Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a664b0f-24e3-3b4d-8bf4-eea3f5fd32ba.roa
File:                     5a664b0f-24e3-3b4d-8bf4-eea3f5fd32ba.roa (raw, json)
Hash identifier:          phYyiUBXihZM3s6V/Xjadphp97sZ6GROLvNg1D5/zhc=
Subject key identifier:   6B:40:76:65:28:60:25:0B:EB:DF:F1:8B:B1:2C:23:18:B4:12:7C:1E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFC814C2210EC7A8EE3CF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a664b0f-24e3-3b4d-8bf4-eea3f5fd32ba.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7922
IP address blocks:        24.118.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fc:81:4c:22:10:ec:7a:8e:e3:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=f6480d54-bae9-45f5-9407-10777f1d6208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3d:6b:ac:f9:46:dd:54:41:8b:38:1f:24:cf:
                    f2:ef:46:82:16:46:d5:79:54:83:2b:aa:09:5c:a3:
                    c0:ff:ad:06:e3:84:ad:45:34:27:be:2f:0d:07:44:
                    fd:20:ac:20:6d:bb:a8:50:a1:50:8e:25:43:34:e7:
                    0e:72:d6:ac:38:48:3c:26:6a:99:d8:bc:5b:da:10:
                    23:77:91:85:b4:0e:f2:54:3f:64:c5:77:98:be:92:
                    4d:b5:ba:a1:ff:09:ca:37:ce:ef:ce:7c:3d:85:a8:
                    5b:a6:31:f5:fd:7b:41:7e:b5:f2:75:76:d9:da:e5:
                    0b:da:ab:a0:55:d1:60:85:b7:71:2a:54:17:00:b8:
                    b4:ed:08:ea:34:af:16:6c:bd:82:35:fd:ab:fe:e2:
                    7d:87:84:dd:7b:40:03:5f:9e:5b:9d:e9:70:f5:83:
                    51:5e:03:04:11:99:b4:1d:37:fc:b1:28:78:5e:a0:
                    c4:1c:ca:0c:14:f4:5c:40:d1:36:88:08:d6:3f:86:
                    7e:1a:b8:f5:2e:12:11:3c:a5:97:7d:46:94:07:19:
                    f0:49:08:a6:34:39:de:29:3b:6c:d1:1b:2c:cd:c5:
                    79:3f:8d:a2:ff:23:8b:95:ca:d5:bb:56:ca:f3:19:
                    82:9f:d5:21:da:b0:c1:9e:6f:fb:62:ce:18:dd:87:
                    13:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:40:76:65:28:60:25:0B:EB:DF:F1:8B:B1:2C:23:18:B4:12:7C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a664b0f-24e3-3b4d-8bf4-eea3f5fd32ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.118.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:79:17:ee:cc:98:5b:8c:73:6b:9c:d3:3a:74:d0:cc:a5:34:
         f3:47:93:fc:4e:89:2f:8a:be:1c:26:fe:80:f9:52:fa:c9:9f:
         44:26:89:09:85:82:af:3b:c8:87:2b:86:fb:25:76:67:72:fc:
         d3:1c:a4:06:b7:bc:66:a8:73:11:1b:18:01:f5:8d:4d:56:c8:
         62:75:4e:22:74:d0:aa:1d:a8:68:de:0b:f3:6a:7e:1a:56:ef:
         ab:c1:a2:61:cd:ac:1a:82:13:14:32:88:19:58:8c:80:01:15:
         6a:b2:2e:7e:65:68:38:69:00:20:b0:f8:50:c0:a0:92:8d:fb:
         f0:89:a0:d0:4b:86:fa:22:17:b0:ad:4e:9b:fd:04:29:86:b1:
         c9:22:cd:45:7a:e9:49:1e:11:c9:da:cd:40:1a:3f:45:b0:f9:
         c6:77:8e:b0:76:4f:6f:3f:bf:59:d8:c9:35:ad:5e:b8:fc:04:
         f3:4d:4a:b8:de:51:48:9e:42:e3:45:59:f1:3b:82:0a:9f:14:
         b7:44:99:73:e5:c3:6f:f0:29:f9:aa:dd:cf:ba:65:b8:bb:de:
         fe:83:1d:af:c1:b7:a3:c0:95:61:16:c4:ab:a4:9c:61:39:69:
         4b:f8:a4:1f:11:ba:59:5b:c8:ac:60:1a:fb:a3:2d:49:c6:1b:
         81:bf:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:01:24 2025 by rpki-client