Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f82899d-9848-3fe0-895b-6e49b1af69de.roa
File:                     4f82899d-9848-3fe0-895b-6e49b1af69de.roa (raw, json)
Hash identifier:          BqclnxROvVAbGDdlRQHEmbjIXtt1cCJ4nuYpg8Glm6I=
Subject key identifier:   DA:07:B4:56:AA:59:2E:AC:6C:3B:E0:70:78:50:10:A3:41:F8:76:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2118AE9FA629ADBAB1080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f82899d-9848-3fe0-895b-6e49b1af69de.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        24.1.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:11:8a:e9:fa:62:9a:db:ab:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=878641f7-7d2e-4809-aabb-f25d8ec6105f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:a9:0e:e4:39:0e:1a:72:7a:7c:73:4a:23:
                    0f:e5:70:25:a6:dd:35:2a:b5:ef:74:30:27:04:54:
                    b7:b3:23:8a:39:a5:6d:9f:ce:32:25:52:ba:00:29:
                    29:b0:54:b1:8c:56:6f:77:0d:e9:bf:72:3a:02:a9:
                    bc:40:b3:7a:b1:65:96:55:0a:c2:31:46:aa:cd:5a:
                    c5:34:5a:b7:15:a0:a6:36:d3:7e:a1:58:31:69:ba:
                    d8:8d:32:9d:73:13:d2:57:3d:82:2c:70:54:1f:32:
                    c3:00:88:27:8d:6b:54:bf:c5:60:54:7a:3b:aa:39:
                    f8:76:76:d2:e5:57:2a:5f:99:cd:1a:26:a8:d6:ce:
                    d3:74:38:a0:9a:2c:30:2f:22:d4:6b:d2:9f:6c:ea:
                    b8:cb:58:33:cf:54:0c:fd:24:29:f3:9f:2d:15:cb:
                    b2:e6:61:52:9a:d5:12:9e:d3:04:bf:85:d2:1a:f0:
                    10:5b:35:a7:8b:55:65:16:28:9e:96:86:d3:8e:91:
                    db:a8:5e:9e:36:23:8e:3f:06:1a:ab:1e:a1:42:a2:
                    69:df:41:cb:10:88:da:a3:90:6e:cd:b8:92:ec:2b:
                    62:fd:73:da:8f:02:27:4c:47:7f:67:7c:89:7e:35:
                    91:ec:a3:69:97:a1:9b:b7:51:53:9f:1a:9b:aa:70:
                    83:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:07:B4:56:AA:59:2E:AC:6C:3B:E0:70:78:50:10:A3:41:F8:76:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f82899d-9848-3fe0-895b-6e49b1af69de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.1.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:49:40:16:2a:81:e1:65:34:ce:38:3f:e7:c3:4d:f2:81:06:
         be:74:1f:ef:31:04:b5:88:be:a2:88:a8:dc:ab:df:a0:8d:ec:
         5a:49:45:e5:61:47:28:f5:5a:00:6d:52:c9:17:30:3a:e8:93:
         b4:48:4b:23:a8:35:5f:58:0d:72:de:97:24:9e:4b:51:51:52:
         48:6a:75:94:08:93:46:08:ce:2e:14:fe:02:40:1e:8a:f6:58:
         fb:b4:11:89:ea:a7:08:96:82:73:34:10:83:b0:7c:d3:c0:42:
         b3:b0:4e:9e:9a:aa:a6:12:e3:bf:5d:50:bb:f1:a7:29:3d:17:
         72:2d:ec:d0:b4:ae:47:58:c0:59:20:d1:2a:17:8e:b7:f5:bd:
         7a:4d:45:f3:c1:9e:56:ff:c9:e7:bc:8b:5d:70:6b:4d:a8:81:
         bb:76:b1:a9:06:79:1e:13:34:ec:19:72:a0:6a:47:04:85:41:
         3b:2e:d4:60:3e:09:ed:69:f3:67:cb:d4:4f:b5:4c:f9:2e:e5:
         2b:d2:f7:bc:93:06:0e:cb:bf:52:64:5d:de:93:97:28:c9:dd:
         b9:5e:90:d5:ef:9d:da:f4:56:d0:e4:0e:8b:25:03:b9:ec:a4:
         3a:b3:58:9d:8a:d6:8b:bf:56:eb:0e:25:70:33:d1:76:27:4c:
         e3:a0:ec:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:23:20 2025 by rpki-client