Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6637ee9-55ac-3b04-8954-ce5bcf9b1cc6.roa
File:                     d6637ee9-55ac-3b04-8954-ce5bcf9b1cc6.roa (raw, json)
Hash identifier:          1t+6sH5v4iNQOPhvtixN6fNrZyL+gBjKhtHKuYRNj2o=
Subject key identifier:   10:88:16:9A:71:22:6D:28:C0:F0:48:F1:D8:14:B3:98:65:90:02:86
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC501505FF2493A05856360
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6637ee9-55ac-3b04-8954-ce5bcf9b1cc6.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        24.6.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c5:01:50:5f:f2:49:3a:05:85:63:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=14dcfbac-4ee8-4f41-a6db-68a81743e4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:88:39:aa:e4:dd:58:63:7d:39:18:cb:e1:
                    b9:1a:63:af:f8:06:d2:d8:80:1f:37:97:e4:5c:8b:
                    d1:52:85:1c:66:0c:0e:20:91:f0:ad:6f:9f:c3:6e:
                    ab:2a:45:52:a9:67:b7:0d:76:a6:49:c3:f1:dc:36:
                    2b:3a:06:c3:42:41:39:ee:b3:06:10:b7:91:90:bd:
                    1d:d8:2f:7a:b0:0b:a5:4f:0b:6c:c6:06:ac:b3:f5:
                    08:95:fe:b1:6d:f6:99:a1:ea:00:a7:04:33:60:fb:
                    36:65:9f:97:6b:54:af:e0:09:dd:45:2d:e0:bf:0b:
                    29:cd:68:6f:e3:9b:0c:cc:d8:ea:98:b5:96:06:59:
                    56:57:cc:bc:01:8d:06:7a:75:69:93:85:1d:ce:98:
                    ce:20:85:39:ab:5d:56:5d:c0:92:98:dc:72:41:2b:
                    cc:48:49:92:7b:87:15:eb:df:c0:75:ff:84:3f:14:
                    d9:c2:ad:cc:7b:2d:27:a9:b3:f7:a0:6b:0d:62:44:
                    f3:1a:39:34:fd:6f:f8:db:98:20:1c:db:93:15:b9:
                    af:43:86:f0:9b:79:b7:e4:ab:cc:94:a4:a0:ef:0b:
                    ae:e2:04:da:51:94:69:31:ee:06:2f:53:7f:57:3d:
                    a8:af:4f:b6:ef:98:6e:6e:b7:55:fd:d6:c8:3f:83:
                    48:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:88:16:9A:71:22:6D:28:C0:F0:48:F1:D8:14:B3:98:65:90:02:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6637ee9-55ac-3b04-8954-ce5bcf9b1cc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.6.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:e3:6c:ff:6d:cc:08:70:d0:b1:96:02:0d:a7:2a:25:79:b4:
         ea:23:8c:d9:95:ed:a3:86:3c:6c:76:04:88:04:d9:cd:7f:d0:
         97:06:26:1a:70:f8:ea:4d:f2:65:90:15:97:eb:25:1a:c2:d5:
         aa:c7:e4:86:ea:b7:72:38:89:a8:41:c9:18:e8:bc:a3:48:c8:
         98:10:05:74:b0:b9:10:43:00:31:ef:8c:a7:c6:10:03:cf:d8:
         56:e9:f2:64:9d:67:85:c7:05:6e:3f:86:9b:d8:c6:cf:43:a4:
         97:ec:0c:6d:c3:a4:37:de:34:92:70:24:b9:60:8c:d3:c2:d8:
         5f:19:ec:8f:b7:e2:aa:dd:4a:df:ae:32:e2:cd:dd:5d:d4:ce:
         c3:58:2b:f7:ff:8b:11:99:34:08:c6:31:e9:3b:b7:86:d7:6e:
         5c:6b:fe:c3:28:59:fb:9e:6d:de:c5:fd:cd:ca:64:e2:4f:04:
         26:ea:f6:b0:5e:1a:0a:d1:5f:71:2c:2e:1d:6d:33:07:13:fb:
         22:79:71:a4:40:e1:02:5c:3f:6c:e3:c2:6a:4f:ef:07:c0:57:
         7b:51:6a:96:7b:fb:37:bc:e4:21:fd:f7:ee:cd:ab:e2:a5:ad:
         f0:e9:6c:45:18:eb:69:83:d7:c4:66:8f:55:8f:52:9f:fc:f6:
         af:7c:51:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:22:07 2025 by rpki-client