Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16da61d9-b3d2-3ba3-ba1e-bc11a7b90c4c.roa
File:                     16da61d9-b3d2-3ba3-ba1e-bc11a7b90c4c.roa (raw, json)
Hash identifier:          kTLR1IAdh1ifBkuJd2ufgsyHEiRrsB5MoGM4rZCokRE=
Subject key identifier:   A2:0D:7E:E4:12:AC:4F:B5:73:32:7C:8F:41:77:B0:2B:89:B3:E4:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031A950FD3F7A6460575BA8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16da61d9-b3d2-3ba3-ba1e-bc11a7b90c4c.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        24.125.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:a9:50:fd:3f:7a:64:60:57:5b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=38f5f1b6-73ac-4b9f-aa3c-15ae79449e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:fe:e8:33:7d:d2:7f:c8:2f:e3:eb:b9:c2:
                    34:4b:da:76:1d:95:2d:b8:59:09:98:03:c4:a1:4d:
                    84:54:a3:f1:ea:45:d4:43:9c:9d:9a:ef:76:7a:b1:
                    21:a6:20:49:56:64:2e:83:0d:80:7e:78:9b:3f:36:
                    c6:d5:da:56:77:85:40:9a:8b:04:96:01:ae:06:3a:
                    a3:da:2c:03:3c:15:5b:27:3f:b1:54:a2:35:f9:c5:
                    d6:ab:d9:c7:14:6b:fd:b6:7e:27:88:c5:6b:60:6c:
                    76:7e:42:be:b3:54:9c:06:8d:fc:67:2f:96:92:89:
                    18:b0:a1:ca:5c:81:fc:e9:8b:b6:25:8d:3a:99:69:
                    84:f0:73:51:af:7d:33:f4:79:93:42:a4:71:3d:3c:
                    40:0a:fb:e7:33:4c:4a:64:41:2d:53:a7:d2:c2:5f:
                    0b:13:bb:a4:8b:06:34:f2:d9:2c:6c:54:ed:71:42:
                    e0:11:cc:c6:8e:fd:2b:b1:ae:d0:ae:64:fe:8f:c2:
                    b0:ee:41:45:79:c4:9c:3f:3f:4a:77:44:45:7c:13:
                    93:92:80:bd:f9:c7:60:74:d8:dc:f6:96:c3:18:a2:
                    40:81:6a:92:c2:08:23:9c:06:2b:fa:e9:69:5a:de:
                    1a:74:6f:01:92:9d:f7:d8:8c:68:59:4c:51:e6:da:
                    4c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0D:7E:E4:12:AC:4F:B5:73:32:7C:8F:41:77:B0:2B:89:B3:E4:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16da61d9-b3d2-3ba3-ba1e-bc11a7b90c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.125.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e2:72:30:db:6e:57:8d:47:58:83:af:01:c5:ca:7f:5a:15:
         28:43:b1:fa:be:64:72:d4:6b:b4:6a:2f:99:95:a2:f9:29:3c:
         43:94:70:90:3a:83:e5:04:6a:df:cc:5d:ae:27:6e:27:f9:bf:
         f7:f2:da:7b:42:ca:4d:8d:a7:f5:48:cc:5f:c8:e1:f5:60:94:
         f6:df:b2:d5:50:f4:18:f8:f7:08:1e:5c:b8:11:47:f7:4f:e4:
         8c:df:67:78:05:f8:c2:3e:9c:84:7d:d3:8b:5b:0c:b5:7d:3d:
         be:db:3a:4a:05:97:d4:da:61:98:d9:e1:a3:ed:c8:db:6e:4b:
         2f:f9:2e:73:30:85:dd:77:28:c0:de:a4:28:07:22:d0:94:48:
         69:18:bb:f4:64:b9:55:33:24:1f:89:08:d1:b1:2a:4a:59:fb:
         dd:bd:58:85:80:50:16:e7:84:0c:75:10:d2:78:70:ec:74:69:
         fe:12:93:de:77:41:23:d2:cd:9d:23:11:ad:86:78:55:39:fe:
         3f:a2:fe:29:0d:f5:0e:d4:6f:36:9f:75:a4:7e:2c:91:9d:e9:
         03:9e:39:12:b7:b3:e7:18:f7:a5:e6:4a:96:ee:6a:e3:6a:71:
         3d:1e:60:0d:86:25:02:f9:a1:94:75:cf:52:b3:b9:f9:01:51:
         c5:67:1b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:54:19 2025 by rpki-client