Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5250e5ff-65ff-3e5b-9dd4-d735e93442cc.roa
File:                     5250e5ff-65ff-3e5b-9dd4-d735e93442cc.roa (raw, json)
Hash identifier:          qUBWBBXCi7oTfXr6q4GfxSaeED0uE8NHYB8V1+VEmms=
Subject key identifier:   31:2C:DA:A0:94:3D:C9:49:18:F4:1F:2A:4C:52:BF:C3:FA:56:C6:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC20B6DE10649168E847300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5250e5ff-65ff-3e5b-9dd4-d735e93442cc.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        24.1.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:0b:6d:e1:06:49:16:8e:84:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=5f87364b-63e0-4a10-b537-48a413dc9a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7c:3b:df:a9:f2:ec:83:1e:9a:14:b3:18:9e:
                    1c:cd:4a:26:bc:41:5a:be:c3:a3:53:dc:31:25:64:
                    6f:fd:ce:fe:76:b5:2c:5f:83:58:4d:0d:ef:29:e6:
                    c8:67:cd:f8:34:8e:0f:0b:4f:33:e4:9c:41:de:eb:
                    14:92:58:26:03:5b:90:73:aa:41:f3:c2:1c:bf:89:
                    7b:ed:08:5d:92:14:28:9f:c0:83:c0:d6:07:74:ec:
                    25:15:8a:1d:26:8a:f3:85:f4:45:8a:ca:93:4c:e5:
                    dd:85:8b:40:60:7f:d8:1b:11:be:f3:fc:3a:a4:dc:
                    01:6a:f8:6d:db:d9:4e:e1:48:77:9a:cd:e4:a8:59:
                    11:34:47:cd:47:34:62:9d:0b:dc:61:29:e1:50:77:
                    91:36:30:28:82:be:f4:0b:e3:65:95:05:4a:9f:60:
                    0d:7d:57:b4:3a:dc:4f:bb:09:13:ef:7a:02:ce:cb:
                    33:6d:01:c9:d8:9d:52:26:53:69:64:ed:35:db:2d:
                    41:f0:43:b0:4f:7b:56:e0:89:74:f4:9f:f1:4d:ba:
                    92:7c:09:33:8f:df:26:d8:51:64:32:bd:eb:49:9e:
                    67:f8:ad:2e:e5:50:d4:d4:67:e4:65:d5:73:23:0e:
                    1b:75:61:4f:ca:8f:34:50:32:e5:c4:3c:71:3d:8f:
                    8a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2C:DA:A0:94:3D:C9:49:18:F4:1F:2A:4C:52:BF:C3:FA:56:C6:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5250e5ff-65ff-3e5b-9dd4-d735e93442cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.1.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:bc:91:76:ec:b8:eb:4d:77:f5:31:e8:cf:44:aa:2d:eb:bd:
         4c:a6:13:a6:91:40:d2:5d:a8:e0:80:fc:a1:2e:48:20:f5:4b:
         ea:0f:85:7c:45:96:87:b9:4d:a7:ee:24:ed:b1:f3:32:d8:d8:
         cc:12:f3:1d:b1:74:41:d7:84:c3:de:c1:77:65:40:9b:31:0b:
         d7:5e:b5:68:27:e7:45:45:90:16:42:af:3a:da:17:05:4e:5f:
         83:ec:e2:36:10:2e:1d:ec:42:97:71:6c:db:3b:4a:eb:3b:c1:
         64:2f:6d:1e:ae:07:03:a7:fc:35:52:3f:00:45:3a:d7:dd:ad:
         bb:d1:bd:c2:0a:37:33:5f:70:59:70:e2:87:96:0f:d1:a0:7f:
         c2:8d:f0:c0:3f:16:88:df:c6:f1:29:09:04:4b:b2:1f:30:72:
         76:93:cc:0a:07:30:11:93:ab:21:3e:ba:6c:73:61:4b:10:18:
         27:45:6d:d3:96:6f:bd:41:ab:bd:c1:9b:bf:5c:0a:88:11:35:
         ae:30:c1:df:c6:73:a9:fa:56:2d:1a:67:f7:0e:b1:ff:31:5f:
         cd:29:84:90:cf:57:98:27:b1:20:f3:1e:8f:ad:63:95:9f:ae:
         3d:d6:e9:72:37:d8:51:fb:ca:a9:0a:34:04:1b:4c:6a:cc:fe:
         69:16:10:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:13:42 2025 by rpki-client