Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b54f34a-0067-361c-99cc-ed57d4deaac1.roa
File:                     6b54f34a-0067-361c-99cc-ed57d4deaac1.roa (raw, json)
Hash identifier:          zHoSJr3KuqeayFBdV48+ylHEw890J/eUqWp41bzBQgg=
Subject key identifier:   DA:1C:6E:67:08:97:99:46:52:1D:3D:A8:A2:7F:41:00:8F:A1:EA:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD39D46ABC0810E06BE3E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b54f34a-0067-361c-99cc-ed57d4deaac1.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7015
IP address blocks:        24.218.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:39:d4:6a:bc:08:10:e0:6b:e3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=187edba4-1fbc-48ca-81de-1cade8056f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:07:51:01:23:ed:b4:93:e9:de:3e:1c:2e:
                    59:e5:81:4f:ab:f6:2c:6f:54:83:2b:15:82:65:fc:
                    58:13:6b:4a:7e:55:0c:cf:99:f6:91:c5:a7:02:e0:
                    92:7d:37:a9:e4:a8:18:e2:ae:9a:33:6c:a1:3a:67:
                    3a:0a:3b:b0:53:75:38:8e:72:2c:1a:06:af:3b:bd:
                    c8:86:24:43:65:49:96:6c:8a:ff:9e:50:ee:6a:6e:
                    82:98:92:0c:bd:51:78:9a:81:c0:ee:01:af:6b:ae:
                    af:be:fe:6f:e5:a2:df:e9:85:90:d2:54:9b:fa:78:
                    9e:0a:d5:44:7d:50:fc:8b:b6:8d:be:13:2d:0b:f8:
                    37:1f:06:81:7a:92:43:18:5c:fb:68:98:76:4b:39:
                    ef:49:68:54:50:be:ab:20:1d:c8:eb:19:56:23:c6:
                    aa:b5:be:d8:34:a4:74:93:02:bb:5c:fa:bd:50:6c:
                    3a:d3:0d:44:f0:f0:91:6c:bd:43:cc:f4:c9:fe:33:
                    90:6c:7c:9f:2c:6f:7a:be:8e:87:2d:6a:cc:d4:e8:
                    83:c1:f5:25:d2:14:3a:4e:e2:25:51:32:a9:2d:16:
                    32:1e:5a:b0:07:2e:47:f1:1d:7f:70:7d:84:2b:40:
                    7f:25:d5:b4:f0:05:2d:44:6d:6b:cf:59:2d:32:01:
                    5f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1C:6E:67:08:97:99:46:52:1D:3D:A8:A2:7F:41:00:8F:A1:EA:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b54f34a-0067-361c-99cc-ed57d4deaac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.218.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:dc:99:1c:fc:16:03:86:d1:a7:7e:2f:b4:7e:55:75:42:95:
         b9:46:80:21:91:72:c6:a3:b6:42:ee:ce:07:99:01:73:bf:50:
         45:d0:08:a9:3a:79:06:8f:f4:b6:ab:92:b2:f5:d4:d8:2d:68:
         d9:1d:ea:ad:8c:ea:e6:ce:11:73:7a:c6:4d:26:02:fa:4f:7a:
         72:f6:b5:2d:60:ad:df:95:98:7f:e0:ee:f9:a3:ad:20:84:b8:
         a4:29:f6:b2:86:3d:4d:bd:e7:1e:31:0e:43:d3:41:3b:60:51:
         22:2d:ee:9f:93:4e:c6:fa:9f:bd:48:cb:11:be:e8:92:13:0a:
         66:62:e6:fb:72:93:8e:82:c8:97:98:94:95:b8:0c:df:27:d8:
         23:46:ef:22:8f:57:3a:9b:15:0b:00:a5:b5:5b:58:af:dd:b5:
         f7:b8:cd:e5:34:4e:6e:9c:49:6e:68:1f:56:41:b6:b0:45:bf:
         54:ef:60:05:dd:30:89:94:cb:a6:e7:76:9c:3d:25:4b:3e:fc:
         fe:de:8a:1d:9a:a1:41:f8:ca:96:a1:d3:9f:1b:3e:47:40:65:
         11:90:b6:47:20:34:6e:b1:a8:d9:c2:80:61:13:ef:9a:e9:5b:
         d5:53:cb:53:db:12:16:b8:c1:ae:16:ef:cf:79:73:09:e6:ab:
         58:1f:9b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:42:52 2025 by rpki-client