044ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:62:cd:82:f2:59:41:61:df:d0:ae:0d:ee:7e:
                    59:ee:86:c9:5a:30:c3:da:e4:82:7d:cd:99:0d:5d:
                    b3:9a:5f:e8:54:7b:57:89:91:57:5a:29:d7:09:6a:
                    3b:2a:8e:88:22:0b:39:29:c4:20:1f:47:20:29:8c:
                    59:c3:a3:1b:8f:96:3f:2b:9f:12:32:70:bf:98:b1:
                    20:18:b9:76:7a:3d:0c:08:51:7e:6b:b0:c5:fb:f8:
                    04:79:52:93:c3:d5:6f:46:c5:f6:d5:ba:f2:37:5e:
                    89:06:ba:4b:93:33:a2:5f:aa:fe:b4:46:df:9b:e6:
                    64:50:ab:67:5c:a1:76:50:2a:bd:c3:63:af:72:4c:
                    b7:0b:e5:b9:12:f5:49:04:8f:30:7c:39:34:20:29:
                    3f:ad:a0:4e:c6:73:5b:b8:36:60:4f:c0:8c:54:4c:
                    e4:0f:9c:15:c9:86:e3:69:83:a3:5b:1c:b9:ba:31:
                    53:82:0a:6d:24:ac:25:db:cd:7e:fb:b6:e0:cf:21:
                    62:09:06:67:20:fc:cf:0d:0b:d8:8c:02:84:8e:e7:
                    57:d9:34:20:26:12:79:3b:42:f7:81:fb:f3:39:65:
                    2d:e5:cd:14:4e:12:e1:55:05:38:5c:ce:9e:3b:3d:
                    db:4f:0e:5e:45:15:95:ed:0a:b2:2a:41:94:63:6e:
                    ca:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2E:4D:CA:4C:96:81:E5:76:1D:A8:9D:9F:F5:07:EB:AC:05:74:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f41f4d6d-606c-3752-ae43-f41721221268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.126.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:bc:e3:67:2a:69:88:a2:38:37:2b:0a:25:13:2c:db:04:8d:
         c0:d0:cb:55:4e:d1:4c:a3:52:b8:de:4b:72:7b:14:bc:53:e3:
         dc:d3:a6:27:16:09:ac:68:66:e5:07:69:00:f2:14:ae:3c:33:
         6c:7a:f5:fa:8d:f3:b3:69:6c:76:c7:78:54:6b:c5:3c:df:8a:
         74:6f:72:8a:91:53:1b:99:e2:26:90:ea:a5:81:1e:ba:47:92:
         5d:f4:b2:b0:3b:3b:4f:2a:13:b2:16:63:2b:2c:a7:b3:1d:ee:
         e6:06:5e:0f:2a:ce:a5:97:0e:64:ca:6d:8b:ad:d3:2a:04:b5:
         b1:e5:1f:aa:62:97:ec:77:ff:fb:c3:cc:4e:46:3f:a9:fc:30:
         40:4b:29:63:78:92:8f:0f:57:38:ad:59:07:80:5a:b7:db:d2:
         67:2c:ee:b4:ca:90:8c:a1:ee:5c:d5:0e:1a:b3:21:e9:e6:46:
         a8:1c:63:a9:3c:08:64:c7:98:c2:fc:83:97:bd:aa:27:a2:bf:
         82:bf:ef:d2:6b:cb:a5:2b:3b:56:fd:79:b4:00:d6:c6:3c:b7:
         48:54:1e:23:30:41:ee:57:1c:7c:af:84:8e:0e:ea:c4:ad:82:
         cc:50:72:0d:17:a4:5d:db:b5:38:15:a7:36:70:75:15:92:6c:
         5c:d4:38:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:07:35 2025 by rpki-client