Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/896c1d6d-d667-30d0-b26b-07ee2bd54873.roa
File:                     896c1d6d-d667-30d0-b26b-07ee2bd54873.roa (raw, json)
Hash identifier:          JXcv08ymFDKawZEmsJwdfvdGDQT1AZwGPA6VQV9ppMw=
Subject key identifier:   10:7F:95:53:05:97:9C:8A:C4:44:2F:DD:F3:F3:E9:D5:9A:28:75:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE03141B4067C8A96E6E05380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/896c1d6d-d667-30d0-b26b-07ee2bd54873.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        67.191.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:41:b4:06:7c:8a:96:e6:e0:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=dcecb75e-c502-4cab-8729-d23f17a28c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:54:21:41:25:d7:95:d4:d3:8e:d7:be:eb:b3:
                    fd:37:6b:40:21:39:d0:f7:54:7c:07:4e:8f:9c:a4:
                    63:a3:01:79:f0:43:f1:db:1d:5b:63:b4:97:94:d0:
                    48:1f:a4:7d:1b:55:0e:5c:a3:55:e5:3f:62:b4:3c:
                    ab:1e:e5:32:f6:24:da:03:15:5e:ec:55:b1:60:68:
                    f4:ff:3d:08:1b:45:48:ec:94:50:f7:23:d1:cd:56:
                    96:9b:36:0f:5e:dc:ae:a8:84:bc:c0:97:b0:61:20:
                    2e:32:25:5a:7a:a8:e2:fb:6b:23:fc:70:70:02:ec:
                    04:51:f9:b6:bd:66:fc:e7:e3:a7:29:71:bc:54:18:
                    bd:10:da:b7:8e:68:3c:04:72:72:14:e8:fc:8d:c3:
                    25:e0:41:36:fa:2b:a8:ae:b9:ab:ed:43:7d:c8:65:
                    1a:f9:bb:27:59:0b:26:0c:94:a8:e6:a5:f9:7c:f0:
                    49:37:ed:4e:23:61:04:5e:dc:dc:70:0e:c6:d6:28:
                    88:5b:12:67:76:56:3b:8d:b6:05:63:94:93:48:14:
                    31:a2:6e:e2:77:99:13:34:21:af:a7:a6:bc:77:6a:
                    31:b5:af:7a:f5:e6:83:83:96:74:03:62:22:f9:8b:
                    6d:e7:f9:18:fb:52:f1:be:d5:97:52:cb:85:23:aa:
                    ac:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7F:95:53:05:97:9C:8A:C4:44:2F:DD:F3:F3:E9:D5:9A:28:75:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/896c1d6d-d667-30d0-b26b-07ee2bd54873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.191.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:4e:7f:e5:e5:07:cb:c7:a2:9b:2e:1c:11:59:18:83:59:61:
         3f:34:14:7e:8f:d4:2f:a6:b3:fe:c5:be:4e:34:7b:bc:ba:66:
         71:7f:ce:9e:b0:7a:11:2c:2d:1e:78:3e:fa:25:4a:c9:92:62:
         73:22:7c:3a:06:79:21:ba:86:a4:92:26:7a:b9:88:90:08:a9:
         21:18:94:84:75:16:16:2d:a7:0b:1f:71:c6:60:c4:80:c5:90:
         eb:59:53:ce:c5:ef:32:a7:22:3e:27:3a:84:50:24:7e:95:40:
         42:5b:d8:74:01:2a:48:cf:ba:72:ba:f3:ca:bf:55:6c:bc:f3:
         30:2c:24:74:e2:0a:12:7e:a1:17:fc:ba:d7:af:eb:57:66:1f:
         c9:95:40:ba:d4:c6:3d:70:bf:9f:f6:88:29:80:1e:5f:33:be:
         a0:aa:3c:8e:c9:2f:f1:f5:56:e7:f7:9e:14:86:02:ee:6c:99:
         e3:75:8a:4f:3d:b3:5c:1e:52:87:31:9b:3f:78:61:01:83:d9:
         15:29:54:58:c9:56:18:45:dc:ad:1a:e7:a6:66:a2:f8:aa:95:
         2a:ff:e8:dc:d4:ae:34:c2:72:46:16:0d:b8:63:9e:b9:d9:c1:
         ac:c9:97:95:5b:d8:d1:e0:7b:fa:34:4e:a6:ff:48:b2:cd:29:
         34:be:13:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:22:14 2025 by rpki-client