Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61e9eacc-9025-3743-b8da-aa105826534c.roa
File:                     61e9eacc-9025-3743-b8da-aa105826534c.roa (raw, json)
Hash identifier:          aJzbEYlORyo2pzUhFseKlQ4kB8hnI3sDAtmDPwMWyGk=
Subject key identifier:   54:5B:71:8E:BA:7D:4E:14:93:01:4F:AE:46:71:04:09:AF:16:65:76
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031B4EA1A7700DBE5B2D180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61e9eacc-9025-3743-b8da-aa105826534c.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        24.99.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:b4:ea:1a:77:00:db:e5:b2:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=0e523e5b-ff0b-4a29-8b81-f294e8a9ea34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:87:d8:d5:95:16:fe:4f:68:fb:37:c2:5a:bd:
                    a3:f5:0e:05:ba:55:43:d0:5b:2a:1f:39:fc:31:1d:
                    a0:a5:55:63:5e:51:8e:fa:9a:76:3f:0f:72:e0:89:
                    32:0a:ff:da:c1:10:4a:24:6c:99:77:0e:ba:2a:63:
                    68:1f:60:03:46:60:d1:ac:19:00:87:85:53:20:8a:
                    69:9a:75:4b:79:e5:f9:1c:00:dc:ba:f2:e5:9d:75:
                    7e:61:66:c7:7f:59:ab:5e:33:2a:ba:db:42:59:e7:
                    c0:bb:d2:98:71:f1:6c:e0:88:b6:0c:e7:f5:18:1a:
                    70:83:ad:3b:ef:4a:01:91:a6:4e:0f:75:68:9a:02:
                    57:17:49:ac:31:25:02:23:be:79:65:e9:18:6e:ee:
                    ee:d8:53:d9:a4:57:d0:b8:e6:c4:e5:60:7e:ca:c2:
                    56:a3:8f:ae:35:2e:ab:c3:7c:a5:08:e5:41:90:d0:
                    0c:49:0c:c6:f7:6f:86:8c:e4:5c:4d:6f:8c:69:6f:
                    29:8f:bb:b5:c3:87:aa:ef:53:f0:69:b4:e9:59:63:
                    cf:be:ae:74:9a:a4:a2:0b:ec:14:76:06:7d:9d:a9:
                    d6:42:ac:89:d4:81:11:0b:a7:ac:de:1a:d7:36:fb:
                    af:8e:38:04:e5:af:e5:97:b1:cf:21:66:1b:f4:a5:
                    40:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5B:71:8E:BA:7D:4E:14:93:01:4F:AE:46:71:04:09:AF:16:65:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/61e9eacc-9025-3743-b8da-aa105826534c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.99.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:4b:13:ad:8a:c5:1c:da:d0:95:ea:2f:3a:5c:b9:cb:e0:9a:
         28:37:97:50:e8:f0:92:90:61:e5:3e:9f:74:66:e0:39:b8:b4:
         eb:b5:46:32:1b:e2:7b:61:a2:c1:80:ad:24:98:6b:68:83:fe:
         d1:c8:89:b3:0f:17:44:7f:a6:3b:10:89:d2:9c:e4:cd:e4:7d:
         8c:15:cf:cf:91:2d:c8:81:fd:c0:a8:9a:d2:e6:1b:d6:f3:f4:
         64:0f:81:b1:e2:a4:0f:0e:b7:f7:24:cb:d5:7e:52:82:e2:7d:
         fe:8b:8f:cb:35:24:ef:04:2c:74:eb:8e:68:02:4d:04:50:0e:
         a9:bc:55:35:36:41:3f:1b:53:db:9a:e7:d5:c8:05:b6:d3:5a:
         40:5b:0f:e4:c3:50:96:43:fd:cb:92:f7:74:dc:44:c2:67:40:
         42:06:e2:95:c3:25:c5:71:c3:f8:0a:ba:7d:9a:f6:92:c8:19:
         60:b1:0b:72:30:3e:ad:76:78:4b:90:5a:72:3b:6b:71:01:38:
         c3:b8:b6:64:15:24:3a:6f:a3:a9:c1:2c:a5:0f:39:b7:7c:5c:
         33:7a:55:e4:26:05:fa:e1:75:59:35:c2:8f:86:c7:dc:45:f0:
         7b:a5:35:ee:bb:f9:0a:68:dc:db:b4:36:ab:71:be:dc:1d:f1:
         fe:0d:20:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:35:13 2025 by rpki-client