Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c1ef888-e1d2-3ec6-a930-ade7ab7115a0.roa
File:                     2c1ef888-e1d2-3ec6-a930-ade7ab7115a0.roa (raw, json)
Hash identifier:          AHaY41V+WgR0H/6P8KoxvVm9aNnmUf+5vNUZPzyWNV8=
Subject key identifier:   66:79:9B:E2:8D:0D:31:56:09:A7:92:86:8C:A8:11:EF:53:3B:4E:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A7FCD0ECACE092D27D5700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c1ef888-e1d2-3ec6-a930-ade7ab7115a0.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        24.62.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:fc:d0:ec:ac:e0:92:d2:7d:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=53608732-911e-49dc-8d1a-d52dff8633f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1e:ec:2e:86:7d:71:5f:a1:0a:d7:4e:b9:e1:
                    af:51:86:2e:5e:24:b6:8c:b1:ca:1b:e9:f4:0e:48:
                    b2:71:2a:41:b5:26:0a:93:ec:c3:69:7f:64:50:31:
                    b1:07:e7:28:04:14:58:4e:30:45:f4:d0:a7:d0:47:
                    99:a2:6a:2d:2a:e6:c2:f4:49:62:0e:e3:72:83:15:
                    de:a4:41:b4:68:c7:69:14:55:53:fe:42:06:11:85:
                    28:6f:76:c5:d4:94:14:a1:c6:e6:67:e6:ff:d8:ab:
                    ea:50:d5:83:d4:9f:01:00:3e:70:02:2a:b8:a4:17:
                    84:28:02:88:c2:b3:9c:8e:57:24:9c:6c:f7:1d:18:
                    24:76:38:06:25:33:bb:ed:80:8c:f5:f3:e2:dd:11:
                    7c:b7:4f:36:06:ce:a4:11:ba:d2:b6:56:c5:48:94:
                    f8:b1:15:b3:e8:63:7f:32:25:94:7b:77:e2:5d:a5:
                    d7:73:b2:ae:58:07:44:89:08:f4:2e:f4:8c:71:2f:
                    03:7b:1d:25:25:fe:8f:d1:73:a5:06:a6:86:eb:7e:
                    b2:62:b2:97:eb:6f:ed:69:29:b8:f0:78:80:5d:bb:
                    36:04:c5:6a:92:66:11:ca:89:6b:d8:8f:63:8d:08:
                    26:b5:e4:8a:82:a4:52:a5:e6:74:09:34:05:6c:df:
                    73:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:79:9B:E2:8D:0D:31:56:09:A7:92:86:8C:A8:11:EF:53:3B:4E:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c1ef888-e1d2-3ec6-a930-ade7ab7115a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.62.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a3:47:68:98:91:22:27:18:58:e3:0a:c0:a9:e3:73:29:fb:
         87:0a:1e:60:f9:22:99:f3:05:1f:cb:77:25:a2:83:76:5b:5e:
         c1:5f:26:0e:fd:5a:70:d1:08:1c:11:d0:1d:94:e8:50:2d:09:
         33:eb:b4:6e:1b:96:82:95:f3:32:56:fe:dc:38:2a:e2:85:1f:
         91:22:b3:65:44:71:75:49:c0:9f:75:13:8c:4c:d6:9b:03:57:
         67:2e:bd:5b:4d:5d:74:65:75:61:4b:27:29:d2:b9:1c:eb:96:
         56:b2:29:c4:2a:5e:2a:b6:44:a8:92:12:58:34:7f:e2:37:5f:
         6a:15:dc:20:ee:33:8a:7a:ce:d5:aa:76:3c:6c:e5:ec:5d:78:
         8b:63:f6:5f:4b:2f:f5:28:e2:89:26:4f:5e:ec:e0:e7:78:52:
         84:fd:67:a3:bb:07:3f:18:29:d3:49:67:d8:a0:b9:25:15:0d:
         c7:c5:44:8a:c8:ac:3e:f1:d6:17:9b:34:3c:79:93:d8:d8:5b:
         f1:0d:e7:13:f0:a4:07:84:b5:54:47:5f:b9:1e:a1:d3:e7:e4:
         b9:e6:ef:8a:69:00:36:15:a5:5a:35:00:d6:bf:6d:f0:0e:7b:
         8e:9f:f7:69:ec:a5:08:45:5e:99:ac:99:c5:7e:5f:a4:63:83:
         c1:bc:9e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:28:47 2025 by rpki-client