Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10d6f15d-3958-3af8-8564-42cb2deeb075.roa
File:                     10d6f15d-3958-3af8-8564-42cb2deeb075.roa (raw, json)
Hash identifier:          N/UtTBz+N10OzuRYKmTE2h1dNk1RmJoLKOj7QvrUCHk=
Subject key identifier:   94:B0:61:01:4E:0F:D1:75:73:84:77:D6:BC:8A:BC:47:AE:1E:15:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC418954F740AF9EA7E3E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10d6f15d-3958-3af8-8564-42cb2deeb075.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        24.12.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:18:95:4f:74:0a:f9:ea:7e:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=9504bced-504e-4713-987f-29de07b976c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:d5:42:e0:22:cd:d0:2d:0e:3a:b0:95:92:
                    a6:10:a5:97:31:d7:2b:3b:3b:1a:41:e2:c7:f4:8f:
                    fa:1e:11:fa:1b:50:04:d1:2b:36:82:ea:8e:91:2a:
                    ea:95:9b:ab:a1:6a:e7:eb:88:c6:ee:af:56:4f:4c:
                    1f:63:46:a8:bb:9a:ab:07:aa:9c:dc:18:e9:3f:f8:
                    de:55:fe:a2:8d:67:76:fb:95:11:77:95:1c:95:8f:
                    46:68:7d:0a:6f:16:71:9d:1d:8e:e4:89:77:17:b3:
                    d2:af:7a:da:b8:92:f8:90:d5:7b:66:0d:65:51:df:
                    4a:4d:43:e0:74:1d:3a:c6:d4:38:23:65:57:b3:07:
                    74:ca:58:f2:f0:7b:ee:df:6c:14:f4:b4:ae:42:8e:
                    7d:5f:49:31:12:be:4e:ff:2e:c6:1d:7c:a6:ef:9e:
                    d5:18:bc:1f:4e:13:26:ed:a9:84:0d:fe:23:f7:e8:
                    e2:d5:44:c1:70:de:72:10:8c:bc:7d:a0:9a:b1:05:
                    90:e4:5b:c6:06:b3:5b:f6:dc:98:3f:f3:a6:97:6f:
                    67:a5:13:e3:47:66:07:6f:68:41:fd:7e:1f:0a:55:
                    89:f1:86:f7:95:1c:7b:3f:10:21:09:5a:32:7e:d2:
                    41:58:49:78:8c:1b:9f:c2:3c:58:5b:19:34:3d:9e:
                    1d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B0:61:01:4E:0F:D1:75:73:84:77:D6:BC:8A:BC:47:AE:1E:15:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10d6f15d-3958-3af8-8564-42cb2deeb075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.12.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:63:47:2e:5b:0b:12:8f:3a:3d:c1:80:a6:44:3c:58:91:15:
         a8:64:e1:b5:69:a8:7b:36:6e:a6:f8:6e:bd:06:85:10:1b:0d:
         0c:7f:a5:14:57:c3:e3:c7:2d:77:56:0d:70:40:07:ab:53:d1:
         16:30:77:f7:dc:5b:14:64:59:fa:d4:bb:d6:b5:17:eb:ce:c0:
         1a:a5:26:63:7e:9e:ec:c9:bc:07:8f:8a:85:66:25:a8:f4:c6:
         b3:d7:77:23:79:77:e3:83:34:58:84:6a:4f:fe:88:4a:cf:fa:
         3d:97:59:de:0c:80:89:be:24:04:ac:4b:1d:ba:ac:ed:7c:d5:
         29:f0:ea:23:3a:ca:49:76:01:6c:ca:f9:2c:0c:25:42:b0:d9:
         f2:21:ed:d3:f9:ce:26:23:56:aa:63:36:9a:5d:9c:9c:d1:a3:
         7e:82:b5:69:48:55:6d:43:9c:a4:64:41:a2:79:07:31:fa:a8:
         63:99:e7:9c:02:8a:44:90:3c:7b:ad:d1:fc:b1:f1:3b:f0:87:
         d2:86:1a:bf:33:6b:bf:8b:12:eb:2f:9c:1a:84:11:fa:b5:f1:
         10:37:56:bd:e8:82:26:1a:19:73:fc:91:85:fc:5e:7e:66:2a:
         0c:1a:3f:7a:ef:b4:6e:37:90:0e:47:9a:1d:5b:26:c0:3c:c1:
         80:34:d6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:21:07 2025 by rpki-client