Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1608eb8-b477-30e2-99de-c21f234eae73.roa
File:                     d1608eb8-b477-30e2-99de-c21f234eae73.roa (raw, json)
Hash identifier:          vUK8kLw9o54xi5xdWNdGnHBiciOPBEVosQJzVagv2lA=
Subject key identifier:   43:F8:9D:D0:BD:52:20:1B:57:31:F0:19:E3:31:A3:95:3A:4D:57:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB706568D42AC21380BAC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1608eb8-b477-30e2-99de-c21f234eae73.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     22909
IP address blocks:        24.11.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:06:56:8d:42:ac:21:38:0b:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=25097800-b9ab-4c54-b907-0c769e91f374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:da:49:db:92:56:a1:45:19:fa:2a:24:cc:4d:
                    f2:f4:ca:71:e1:11:97:15:c5:4c:ee:4b:5d:0d:b7:
                    ad:43:08:ad:a8:70:b4:b8:6e:44:bf:d4:f7:c2:6e:
                    54:b4:cb:d9:b9:9c:36:22:3e:68:50:00:8d:42:8b:
                    db:09:39:38:60:5d:6f:81:20:f8:cb:25:6d:00:c5:
                    ce:e1:f8:43:79:b1:0f:f5:0e:32:f5:d3:04:17:47:
                    bf:2e:73:90:2a:69:06:cc:00:9a:52:1f:60:21:47:
                    e8:17:ff:27:66:d7:e5:bf:cf:4e:5c:5d:d7:89:99:
                    3d:f3:13:10:85:a6:bb:f5:cd:38:e6:a4:a3:9b:9d:
                    84:59:cc:7a:c8:80:7d:09:bf:aa:d7:30:da:6e:f9:
                    e3:0e:47:d2:91:82:72:b6:b5:51:59:5e:26:24:e0:
                    50:d9:92:30:a5:b9:3c:c5:07:ce:01:ae:c6:29:4f:
                    5e:84:78:91:7d:74:b8:32:4a:33:e8:29:3a:1b:fc:
                    f6:b1:b1:ec:5e:00:5f:2e:6f:a0:65:58:47:15:48:
                    c1:c2:0a:ae:64:1e:3f:59:6a:e9:6c:14:3a:4f:bd:
                    fc:12:c5:2f:42:ad:7e:6e:49:ac:87:96:b5:60:f2:
                    6d:0d:5b:b4:06:1a:d1:b8:f2:4b:42:b0:ae:0e:56:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F8:9D:D0:BD:52:20:1B:57:31:F0:19:E3:31:A3:95:3A:4D:57:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1608eb8-b477-30e2-99de-c21f234eae73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.11.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:f7:2e:80:67:d2:33:cf:83:8a:0f:8a:8a:84:54:db:b4:a2:
         54:8a:84:5a:c0:41:a9:03:2e:27:39:ec:53:1f:20:af:b0:77:
         da:94:6c:13:f9:bf:c6:57:ce:b9:17:17:5d:75:df:58:76:ff:
         3f:96:7d:35:57:2a:37:09:d6:64:25:c9:67:fe:84:56:d4:bd:
         a3:8a:bb:33:f2:b8:a3:42:38:5b:b0:d0:eb:d3:d8:a6:36:55:
         ae:8d:36:f1:60:0b:90:ca:79:f0:84:78:85:7b:b7:87:72:9a:
         38:27:36:80:dd:42:6b:e9:c2:6f:34:c8:0e:0a:1f:9e:13:81:
         f0:de:db:41:b2:43:e6:b9:12:3c:01:06:bb:8e:49:04:ef:3c:
         95:8e:89:cd:87:d6:87:f2:f2:b4:bf:f3:7a:c8:54:54:2a:ee:
         03:13:35:e0:be:ba:d4:98:bf:3d:d4:1b:49:3a:5d:d7:c5:cb:
         b8:85:bd:96:c9:3a:0a:73:74:eb:66:41:03:46:52:e3:28:4e:
         e2:07:80:3f:4e:af:85:6b:28:f3:e6:0b:51:c4:d4:40:2d:65:
         4a:fd:7d:f5:02:6c:f7:80:10:4e:24:75:03:c2:f9:0a:24:43:
         c1:b9:7a:ca:55:4b:42:52:81:fe:d9:ed:1a:00:50:4f:32:b1:
         0a:02:a5:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9twZWjUKsITgLrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
MjUwOTc4MDAtYjlhYi00YzU0LWI5MDctMGM3NjllOTFmMzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNpJ25JWoUUZ+iokzE3y9Mpx4RGXFcVM7ktd
DbetQwitqHC0uG5Ev9T3wm5UtMvZuZw2Ij5oUACNQovbCTk4YF1vgSD4yyVtAMXO
4fhDebEP9Q4y9dMEF0e/LnOQKmkGzACaUh9gIUfoF/8nZtflv89OXF3XiZk98xMQ
haa79c045qSjm52EWcx6yIB9Cb+q1zDabvnjDkfSkYJytrVRWV4mJOBQ2ZIwpbk8
xQfOAa7GKU9ehHiRfXS4Mkoz6Ck6G/z2sbHsXgBfLm+gZVhHFUjBwgquZB4/WWrp
bBQ6T738EsUvQq1+bkmsh5a1YPJtDVu0BhrRuPJLQrCuDlaZDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEP4ndC9UiAbVzHwGeMxo5U6TVcpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDE2MDhlYjgtYjQ3Ny0z
MGUyLTk5ZGUtYzIxZjIzNGVhZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAvgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMr3LoBn0jPPg4oPioqEVNu0olSKhFrAQakDLic57FMfIK+wd9qUbBP5
v8ZXzrkXF11131h2/z+WfTVXKjcJ1mQlyWf+hFbUvaOKuzPyuKNCOFuw0OvT2KY2
Va6NNvFgC5DKefCEeIV7t4dymjgnNoDdQmvpwm80yA4KH54TgfDe20GyQ+a5EjwB
BruOSQTvPJWOic2H1ofy8rS/83rIVFQq7gMTNeC+utSYvz3UG0k6XdfFy7iFvZbJ
OgpzdOtmQQNGUuMoTuIHgD9Or4VrKPPmC1HE1EAtZUr9ffUCbPeAEE4kdQPC+Qok
Q8G5espVS0JSgf7Z7RoAUE8ysQoCpYc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:54:07 2025 by rpki-client