Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22a581bd-9114-3517-b65d-b0409bce1f68.roa
File:                     22a581bd-9114-3517-b65d-b0409bce1f68.roa (raw, json)
Hash identifier:          esO1gKwNJ7B3WNYacZA2TZpCqI4j3sBH77YpQEGcfMU=
Subject key identifier:   68:56:57:E8:5B:80:EA:8E:9E:B5:52:90:0D:DB:AA:56:41:44:34:A8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA476D36F6727BBC8DF900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22a581bd-9114-3517-b65d-b0409bce1f68.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        24.127.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:47:6d:36:f6:72:7b:bc:8d:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=e28e363c-9508-4fcc-821f-056836e14af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:af:c2:9b:74:55:b3:e9:2f:a2:c4:b1:ca:
                    89:33:b4:3a:e0:6f:89:40:47:e2:a8:8c:93:4f:12:
                    1f:1b:ee:05:76:43:02:5a:c5:8a:78:a6:be:92:ff:
                    3f:7a:26:ad:11:b2:a2:76:5e:da:f7:33:40:20:1f:
                    2c:19:9a:41:e7:e4:a4:1d:67:f3:a0:07:fe:67:bb:
                    c1:f2:0b:f9:1c:96:13:df:b7:81:b7:d3:c1:e9:df:
                    f8:58:21:91:be:e8:59:00:a9:d9:87:9d:b0:10:67:
                    44:d5:40:4f:c2:b2:42:c6:46:46:8b:44:ec:9c:13:
                    cc:8c:28:48:cc:73:d9:8b:44:7a:ad:cc:03:04:85:
                    cf:2d:52:e2:75:e2:b7:28:ce:26:1d:11:ff:12:f5:
                    7e:2e:d2:59:48:9c:62:a0:24:71:c2:29:64:19:4e:
                    24:61:dd:12:dd:a0:21:73:37:70:70:23:b4:69:53:
                    a2:d7:df:73:58:cf:08:ad:ad:c0:60:06:ae:ec:68:
                    44:58:f3:26:a3:01:ca:95:71:d5:12:fd:ec:80:29:
                    b2:fe:0a:9e:58:ca:8c:e9:fc:d6:6e:d0:79:40:4b:
                    0c:e2:45:c7:28:83:50:b4:ac:49:7d:c4:44:16:4d:
                    a2:a8:4c:d0:12:c8:75:ba:d5:24:88:0a:f9:06:71:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:56:57:E8:5B:80:EA:8E:9E:B5:52:90:0D:DB:AA:56:41:44:34:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22a581bd-9114-3517-b65d-b0409bce1f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.127.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ce:08:16:fd:26:a2:65:1f:8d:63:72:51:6a:7e:41:31:42:
         ec:ff:cc:8b:59:10:dd:2c:9f:6e:5f:7c:b5:78:a4:83:04:0e:
         74:21:27:39:6f:a3:03:50:de:9d:c0:c4:dc:8d:f4:98:78:da:
         e8:97:34:df:18:98:9d:d0:0e:cb:63:f7:d5:f7:a7:94:d0:86:
         b3:fe:64:77:3e:df:af:b3:f9:17:be:2c:da:08:9f:a9:b9:63:
         90:48:64:6c:37:35:5d:65:b4:dc:66:8e:a2:55:89:f2:4e:b1:
         24:3e:ee:cd:af:bf:d3:cf:f1:69:6a:78:4c:d7:0e:ce:18:d4:
         6d:b1:b4:bd:fa:2e:27:ef:73:94:bd:46:ca:60:3b:8b:fe:e1:
         11:b6:30:11:7f:4c:f8:d9:03:d0:ad:73:ea:7a:b5:ea:0e:56:
         ad:a2:96:82:c8:83:42:3b:02:4b:9b:de:e4:92:67:83:a9:7c:
         c0:49:8c:ea:a0:36:60:87:f2:0d:ed:00:3b:55:3b:3d:84:3a:
         f9:78:c8:fc:70:2a:d7:84:c5:fa:71:b4:8f:33:8f:09:c7:ff:
         d4:90:87:fa:5b:46:a5:8c:c0:20:fd:b9:37:e2:28:53:19:00:
         e6:88:88:ed:96:ae:72:e7:7e:82:87:50:d2:a7:37:08:74:89:
         af:63:2b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:44:13 2025 by rpki-client