Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6523377-bb05-3544-abbd-c9026f475264.roa
File:                     a6523377-bb05-3544-abbd-c9026f475264.roa (raw, json)
Hash identifier:          Ap0YLIUdB9a42CzEZkg+zCbJ/yXGr3XRbJWqR6al2qE=
Subject key identifier:   7C:B6:0A:D6:C9:07:AB:BF:A6:55:3D:9F:A7:5F:21:BC:05:C6:C3:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC213CCC6C3012A6048EEA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6523377-bb05-3544-abbd-c9026f475264.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33491
IP address blocks:        24.15.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:13:cc:c6:c3:01:2a:60:48:ee:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=62a37a92-ab3d-47b6-a3d7-3a778c1f5912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:08:da:8e:64:90:08:52:33:b0:21:57:78:
                    30:6d:1f:56:66:d4:77:d0:bf:12:3f:6e:fa:15:c3:
                    86:3c:5e:7e:a6:3f:ad:b5:0f:50:f8:c1:ab:fe:ec:
                    b6:b0:d9:88:a9:e9:5e:e1:30:5c:c9:7f:87:5a:43:
                    0c:88:98:5c:6c:2b:54:9d:ca:e8:5c:49:8e:28:b5:
                    79:ba:f7:d2:d7:36:b0:c2:45:99:80:08:27:6d:03:
                    11:e1:b5:e3:ca:3d:78:b7:50:6f:7f:ce:c1:1e:22:
                    05:0f:90:42:d6:17:c5:89:68:1f:3f:40:df:8e:01:
                    22:9d:80:66:f6:9b:1b:79:df:c4:22:5e:dd:bb:96:
                    3e:bd:c8:56:f3:cc:b1:7b:19:06:6d:b7:7b:32:9c:
                    9a:c4:1f:17:a6:04:cc:af:52:31:14:fc:bc:ca:f2:
                    96:2f:95:7a:85:83:02:85:84:97:3c:6e:ae:16:53:
                    57:83:4b:0e:b2:9f:76:58:12:ea:7d:ed:ca:26:ec:
                    18:7e:94:ab:04:c3:1e:28:4e:a4:25:06:95:4d:7a:
                    b9:ab:d1:1e:cc:ff:79:fe:c1:9a:c7:64:c0:dc:fa:
                    2e:3c:c3:6f:f8:c4:4c:01:5e:cd:14:6a:45:b5:38:
                    18:1a:24:65:ef:23:0e:f3:03:4a:08:9b:f1:a2:75:
                    01:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B6:0A:D6:C9:07:AB:BF:A6:55:3D:9F:A7:5F:21:BC:05:C6:C3:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6523377-bb05-3544-abbd-c9026f475264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.15.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:15:ea:cc:7a:11:9f:92:db:46:bd:50:14:51:2a:0c:25:e7:
         19:e0:23:50:47:6a:c7:24:11:2a:c3:53:e5:e1:97:36:9e:d8:
         b7:2f:9a:cf:13:bb:eb:83:4d:94:d5:18:c2:b2:c2:a2:f8:9e:
         ea:1b:42:76:84:70:66:6b:2e:93:9b:2f:2d:56:e4:a1:cc:9c:
         94:a1:55:0f:38:08:04:47:1f:b6:67:8a:31:fc:13:0e:54:fd:
         36:b7:ee:61:81:e2:d1:21:21:46:1b:67:0e:b2:66:4a:f5:b6:
         2a:ed:97:d0:8b:e1:aa:2d:1f:99:69:4e:54:e5:4c:5e:e3:5c:
         69:bd:47:3f:a9:83:91:35:56:d7:d5:b3:72:a2:c5:f3:70:18:
         76:5a:7f:8b:07:a0:36:96:84:6c:b9:23:3b:48:af:75:10:f5:
         db:07:c7:ec:0b:28:2a:2d:0d:42:51:42:a9:e0:3a:8a:26:bb:
         24:52:c5:c7:f9:ee:62:54:6f:bf:7c:8a:e3:b4:de:82:5e:61:
         ec:50:62:aa:2f:97:84:ea:70:9a:7c:4a:23:1e:11:b5:de:07:
         d2:82:1e:36:9d:4e:07:29:38:d2:1b:22:60:39:8b:97:0e:94:
         60:e7:85:00:9b:10:be:88:09:06:b9:3a:a8:d2:86:8f:d6:4b:
         6b:ca:8a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:34:12 2025 by rpki-client