Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa9864e9-0eca-3950-a811-29e079393105.roa
File:                     aa9864e9-0eca-3950-a811-29e079393105.roa (raw, json)
Hash identifier:          QQIY/YNha5N0kgcUH+yLajNq3omhX020kUi1MaqwUEU=
Subject key identifier:   6D:84:FB:AA:57:48:D3:95:74:39:D2:BD:93:38:8B:25:E3:0A:A8:6F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2E0E7A46C63B1458E8880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa9864e9-0eca-3950-a811-29e079393105.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        24.4.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:e0:e7:a4:6c:63:b1:45:8e:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=cc20e2e1-8b22-4121-bbe0-30a67259011a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:97:20:01:e0:15:65:4f:8a:13:f9:70:c1:a9:
                    11:54:90:3d:5e:63:90:1a:71:c9:2f:38:67:90:80:
                    fc:d6:1a:be:ab:30:c9:aa:70:47:48:ed:e9:b8:df:
                    6b:06:6d:9c:50:c4:76:2c:e1:59:75:2f:a6:db:cd:
                    36:9e:4e:ca:c9:e7:63:f4:d5:03:73:1e:3c:17:2f:
                    76:76:9e:18:26:be:66:7b:30:ef:af:1b:db:cf:58:
                    ea:55:a5:d8:15:0a:38:30:85:c4:eb:b0:e1:37:07:
                    33:66:33:c4:42:b4:3f:b0:a1:53:2a:17:f2:a1:88:
                    a4:49:e5:b2:89:42:40:47:2f:86:96:92:75:3b:a6:
                    cc:23:c5:cc:ad:01:3e:31:9d:57:20:4d:ee:ec:7a:
                    b1:09:ad:50:1b:c8:37:d5:d4:ad:41:a4:85:22:2b:
                    0a:2a:96:69:bb:f6:b7:3b:98:7b:65:cc:b9:f4:33:
                    07:b1:46:64:03:a8:3a:dd:13:5b:23:a2:ce:a7:75:
                    df:fd:e9:41:19:fa:11:69:ae:c2:ac:cb:e7:a1:70:
                    d9:f2:91:23:7d:da:3d:db:11:7f:c5:c3:17:b9:06:
                    fc:7c:ce:18:84:19:0f:4e:65:01:00:e7:8f:37:e3:
                    8d:91:c0:97:21:bf:d1:56:9c:99:d4:d8:fe:0d:db:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:84:FB:AA:57:48:D3:95:74:39:D2:BD:93:38:8B:25:E3:0A:A8:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa9864e9-0eca-3950-a811-29e079393105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.4.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c3:88:d3:09:26:a9:a4:ec:c0:3d:9f:bb:62:43:67:ff:19:
         ae:37:ee:82:05:40:a3:97:d5:bb:e0:4d:e5:09:47:a4:29:1c:
         34:c6:2a:62:86:ec:d1:5a:b0:ce:42:f3:07:c3:d2:13:4d:4b:
         f6:1a:54:21:af:aa:ed:93:60:14:be:75:2b:91:86:06:3a:d5:
         24:94:b4:0b:96:25:ab:ae:d7:f7:b4:4e:15:1f:7d:13:f9:94:
         e5:96:c0:6e:0d:93:92:d1:f3:0d:fc:18:3d:f3:91:5e:1b:27:
         4c:5b:4c:4e:e9:5a:01:5e:f2:d4:ee:9b:60:cc:86:4c:f9:2e:
         8c:cd:19:07:02:58:dd:65:bb:1f:ba:87:b7:d6:6b:b7:e8:99:
         b3:44:96:1d:49:04:a6:5a:95:8c:55:48:dc:ed:7f:fc:b3:0c:
         73:db:ec:40:36:14:03:b4:71:7d:18:3d:a0:a1:a7:3e:31:cb:
         e8:6f:3c:ae:ba:05:74:77:4e:a1:1d:ce:3d:61:41:4f:20:51:
         35:8a:53:69:70:cb:f4:5d:9b:de:bb:a0:84:f5:5a:61:4f:22:
         87:21:19:57:4a:5b:26:c4:0a:4e:ce:26:b0:d5:86:a0:8e:15:
         5c:e5:61:c8:7f:ca:a6:f0:5e:1a:31:2e:c7:04:3e:77:9f:19:
         89:69:11:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswuDnpGxjsUWOiIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
Y2MyMGUyZTEtOGIyMi00MTIxLWJiZTAtMzBhNjcyNTkwMTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpcgAeAVZU+KE/lwwakRVJA9XmOQGnHJLzhn
kID81hq+qzDJqnBHSO3puN9rBm2cUMR2LOFZdS+m2802nk7Kyedj9NUDcx48Fy92
dp4YJr5mezDvrxvbz1jqVaXYFQo4MIXE67DhNwczZjPEQrQ/sKFTKhfyoYikSeWy
iUJARy+GlpJ1O6bMI8XMrQE+MZ1XIE3u7HqxCa1QG8g31dStQaSFIisKKpZpu/a3
O5h7Zcy59DMHsUZkA6g63RNbI6LOp3Xf/elBGfoRaa7CrMvnoXDZ8pEjfdo92xF/
xcMXuQb8fM4YhBkPTmUBAOePN+ONkcCXIb/RVpyZ1Nj+DdtpCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG2E+6pXSNOVdDnSvZM4iyXjCqhvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE5ODY0ZTktMGVjYS0z
OTUwLWE4MTEtMjllMDc5MzkzMTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGARcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAETDiNMJJqmk7MA9n7tiQ2f/Ga437oIFQKOX1bvgTeUJR6QpHDTGKmKG
7NFasM5C8wfD0hNNS/YaVCGvqu2TYBS+dSuRhgY61SSUtAuWJauu1/e0ThUffRP5
lOWWwG4Nk5LR8w38GD3zkV4bJ0xbTE7pWgFe8tTum2DMhkz5LozNGQcCWN1lux+6
h7fWa7fombNElh1JBKZalYxVSNztf/yzDHPb7EA2FAO0cX0YPaChpz4xy+hvPK66
BXR3TqEdzj1hQU8gUTWKU2lwy/Rdm967oIT1WmFPIochGVdKWybECk7OJrDVhqCO
FVzlYch/yqbwXhoxLscEPnefGYlpEaw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:23:36 2025 by rpki-client