Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43ca66a-a36b-341e-bc5d-391204812929.roa
File:                     f43ca66a-a36b-341e-bc5d-391204812929.roa (raw, json)
Hash identifier:          Kwi4akBYfAhtm1G6sLtODVpUzLY4VpvLgL+kz/xQIhE=
Subject key identifier:   7E:3E:13:CC:2F:7C:F4:D4:46:6D:E9:28:95:B8:1C:6C:68:54:D1:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7EF7084EDE3459821DD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43ca66a-a36b-341e-bc5d-391204812929.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     13367
IP address blocks:        24.7.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:ef:70:84:ed:e3:45:98:21:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=723c30c6-d310-4c99-ab05-eb6be24880b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:fd:53:75:c9:d5:a9:b6:c5:38:a5:7a:2a:
                    0b:14:e3:02:aa:91:20:92:e6:ae:4b:96:0b:53:2f:
                    2c:bb:ec:a7:04:17:0a:46:4b:76:24:45:07:0f:08:
                    81:3d:54:9e:6d:de:2b:b5:06:97:11:4b:ed:ec:ce:
                    66:63:5a:9e:ae:aa:85:b9:77:8e:c2:f7:14:64:bf:
                    ff:6f:13:e1:29:e7:ad:75:ef:7b:1b:d9:9a:78:c7:
                    e5:cf:d7:9a:bf:e9:4b:c8:34:f0:3f:fa:41:00:7a:
                    a4:c3:74:a1:4c:cd:b3:01:0c:1f:5b:ac:ab:b3:bd:
                    44:48:e2:d2:69:88:ff:6c:ca:f9:84:33:1b:ca:8c:
                    36:a2:07:f8:48:9d:8b:fe:cd:4e:44:0d:02:bf:65:
                    32:b8:5c:2f:23:4a:7c:35:0d:55:5a:b6:4a:4b:63:
                    5b:8d:d2:5f:92:c2:71:ab:be:84:46:82:33:ee:58:
                    9d:d9:a2:d7:07:ab:6b:5f:f5:dc:06:15:58:99:4f:
                    a2:76:a3:d7:9c:e6:68:6d:7f:52:e1:1d:76:1e:67:
                    60:f0:de:40:d3:36:bc:a5:28:34:0b:13:5f:58:e2:
                    54:14:18:69:71:90:33:59:f0:b0:64:a5:40:e1:b5:
                    99:06:47:ec:78:48:b6:a2:3e:1e:3f:08:cb:0b:ce:
                    f5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3E:13:CC:2F:7C:F4:D4:46:6D:E9:28:95:B8:1C:6C:68:54:D1:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f43ca66a-a36b-341e-bc5d-391204812929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.7.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e7:dd:55:cb:8b:ba:f4:27:4a:18:2c:0d:5f:e8:92:0b:6c:
         42:5a:68:94:25:33:c3:0e:59:df:b9:d1:ce:07:b5:2c:95:39:
         d9:9f:d5:be:e6:f0:65:08:1d:eb:66:c8:1b:54:86:61:1a:00:
         eb:67:07:1f:f9:f4:3d:83:8a:fb:83:50:a0:52:ce:29:fd:7c:
         c8:56:ba:d2:0a:2c:98:aa:4a:f9:32:b7:b3:b2:cd:88:4a:df:
         d6:64:28:fd:af:1a:49:18:e4:a2:53:7d:32:89:ac:d0:7a:24:
         84:01:08:a5:a1:40:89:b7:ea:15:44:ee:41:48:7f:46:bb:85:
         16:e0:61:7e:69:87:cb:e8:4f:55:11:b8:bd:9b:e9:40:c4:bf:
         57:10:74:ac:83:55:5f:b5:38:c8:27:3b:ab:60:d2:7a:52:ac:
         e5:d9:0a:ca:47:26:a0:25:26:aa:1e:fc:dc:fa:5a:95:a6:f3:
         9d:0b:77:74:d7:ac:20:10:7e:07:40:1d:b8:26:ed:9e:1f:3a:
         42:a8:60:49:c6:98:ee:d8:01:70:42:22:bd:90:96:9f:ce:79:
         01:c1:51:34:d2:60:87:9e:35:44:86:86:e7:1d:aa:33:83:d2:
         e2:97:84:33:3d:87:84:51:8a:97:c2:77:49:99:36:bb:0f:e2:
         fd:2f:7a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:26:37 2025 by rpki-client