Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97fb43b8-ac78-39f2-a941-98bff39ed926.roa
File:                     97fb43b8-ac78-39f2-a941-98bff39ed926.roa (raw, json)
Hash identifier:          iT+HnNR32eKWfKaGRkJGlwCgOqt4oS3jdXrsGDpbIwg=
Subject key identifier:   70:51:88:90:5E:30:49:82:FF:1C:1B:28:BD:DD:13:6F:FD:F6:3B:C7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB71E867270DFBC378C3480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97fb43b8-ac78-39f2-a941-98bff39ed926.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        69.245.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:1e:86:72:70:df:bc:37:8c:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=9f19f1a3-785b-4a6c-b134-5b187c582201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cd:ff:17:2e:eb:a8:9c:21:c2:de:d0:7a:5f:
                    a1:fa:5d:0d:58:48:35:ab:f0:c4:89:af:e7:2d:eb:
                    ec:db:e7:39:df:24:e1:d3:07:81:0f:90:0a:40:67:
                    e6:5e:1d:c9:0c:6a:7a:b7:a7:48:9e:70:ed:f3:88:
                    1f:63:ef:79:fd:7a:77:6a:3f:ec:1e:1b:ec:52:e9:
                    3b:cd:fb:1e:95:b0:8b:79:8a:27:18:dd:9a:99:ea:
                    94:d4:bd:45:25:0e:9d:3d:e4:27:55:3f:40:50:15:
                    22:95:f2:9a:b1:c4:58:cb:16:ad:66:0e:4d:85:cc:
                    1a:4e:75:7c:ce:5a:a0:97:1e:2f:55:5f:e0:67:da:
                    76:8f:88:17:5f:3d:64:63:a7:c5:16:56:ec:0a:29:
                    1e:fb:50:a5:1f:2d:5a:bd:80:30:10:02:83:8a:b9:
                    cd:92:e5:f6:dd:28:51:5f:9e:95:59:43:70:01:06:
                    ec:7c:e3:81:6c:ad:e1:47:54:89:ed:5b:a2:4b:0d:
                    c8:9a:54:4a:a1:40:04:55:66:3d:11:49:fb:a8:df:
                    79:7a:78:8d:bb:87:ff:b6:25:60:96:3d:43:2b:3a:
                    89:41:14:e4:63:5d:3f:5e:09:6c:28:5c:a2:11:31:
                    c9:eb:6f:0c:0f:58:15:91:8a:7d:7d:3d:cf:0b:fe:
                    f1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:51:88:90:5E:30:49:82:FF:1C:1B:28:BD:DD:13:6F:FD:F6:3B:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97fb43b8-ac78-39f2-a941-98bff39ed926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.245.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:cf:ec:35:5a:55:3b:57:73:0a:7b:b6:79:c3:67:fb:55:eb:
         8b:68:f2:ab:f0:90:42:df:36:17:b6:6d:e2:58:f1:28:c7:5a:
         45:94:e0:77:e4:8c:8b:16:df:d8:07:8e:aa:c2:98:33:99:7e:
         73:50:26:83:da:e2:98:80:43:5e:4b:81:37:65:58:28:52:4a:
         61:8f:85:07:de:68:2c:02:18:94:16:eb:d1:14:51:6b:40:00:
         c6:1e:a2:4f:06:9b:f2:57:88:c2:ec:27:d6:8b:7a:a0:c5:23:
         5b:39:21:56:06:e3:e9:34:cd:0e:94:7d:19:a2:f6:61:df:3e:
         a0:16:9a:40:6f:93:83:45:54:39:94:ca:b6:29:d5:b4:26:e5:
         29:28:1d:95:61:9e:33:be:95:bc:6e:73:e2:66:6a:1d:80:95:
         84:46:41:11:bf:79:1f:88:29:00:9e:43:4c:96:69:63:2c:94:
         ac:78:c1:4f:87:ca:64:8b:a8:70:c0:f0:78:0a:5a:31:8f:83:
         61:6e:95:1e:2a:e4:02:e5:61:01:91:57:47:79:d5:6c:7b:c6:
         22:c7:97:b7:b0:f6:0a:93:f2:21:c5:8d:83:eb:dd:26:f8:e4:
         ef:0a:5e:1a:1a:b0:dd:d1:28:1d:cc:3b:b3:a0:a6:c0:40:0f:
         95:2f:39:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:04:22 2025 by rpki-client