Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ade03d51-86f8-382e-be37-e30d20f6ac38.roa
File:                     ade03d51-86f8-382e-be37-e30d20f6ac38.roa (raw, json)
Hash identifier:          3ab+5hI4Eg8nDksJNUVpyJ4ddS0eGArE647dIgqwaq0=
Subject key identifier:   C3:6E:1F:70:2C:C9:CA:53:8B:77:85:C0:5A:A7:62:E0:24:29:69:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC379E5DE200D6BA8B5A820
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ade03d51-86f8-382e-be37-e30d20f6ac38.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        24.0.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c3:79:e5:de:20:0d:6b:a8:b5:a8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=66408f5f-bc12-42b8-88e1-deb90cbdd0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:cd:0f:a7:09:27:8a:cb:48:f4:9a:43:d3:
                    71:67:ea:c1:33:ab:19:2d:04:3d:73:1a:ab:4b:17:
                    59:25:09:bd:fe:23:4d:b9:e5:78:26:0b:c1:9c:b9:
                    37:29:f0:61:a7:f2:6d:e5:1c:85:8c:93:84:af:8d:
                    2b:a9:5b:85:ba:aa:4e:27:6c:ce:8e:6d:81:83:b2:
                    33:d4:d1:56:54:a9:34:e1:aa:5e:b8:11:8e:7f:c5:
                    63:8b:56:ae:be:b2:9b:64:5f:7c:82:2e:dd:83:a1:
                    53:c7:47:c0:26:6b:7a:10:fc:42:36:f9:d7:b6:10:
                    bb:6a:db:a5:08:ea:c8:0e:d1:c7:8f:f1:0b:d2:b0:
                    04:3b:56:77:7d:a8:91:11:b9:34:a4:17:87:7f:78:
                    e6:ec:d1:51:8c:d3:13:55:76:66:e8:2c:23:0d:75:
                    12:ce:68:bc:83:b4:e9:6c:80:a2:35:05:e7:f4:4f:
                    49:a9:84:25:36:39:3e:2b:13:45:7d:de:7e:27:77:
                    01:c9:d0:90:e5:4f:ee:fa:02:22:16:98:f6:10:0e:
                    87:74:24:d6:98:0b:6a:04:74:af:d5:4b:b9:27:a9:
                    91:ce:ba:9c:78:23:78:85:47:cd:99:28:40:e2:7f:
                    75:ac:0c:aa:3e:9e:d1:cf:dc:3f:62:0c:ff:d7:bf:
                    32:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6E:1F:70:2C:C9:CA:53:8B:77:85:C0:5A:A7:62:E0:24:29:69:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ade03d51-86f8-382e-be37-e30d20f6ac38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.0.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:77:75:c0:a5:ae:ed:ca:5e:b0:f3:4d:d5:4c:f8:b6:82:37:
         76:bf:46:1d:40:7d:56:e2:6b:f3:e7:d4:57:26:70:fa:65:6b:
         82:ca:b4:90:1a:b2:81:5d:2a:29:fa:a6:e9:f9:77:32:b6:be:
         ed:31:96:8b:06:b6:7e:ad:7c:08:fa:5b:71:95:91:2a:91:76:
         bb:a6:e5:ea:67:b0:e9:a4:02:57:4c:01:c6:50:1c:87:9c:0b:
         dc:2e:86:41:43:67:61:09:a3:64:88:a3:60:8c:79:a5:69:c6:
         58:43:4d:7a:1d:60:81:32:c4:81:c5:a6:48:5c:df:d1:d9:4a:
         ac:86:47:08:9b:47:94:8e:c3:39:ac:11:5d:b6:1d:1f:22:42:
         5d:48:6c:f2:14:c2:21:8e:96:74:11:55:57:e3:9f:73:a5:f0:
         88:0a:40:2f:3e:ed:0e:fc:18:4c:00:5a:61:9e:68:18:53:70:
         c2:23:06:5d:9a:4c:04:e0:81:fd:0f:c4:cc:78:da:d2:3b:e1:
         8d:3f:e9:5b:10:07:57:de:62:26:64:35:fc:0d:24:c9:8d:61:
         98:32:90:80:2f:6a:62:b1:ce:68:d8:ca:42:c2:09:ea:02:f5:
         4b:a9:cf:b2:04:bf:20:a4:f0:56:02:c8:c5:6c:63:b9:38:17:
         fc:4d:54:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:09:56 2025 by rpki-client