Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b1db459-f78a-337e-94e2-9cc321f8d63d.roa
File:                     0b1db459-f78a-337e-94e2-9cc321f8d63d.roa (raw, json)
Hash identifier:          2ZGbE3B2vfBzBxZrmvRHEExCxGs2b5odp6Oq9jowd68=
Subject key identifier:   B6:52:BF:B7:1C:54:CC:B2:6D:9A:4B:34:B7:CA:79:24:CA:A9:9E:0C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9A5088CD1905FB5A4C180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b1db459-f78a-337e-94e2-9cc321f8d63d.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        24.63.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:a5:08:8c:d1:90:5f:b5:a4:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=93a81039-329a-4834-b5c2-5c4efee46905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:27:1f:e2:28:7c:06:9d:84:52:ea:74:df:f3:
                    1c:8d:7b:68:87:ab:45:76:c3:92:da:00:9b:bb:2a:
                    f9:71:39:ab:8f:e5:81:15:f4:05:65:e3:5d:62:b5:
                    60:8a:b2:92:fc:7d:a9:b9:70:07:32:57:31:a6:12:
                    9e:7c:a9:07:4c:ef:aa:10:08:48:81:85:72:3b:63:
                    f0:6f:60:63:b9:8e:96:4a:e7:57:39:af:1f:5b:75:
                    22:41:92:da:53:dd:24:00:ce:35:d3:9b:38:c9:2c:
                    a7:f7:9f:8e:11:7e:8b:b2:4a:55:b5:35:7a:4b:0f:
                    2a:6c:5f:43:17:92:0c:75:e5:79:bd:89:10:61:14:
                    af:32:af:24:82:e9:b9:56:fa:ac:c2:2a:98:9c:59:
                    ef:d0:b0:43:e8:0c:ff:9a:a6:c6:34:b3:f2:88:ec:
                    c2:9f:3f:97:04:ef:d8:9a:d8:1e:e7:bf:ed:78:e3:
                    bb:07:6b:52:8f:b4:05:17:e6:4d:26:3f:68:d2:7c:
                    04:18:56:39:f4:f8:9f:8a:70:b3:08:60:74:f2:73:
                    2c:50:46:18:bc:26:0b:8d:77:a7:9d:82:d6:01:f5:
                    e1:02:22:15:f1:ee:2b:ba:09:33:25:90:7e:fd:20:
                    8b:26:47:7f:5e:5d:01:5c:bd:b9:83:aa:10:e1:e9:
                    4b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:52:BF:B7:1C:54:CC:B2:6D:9A:4B:34:B7:CA:79:24:CA:A9:9E:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b1db459-f78a-337e-94e2-9cc321f8d63d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.63.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:79:fd:38:48:4a:8c:fe:2c:4a:1f:52:3f:a6:f0:28:34:ac:
         2a:15:4a:4c:cf:42:bc:c8:67:1d:00:1b:e7:e4:7d:0f:97:95:
         db:d6:8f:10:cf:89:91:79:3a:82:4c:c5:2a:e8:2a:ef:04:96:
         38:3e:2c:c6:dc:92:49:c6:92:34:35:6a:82:47:7c:8c:76:62:
         ba:2a:c9:ed:83:31:fe:e4:ee:3e:f0:bc:0c:3b:dc:34:72:e3:
         af:0f:ae:e8:d5:e0:c1:80:41:4f:6e:ca:ab:f0:7c:0a:f5:59:
         95:25:3a:5e:c7:af:7f:35:b6:5d:29:d2:a7:1a:83:bb:7a:3f:
         ae:1a:69:88:56:19:44:24:f0:8c:60:a0:da:3e:56:24:88:42:
         0b:78:dd:12:57:b4:fb:0d:97:bd:5b:ce:15:93:47:95:48:88:
         55:83:3b:42:17:57:03:fd:23:32:63:ac:3d:83:bb:74:2b:65:
         8d:11:f4:36:73:98:07:75:e6:64:0f:5a:e8:1d:60:51:66:0e:
         a1:87:9c:4e:6d:88:d6:a2:2b:56:c3:7a:46:4a:c9:3b:0d:be:
         45:c8:b3:7d:cb:b7:00:f0:0f:92:47:d3:de:0f:34:54:9f:25:
         2e:a5:08:bd:30:bf:a4:61:e2:03:07:25:a7:cd:44:8a:5c:6d:
         d2:2a:3e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:38:49 2025 by rpki-client