Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15b43de7-1ed6-3661-856e-b4b31d5536a6.roa
File:                     15b43de7-1ed6-3661-856e-b4b31d5536a6.roa (raw, json)
Hash identifier:          0tWVm3cOCIV34E+R3SmTDrkscmcp4lOxO2/AdK9S3lA=
Subject key identifier:   79:20:0A:55:06:23:40:35:7F:C7:A1:C1:B3:31:32:CE:9F:33:0A:A5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC4FC310FDFB8C7CF281F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15b43de7-1ed6-3661-856e-b4b31d5536a6.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        24.4.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c4:fc:31:0f:df:b8:c7:cf:28:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=09edcb66-43e7-43a3-a50a-37a14f2f1983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e4:93:bc:0c:0f:63:0e:f2:ef:03:b7:05:43:
                    05:12:f2:79:54:b5:e0:a4:64:aa:c7:69:43:2f:06:
                    0c:46:a1:a8:f4:6f:2d:1e:48:ed:bf:d8:c4:4a:a3:
                    fd:2a:59:a2:19:99:1c:3b:54:90:c7:2d:25:8b:a2:
                    66:c8:d0:0d:ba:ce:e0:b3:43:23:50:77:3a:02:9e:
                    db:ca:d4:18:a9:76:e1:ea:e9:b9:0b:89:cc:ad:69:
                    0a:1e:79:11:12:8b:72:f7:95:c3:41:e6:ad:94:93:
                    b9:3d:f1:8b:8e:8a:bf:7f:0c:a5:b0:65:af:18:8b:
                    ce:f9:0d:36:80:a2:33:c5:17:c1:23:db:1a:fb:8b:
                    5c:cb:bc:74:bb:a2:3e:87:02:db:a4:a4:34:0b:03:
                    64:a2:18:9e:62:f0:46:22:76:28:e6:6b:b1:c6:ce:
                    a4:03:d5:7e:ef:6f:ac:10:21:20:35:9e:5e:6f:2f:
                    07:6c:62:b5:05:4a:d5:30:dc:3e:b3:71:6f:da:b4:
                    01:27:dd:3a:f2:a1:46:37:38:27:85:cb:b1:ea:b2:
                    7a:33:15:73:0b:ee:be:80:cc:82:db:0f:74:89:fb:
                    93:6e:c0:dc:85:8a:90:05:0f:1a:88:de:92:8b:50:
                    79:01:dd:de:3d:b4:ef:36:98:77:2a:d8:61:b2:c2:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:20:0A:55:06:23:40:35:7F:C7:A1:C1:B3:31:32:CE:9F:33:0A:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15b43de7-1ed6-3661-856e-b4b31d5536a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.4.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:bb:69:77:08:2e:20:89:c5:20:60:c0:50:84:47:d8:35:37:
         c0:ac:64:b2:f9:30:17:4b:8a:11:99:ae:19:3f:be:7b:57:6b:
         34:77:b9:d2:ca:ad:27:7e:e4:0d:83:63:2b:52:2f:ba:88:b4:
         27:1e:7c:0b:ef:c7:9b:d9:06:fa:34:1e:88:00:23:8b:7b:ba:
         c2:07:2e:2e:ac:d9:ff:df:1e:17:86:86:e3:3d:d4:45:fb:58:
         85:7f:e7:78:c8:3f:c5:99:15:c9:26:58:d5:e6:66:43:9a:64:
         39:19:f9:9c:96:46:20:85:02:92:49:67:1e:61:81:de:73:7e:
         15:f6:53:08:e9:2b:f2:2b:05:72:35:34:78:8d:e9:69:e7:21:
         8e:57:75:7b:10:79:c5:ff:fa:06:02:14:f2:90:1a:e1:2d:45:
         1d:eb:71:14:3b:a4:a4:b3:a4:dd:20:e9:8d:45:a1:6c:64:9c:
         d5:82:d5:c6:92:6d:7b:f7:d6:8e:86:b0:af:b6:27:25:bf:9e:
         f9:f3:dc:79:5b:29:6c:d5:4e:dd:a3:46:91:a7:b2:36:01:d9:
         46:78:0b:15:a8:90:7e:ed:96:99:a2:29:64:1a:55:81:8b:ec:
         38:be:21:ba:ca:6f:91:4f:95:56:f1:a3:d4:f3:86:60:0a:7d:
         73:5d:e4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:00:21 2025 by rpki-client