Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/513b6403-4352-3ca3-b904-f7fb1deb7570.roa
File:                     513b6403-4352-3ca3-b904-f7fb1deb7570.roa (raw, json)
Hash identifier:          LD2tioMnKECIg6m7Ivi0A5lvR6rZ8Q94k8FsD166KL8=
Subject key identifier:   61:80:41:85:2B:01:04:21:55:21:EC:B0:B4:B2:20:BE:EC:62:82:06
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A71EB3504B4FB809ED30ADC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/513b6403-4352-3ca3-b904-f7fb1deb7570.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     33651
IP address blocks:        24.5.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:35:04:b4:fb:80:9e:d3:0a:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=753d2cf1-bcc9-4a6c-aa6a-bdfdcbdf1d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:7c:0f:54:01:9d:1b:e5:c2:bf:44:06:73:
                    1c:c4:2f:a4:64:8e:d5:5a:4c:68:23:f1:20:dd:be:
                    be:b8:fe:80:b4:73:72:b2:82:62:1f:8d:18:3e:46:
                    30:22:6b:20:1d:42:34:66:58:47:98:fd:50:26:65:
                    e6:07:56:49:aa:f9:bb:68:f7:87:2b:bb:f6:17:f0:
                    0f:c9:7d:74:32:d7:aa:c4:03:64:cc:10:70:32:59:
                    f2:e0:d4:2d:31:05:23:ad:68:c5:4f:b9:82:bb:4e:
                    43:94:4b:98:53:51:3e:86:72:97:f8:36:4a:6b:7e:
                    b2:75:80:36:9e:c8:d3:ea:3a:82:cf:34:d8:4c:0d:
                    8f:37:79:db:3c:1d:a1:9e:42:5c:9d:f0:32:e9:ad:
                    3e:58:62:25:65:f9:5a:aa:9e:33:38:4e:88:44:2d:
                    47:9c:b1:f0:45:78:41:4f:07:ee:83:49:14:e5:f9:
                    b8:d3:63:8e:18:31:61:77:ad:cf:6a:e6:8b:af:3b:
                    a3:8e:fe:73:51:ca:37:63:40:66:3f:4c:a2:49:88:
                    ab:0b:31:49:df:cf:7b:c4:96:a8:25:12:ec:13:4f:
                    16:31:2b:85:b6:19:06:80:a7:c1:de:96:40:4d:8c:
                    15:4d:1d:d7:1e:11:5e:b1:1a:bb:2a:b2:de:96:a9:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:80:41:85:2B:01:04:21:55:21:EC:B0:B4:B2:20:BE:EC:62:82:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/513b6403-4352-3ca3-b904-f7fb1deb7570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.5.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:89:84:09:8c:13:d0:09:80:9e:26:3a:a3:41:8c:3b:7e:fb:
         e6:5f:2e:27:36:0f:fb:1e:d4:6e:09:a3:d5:b4:21:70:87:2a:
         d9:08:4e:06:2a:b6:76:15:cf:9c:14:4b:d7:9c:4a:25:a8:f7:
         71:37:0a:9d:fe:14:a0:2b:8c:42:05:ea:9f:1b:fc:d3:77:6c:
         1a:81:d6:75:42:84:34:e5:bb:d6:63:c0:87:96:88:13:93:4d:
         f1:fd:d1:34:13:1f:52:03:a1:f1:f5:48:2c:49:d1:70:40:c0:
         85:1a:88:56:a0:65:8e:62:f5:d7:46:20:bf:54:eb:e7:09:eb:
         8e:95:87:e3:00:36:1d:b2:17:bf:b9:07:6f:95:01:57:10:52:
         8c:e4:67:6c:2e:e3:1a:f8:fd:be:8b:ca:46:92:de:a4:71:5d:
         d2:58:56:5f:6e:9d:26:6b:5f:c6:fd:cf:fc:ed:ef:85:41:06:
         1d:71:b4:6c:ee:bf:79:5e:43:96:c8:b9:fd:67:47:b6:93:fa:
         4c:82:a0:73:5f:61:83:bd:98:b5:45:20:fe:e9:fa:fd:ae:c6:
         ff:23:3a:45:e9:24:5b:c8:3c:fa:15:db:54:27:f5:b9:85:bd:
         aa:54:4f:90:d9:ab:5f:a0:5e:24:2e:6a:8e:c0:5c:0f:cd:32:
         28:ed:4d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:36:44 2025 by rpki-client