Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df44831d-4fd1-3499-b647-51fdfb5efbd2.roa
File:                     df44831d-4fd1-3499-b647-51fdfb5efbd2.roa (raw, json)
Hash identifier:          zwdfqGAvwolMIVQV8GlMXqcaIo0X4vJJrjZFpzhIIc4=
Subject key identifier:   E7:C8:56:73:85:B1:C5:22:E5:76:35:8A:63:CF:5B:49:07:BD:4E:A4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC2DD0ADA538D7836DB0580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df44831d-4fd1-3499-b647-51fdfb5efbd2.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33651
IP address blocks:        24.130.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:dd:0a:da:53:8d:78:36:db:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=a5afe848-da6a-4f73-bf3c-9e1b5f630a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:01:5d:55:41:0e:44:8d:96:ad:b0:91:0c:
                    da:87:e3:48:25:6e:cf:c3:96:71:db:ac:d3:4f:c4:
                    6b:51:15:fd:29:bd:71:41:d1:a1:6d:9e:c2:6d:45:
                    34:c8:26:72:94:fb:04:5f:0a:8d:06:d9:d7:87:26:
                    5e:ce:5c:c3:4a:3e:76:ad:04:ca:1c:89:cd:bd:e1:
                    15:e8:a2:e3:c1:da:be:25:cd:ce:c6:6d:57:87:1b:
                    e0:f5:b3:ef:47:0a:19:14:8b:fa:35:e8:69:0d:33:
                    12:3d:94:a9:27:97:e4:a3:9d:a8:73:9b:b9:dc:78:
                    a7:e9:69:90:be:9d:e4:31:f7:54:97:13:0b:c9:74:
                    19:69:6e:ec:80:bc:92:46:fc:e6:91:72:95:ba:38:
                    40:9e:4b:2d:ea:8f:eb:d0:1f:6e:5f:f8:90:13:6a:
                    c5:a4:0a:c8:6b:e8:e9:d7:58:f2:a9:9b:68:f0:31:
                    a2:b0:78:84:c3:5c:86:cc:02:54:c4:17:ad:96:37:
                    b0:46:77:4f:96:fd:ab:42:3c:2c:89:24:e9:81:d2:
                    1a:16:b3:ae:a6:04:a5:93:51:31:ae:cd:61:56:96:
                    6f:4e:a7:bd:2b:fd:c0:4d:a1:7b:9f:b9:74:a8:18:
                    f5:89:1f:33:c6:39:8b:c5:97:b7:19:d0:b6:27:c8:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C8:56:73:85:B1:C5:22:E5:76:35:8A:63:CF:5B:49:07:BD:4E:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df44831d-4fd1-3499-b647-51fdfb5efbd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.130.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:25:38:4a:6c:53:bb:3c:6b:6e:73:32:19:01:82:a0:40:2d:
         da:b6:e2:91:9c:e6:8f:7a:c0:6e:06:f7:ad:cd:68:de:0b:79:
         93:63:af:88:93:c6:80:ac:f6:ab:58:49:aa:91:8a:95:31:9e:
         f0:f2:fe:97:20:b0:2d:7e:7a:34:54:14:88:1a:13:91:a4:1a:
         fe:d5:25:ae:b8:fc:43:25:88:f0:f5:8e:0c:06:d4:bb:e1:c6:
         b4:b2:c1:6a:5a:31:48:e0:08:55:8f:4b:16:5c:a8:95:bb:0c:
         d6:1f:f3:ce:df:a8:93:7a:d9:57:74:b6:20:77:5a:99:4b:7b:
         79:46:ed:40:67:1a:25:1e:2e:39:ec:d8:f7:c4:60:7e:84:d6:
         f7:6f:0e:36:8d:7d:22:d0:aa:eb:a9:20:9b:0a:51:c2:41:ff:
         41:e9:ab:6b:35:44:e8:bc:00:a1:2f:4e:d8:70:88:ac:4a:80:
         c0:8b:1e:6d:4e:79:b9:50:27:73:bc:4b:46:a1:bb:4b:c5:5a:
         3a:96:cb:8c:61:39:bf:c1:71:d2:ed:20:28:6f:9f:52:16:d0:
         a9:07:7e:af:b5:a4:43:c2:bc:78:37:4d:e4:69:ab:74:cd:4d:
         ce:ee:0f:fb:04:eb:da:6e:19:8c:cc:20:24:4e:0c:ca:9b:7e:
         88:07:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:29:14 2025 by rpki-client