Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01cddcba-9c39-383d-b594-805bae52390c.roa
File:                     01cddcba-9c39-383d-b594-805bae52390c.roa (raw, json)
Hash identifier:          RUilj17t2WZfQ3O5X/09SFoJ3Wr9tDeM+tVKpi/Ke+A=
Subject key identifier:   B5:02:13:96:18:0D:50:CC:CA:C5:81:3F:A2:B9:29:CA:36:EE:31:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A7F632D3B28BA4ABBFABC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01cddcba-9c39-383d-b594-805bae52390c.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        24.60.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:f6:32:d3:b2:8b:a4:ab:bf:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=e635d620-e742-4dfd-a0d0-01d72a7e9395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:e1:3e:5a:be:0f:a7:4b:86:11:34:92:63:
                    3a:0c:04:d3:0c:58:e1:16:60:c6:61:f3:2c:c8:35:
                    30:a6:c7:12:b4:0d:00:5f:63:f4:3c:a0:98:64:71:
                    f6:ab:cc:70:2e:5f:a6:28:e9:ec:f5:7d:e9:07:0d:
                    05:02:77:c7:dd:64:67:fd:3e:3c:79:36:44:c6:7e:
                    3d:e4:84:04:41:fe:c3:15:b9:8f:df:ae:c1:01:2e:
                    a3:58:24:88:31:d8:76:5e:a8:09:6b:c7:80:2e:4e:
                    58:22:da:c0:87:b0:15:9e:32:3b:a4:7b:43:48:9b:
                    82:ca:d4:57:33:71:7f:29:f8:c3:b4:e5:fb:ba:85:
                    1d:70:e7:48:a8:e6:d5:cb:7d:d9:46:d9:43:6d:64:
                    8a:13:36:bc:dd:c7:55:00:5f:16:d4:06:1b:91:f0:
                    30:a7:db:16:fe:62:67:bc:46:2f:24:dd:e3:3a:a3:
                    76:2b:9c:60:87:dc:89:ec:f4:ae:a5:c6:74:15:0c:
                    27:3e:60:2d:ed:83:1d:f5:e4:a7:be:22:5c:58:34:
                    80:2d:3e:30:c5:28:01:5a:63:e4:b5:be:9a:56:e1:
                    b9:8c:85:2b:02:8d:57:a2:08:85:0c:40:4b:bc:94:
                    13:84:90:37:b4:cf:26:63:44:a3:ec:74:b3:5b:ce:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:02:13:96:18:0D:50:CC:CA:C5:81:3F:A2:B9:29:CA:36:EE:31:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01cddcba-9c39-383d-b594-805bae52390c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.60.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:3e:89:a0:8a:a5:90:46:61:d9:12:dd:fe:8d:74:7f:bb:6b:
         02:93:4a:a8:37:dc:53:dc:25:32:80:a3:af:31:0d:51:8f:dd:
         3d:8a:cf:af:69:e1:9c:6b:e2:77:30:b1:53:99:80:d6:ed:ab:
         03:24:c4:a4:7d:91:5e:e1:a5:eb:62:68:dd:08:58:b1:50:d5:
         c6:1c:fc:18:5a:09:7b:70:1a:30:59:16:b4:3a:b6:df:06:40:
         97:a1:54:76:33:b8:33:c5:06:b2:20:a1:26:64:f9:6a:a4:3f:
         59:97:96:fa:a0:37:f6:22:ac:80:0b:0c:86:99:3b:6b:16:26:
         33:bb:6d:21:8f:77:e3:88:0e:bb:47:56:cd:ed:7c:3e:f0:f3:
         6c:ea:7b:90:cc:45:d9:21:a1:48:33:f8:9b:1f:5b:15:05:71:
         1e:fb:df:e7:f3:9d:c7:6e:58:b2:c9:98:87:ec:b2:c1:d4:bc:
         d1:0d:54:3d:6c:2c:b2:80:9c:f1:fd:a7:73:5f:f1:4f:ba:4f:
         cc:2c:6d:ba:08:87:97:be:d1:e3:6a:08:6e:78:94:82:10:ba:
         ec:01:4a:00:f9:56:74:92:9c:3c:af:89:f8:73:15:1b:0e:bd:
         3a:ef:a3:9c:d8:03:b7:44:c6:db:84:09:f8:a5:ca:42:19:a1:
         db:b1:48:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:53:37 2025 by rpki-client