Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7abe1b39-c79c-321f-979a-e3e924697448.roa
File:                     7abe1b39-c79c-321f-979a-e3e924697448.roa (raw, json)
Hash identifier:          Uh4ETzXJL3QoSLPjo6rA6sjm/Uq7ykdzaEESeVNs9KM=
Subject key identifier:   AA:CF:E6:35:E0:26:27:F3:08:31:16:60:01:3C:10:D5:8F:0E:AE:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFBFD7C7890DB2E27C1D4F8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7abe1b39-c79c-321f-979a-e3e924697448.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     13367
IP address blocks:        24.131.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:fd:7c:78:90:db:2e:27:c1:d4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=48be9d74-3180-478d-8899-44fe2c7c28ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:ed:f8:4e:9d:e7:9e:86:d1:0a:4d:c1:3b:
                    52:a3:4a:53:e8:3e:e7:60:ca:64:64:38:b3:50:ba:
                    f3:4c:2c:28:66:b0:0f:77:16:5c:ec:e4:08:a3:9a:
                    68:a9:ff:e4:89:a7:d4:fa:2e:19:2c:9a:9b:5a:89:
                    51:96:80:bc:46:03:51:75:e0:9d:f1:ac:d7:2c:1d:
                    b3:15:d7:45:51:71:ae:8c:4c:a9:29:c5:2b:fc:79:
                    98:50:82:83:b2:ea:57:8d:bc:9d:41:3a:69:9b:92:
                    24:01:50:87:bb:20:e0:b6:a9:10:ee:19:ca:26:80:
                    c7:f9:82:8d:77:6f:87:1f:16:61:c1:a6:98:55:a4:
                    56:3e:af:fc:d7:4f:ff:42:e0:5a:b3:24:49:0d:4e:
                    d7:76:40:46:27:39:d0:e5:8a:30:d4:d6:a9:e3:e7:
                    19:53:8a:75:4d:60:dc:63:b7:ed:b8:ab:4e:3e:74:
                    96:fc:43:b6:cb:05:d3:80:9a:bd:d7:8f:91:47:7a:
                    3a:1d:7f:83:0e:0a:f2:f6:1a:97:a0:c7:1a:6f:10:
                    14:01:33:ff:2a:59:1e:b0:01:72:b7:80:02:bb:0e:
                    69:93:7b:5b:e1:fe:60:88:25:da:de:27:fc:87:d9:
                    b9:cb:55:7a:4e:7e:25:b9:c7:df:79:07:f6:67:0d:
                    9b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CF:E6:35:E0:26:27:F3:08:31:16:60:01:3C:10:D5:8F:0E:AE:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7abe1b39-c79c-321f-979a-e3e924697448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.131.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:9a:28:a8:57:d1:6e:e1:36:ef:b7:00:5e:30:01:ea:38:36:
         fc:97:da:00:e3:c7:cc:8e:27:d9:f3:a9:6f:bb:e4:22:90:49:
         08:59:e4:7f:78:2f:59:d6:7c:03:e7:38:8b:4e:11:19:36:91:
         8f:52:a9:f1:a8:5a:99:1e:54:20:8d:5a:a0:72:e8:6d:30:65:
         b2:2a:c5:02:aa:76:d0:76:c0:51:33:d8:7b:7a:6e:5b:de:8d:
         76:3a:01:6f:48:ea:56:54:0c:22:e4:dc:32:c5:2c:8d:9e:79:
         95:54:22:ab:4f:79:fd:c6:4f:f0:3e:c2:d4:b4:a2:b8:a4:bf:
         c7:90:81:66:41:ed:91:3a:10:0d:e2:44:d1:ad:f5:43:e4:a5:
         d1:fa:f8:10:4f:15:58:d0:9c:38:a4:c8:25:ff:3c:56:87:b8:
         9f:35:6c:14:70:e1:b3:aa:0a:d8:dd:1d:8b:40:34:12:06:79:
         92:b4:af:3f:77:bc:c1:42:db:d8:da:8d:eb:be:1a:dc:ab:8f:
         03:5f:e7:2b:da:99:ee:d1:d3:bf:1c:7a:99:bc:e8:19:68:c8:
         54:50:5f:e0:a9:11:9d:cf:c1:68:c2:48:46:cb:5d:9f:a2:20:
         cb:68:0c:e7:09:95:5e:b0:93:ca:81:e2:7b:dd:e0:2f:5b:d9:
         a7:e7:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:14:37 2025 by rpki-client