Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75051d42-7e38-3080-8d12-32a93c910753.roa
File:                     75051d42-7e38-3080-8d12-32a93c910753.roa (raw, json)
Hash identifier:          HRXIK89GviP3pp1ozX1mvzU/aEjFM86QmsTUMKF/9y4=
Subject key identifier:   22:92:D5:94:D4:12:99:54:11:67:14:1C:FB:8D:91:36:C5:E2:35:39
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC20EB9668A1C90BA6FD280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75051d42-7e38-3080-8d12-32a93c910753.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        24.1.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:0e:b9:66:8a:1c:90:ba:6f:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=62da763e-cbde-4018-a7a3-ec2cff46d7fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:59:9a:c0:37:d2:d8:db:d0:bb:2a:bb:78:
                    37:1f:5f:42:aa:f9:46:58:e8:8c:96:51:09:a3:fb:
                    cf:75:0c:15:14:79:2b:ac:44:0e:1e:f9:d8:9f:a1:
                    35:0e:f3:87:dc:70:68:15:76:f2:89:63:64:9b:98:
                    74:a1:24:2b:28:f9:50:15:a0:a1:a8:b2:24:2e:18:
                    c4:f2:55:d4:1f:a8:2c:ed:1d:63:6c:09:9f:10:f6:
                    e6:f0:8f:b1:b3:c2:c6:5d:4a:fc:0f:7d:fa:f3:4b:
                    5b:7b:4f:08:95:8e:bd:7f:1f:f0:89:aa:3c:03:db:
                    c3:7c:64:f4:db:8b:5f:ab:e9:e3:fc:06:7a:4b:4d:
                    3c:24:1e:74:33:40:c7:e0:1e:01:bb:52:63:0f:29:
                    5c:4a:3f:8d:f1:af:01:82:f8:23:0e:ce:71:dc:a3:
                    66:ba:02:a2:9a:94:f3:fc:a9:b7:50:76:86:91:92:
                    e9:65:3e:4e:9a:2b:3d:f8:46:ef:d6:12:df:bc:e2:
                    6c:ca:73:25:66:c2:fe:37:49:92:93:29:ed:76:53:
                    f6:a7:fb:3f:e3:a2:dd:ac:d2:90:61:8f:91:74:10:
                    6d:36:0a:02:a7:c0:a6:2a:96:a3:fe:35:b2:f3:8a:
                    c2:62:67:1f:6c:a0:e7:62:d3:5e:d1:e2:1d:d7:62:
                    92:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:92:D5:94:D4:12:99:54:11:67:14:1C:FB:8D:91:36:C5:E2:35:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75051d42-7e38-3080-8d12-32a93c910753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.1.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:2f:93:2c:c0:c6:90:74:00:fa:53:bb:90:1c:ea:4f:c6:37:
         fb:65:13:19:b0:f0:d0:ad:ac:0a:81:f2:b8:f7:6b:42:5c:41:
         a9:16:6c:ec:3a:88:73:8c:dc:08:14:3e:68:76:7d:e8:73:4f:
         24:30:04:95:e5:ae:18:e4:c5:a1:e8:94:6a:9b:e1:3d:08:fe:
         61:31:9a:c8:b7:95:08:cf:2c:29:2c:e1:0c:ab:06:b0:a3:7f:
         e3:ee:71:7f:dd:45:7e:ab:ae:1c:3b:4e:b1:cb:92:8a:e9:cd:
         10:e0:b0:ee:fa:e7:26:07:14:80:07:a4:01:90:2c:ab:67:5a:
         ee:27:92:e8:12:de:ed:b8:c3:24:ba:93:45:15:a1:c2:c1:d0:
         01:fe:ab:94:22:b1:06:64:09:aa:a7:c7:d9:4d:5b:fe:2d:29:
         58:53:5d:85:2c:4b:08:97:f0:19:4c:dc:73:f1:bd:93:02:57:
         1d:3f:5d:e4:d7:3c:db:c9:bd:0c:8d:9c:3d:a3:a6:04:3a:ff:
         20:f5:15:01:d2:62:22:36:06:9c:4f:a3:fe:b8:4c:68:4e:b8:
         6b:38:46:cd:0e:1d:b6:96:99:61:0c:09:af:c7:5f:72:30:02:
         4f:b0:8c:fe:55:90:7a:77:68:2b:f1:38:6d:1d:f6:df:fb:ca:
         1b:25:d4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:39:57 2025 by rpki-client