Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28a3ac68-27b4-3966-a7f7-2b0187049a5f.roa
File:                     28a3ac68-27b4-3966-a7f7-2b0187049a5f.roa (raw, json)
Hash identifier:          5S+8L4+8kyV+u1GI3QHKItCdqVSXpXcrKNGP4oN+r6I=
Subject key identifier:   96:19:C6:63:B5:32:FB:4E:5C:FA:36:77:02:E9:CC:95:D9:A6:65:DA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A71EB71EA7219CB39B83C9000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28a3ac68-27b4-3966-a7f7-2b0187049a5f.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     33651
IP address blocks:        24.6.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:71:ea:72:19:cb:39:b8:3c:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=7d18c51e-16a2-4ace-978e-2408a4d75095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:dc:b1:cf:d5:15:89:35:53:d6:0d:9d:8a:
                    e7:c2:46:d5:cd:ae:bc:91:04:ba:3f:4c:37:2a:1b:
                    a8:d9:39:fa:8c:1c:24:3b:33:5f:73:17:86:16:81:
                    bb:c2:e2:df:21:9c:80:40:1c:39:a3:68:a3:a9:59:
                    5c:22:51:f9:4e:dc:a5:ae:6b:2f:d4:8f:b7:e6:c0:
                    68:43:50:ab:8a:23:b8:4b:0d:5d:ea:fe:81:bb:d5:
                    7d:95:1c:eb:d3:a8:7a:43:e5:1f:8c:e7:78:18:5e:
                    e0:b2:05:ae:4e:92:80:e3:11:30:5f:2e:75:d6:9c:
                    37:a6:82:b3:4f:59:ac:ad:1f:a6:a3:26:50:ec:be:
                    bb:f1:3b:2b:ea:1b:4f:5b:90:5b:22:fd:4f:85:09:
                    24:52:f5:07:40:a6:c7:07:8e:4e:36:c3:72:48:b9:
                    ae:36:c9:e1:cc:d6:cb:96:c6:a4:c2:16:52:2f:09:
                    bf:bc:90:c8:0c:10:43:18:bc:5a:1d:8f:51:f4:c3:
                    19:c4:05:ad:1a:1b:41:ab:73:48:51:9e:8f:cb:a9:
                    d8:6a:95:d6:4d:7f:db:28:4e:73:c8:9a:f6:55:f3:
                    77:2b:c7:0d:ad:28:fb:62:01:a4:40:c1:96:c7:77:
                    c3:73:ca:db:0d:e1:ed:a4:9a:72:d9:8d:42:fd:a7:
                    e7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:19:C6:63:B5:32:FB:4E:5C:FA:36:77:02:E9:CC:95:D9:A6:65:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28a3ac68-27b4-3966-a7f7-2b0187049a5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.6.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:56:4b:16:ad:0e:14:18:5e:39:73:a7:bf:2b:e1:bb:f5:10:
         8b:51:53:ea:5b:66:8d:14:fd:b8:1c:32:90:b8:75:0a:c7:d1:
         54:87:db:f7:dc:0c:ed:6a:7f:88:e2:15:f1:62:6d:ce:5c:1f:
         8c:72:c0:73:71:ce:17:e0:5a:76:4f:c9:a1:f2:53:a8:a8:d3:
         af:3a:b4:6d:df:92:ef:08:26:a1:59:65:5b:58:c2:70:19:fd:
         5f:04:e0:97:43:e0:47:eb:27:a7:63:58:84:7b:62:6d:58:83:
         ec:5a:8c:7f:9e:2b:83:f5:68:46:7b:b3:3e:a7:40:e7:1b:1c:
         43:7d:eb:07:fd:de:b8:17:c6:51:d5:98:ca:ef:8c:d1:96:f0:
         e6:31:fe:f3:69:14:a9:b5:4f:ff:8b:f7:f4:52:a8:a5:a8:fc:
         49:c7:5e:82:eb:1d:bb:b5:2d:8b:2a:b1:51:49:77:72:fa:28:
         47:0f:dc:c0:99:e2:c0:9e:54:b5:1a:15:2f:99:ac:54:d1:ac:
         d6:ae:64:07:2d:8d:2c:e7:b8:9a:8a:54:62:6e:dd:c7:c2:89:
         76:a4:51:51:2a:29:fa:26:a0:3e:b1:8a:81:69:2d:81:76:a8:
         4f:e7:15:1f:33:dc:2a:7d:30:c3:9d:d9:d9:d8:77:30:09:a8:
         4b:74:98:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:15:45 2025 by rpki-client