Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90d128af-0e53-3d5e-8fcc-c934eb2a2bd8.roa
File:                     90d128af-0e53-3d5e-8fcc-c934eb2a2bd8.roa (raw, json)
Hash identifier:          UX7HS7LGA6mtWMjAiz+5/CL74Lq/LdiaVF6FcIBUems=
Subject key identifier:   43:1E:40:1F:2F:49:EF:89:FD:75:08:ED:31:47:F5:85:6A:1C:4A:04
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2122A494BAFFB72943100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90d128af-0e53-3d5e-8fcc-c934eb2a2bd8.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        24.14.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:12:2a:49:4b:af:fb:72:94:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=bb7ad4f7-0945-4b22-9f98-ae1cefda61e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:42:af:8e:a8:da:02:56:a9:d4:ab:80:98:
                    c6:13:96:26:d8:5e:9c:07:3a:32:9d:d5:c5:0f:4f:
                    17:e4:e3:af:83:1b:2c:f7:27:24:08:47:62:b7:b8:
                    7b:f3:f7:14:85:64:7d:9e:ce:50:b9:95:3f:93:ff:
                    50:f3:2a:8a:2c:77:ac:7f:55:74:73:92:d1:68:9d:
                    33:6f:3d:5b:ee:d3:86:48:0b:49:5c:00:3d:58:64:
                    8b:55:f2:73:d9:7b:43:0d:20:77:80:1a:43:6d:20:
                    58:95:12:c7:15:c4:2d:c9:e6:b4:e9:b1:3a:e5:e5:
                    0b:1b:09:35:5f:0a:67:7b:ff:6c:9a:12:8f:70:6d:
                    dd:a0:3c:cd:22:81:06:ff:a2:84:27:f0:31:7e:0f:
                    f6:b6:b6:71:3b:63:fd:78:03:f2:d7:04:52:f9:2c:
                    3f:ba:3d:b6:6e:f4:9c:78:2b:88:ab:e7:51:fa:94:
                    0f:a8:33:05:63:45:38:6a:8b:df:53:d3:1e:b9:b7:
                    1c:71:5e:36:ad:7b:0c:25:1a:98:5c:9a:01:73:b6:
                    c7:b3:30:ac:dc:82:d7:2c:54:bb:3f:fc:d8:6e:ba:
                    f9:b9:86:0e:4f:82:ea:92:c1:39:60:d8:c0:c4:c5:
                    12:e3:16:ac:79:79:19:7e:44:fe:9d:d9:49:82:e9:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1E:40:1F:2F:49:EF:89:FD:75:08:ED:31:47:F5:85:6A:1C:4A:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90d128af-0e53-3d5e-8fcc-c934eb2a2bd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.14.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d4:8c:4d:b6:be:4c:7b:b4:a5:e1:71:74:b3:99:14:28:e6:
         aa:39:9b:c9:63:00:f7:f0:ad:da:80:fa:96:ce:f4:39:71:fe:
         e4:2d:67:c6:8b:92:a3:08:24:40:92:8a:49:ff:35:d4:09:20:
         bf:7b:35:58:67:a8:ae:90:39:c5:df:6f:14:95:5b:9a:4a:56:
         42:26:1f:ed:b8:79:13:30:6f:f8:21:ca:90:54:ca:44:0f:e7:
         d9:5c:13:6b:c1:75:8f:0b:7e:f0:4c:b3:37:4e:e5:cf:f3:2a:
         b3:fb:18:86:cc:76:b8:6c:57:38:e3:73:05:9e:2f:e5:6a:e7:
         9b:4f:f2:ea:a9:0e:9c:a7:33:73:b4:88:d2:1f:12:8f:aa:f7:
         03:8b:3d:41:44:62:6c:14:a3:1f:41:af:1d:83:21:66:ae:f4:
         87:97:76:b6:61:7b:3e:09:5f:52:e4:23:61:2b:22:8b:dc:43:
         43:34:ab:9e:38:42:7c:5e:b5:ea:fd:4e:ca:c9:44:e7:cc:24:
         bb:52:02:06:61:dc:7a:3c:8d:bb:66:01:e2:40:ff:0c:5b:4e:
         79:51:45:d5:74:fe:3a:2a:46:25:71:71:51:6d:1c:d1:e6:1e:
         2c:49:de:87:00:be:9c:d6:88:20:06:fb:88:e2:a3:4f:6b:5b:
         cb:c8:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:04:08 2025 by rpki-client