Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9749f020-7098-3a6f-910d-995637eec77c.roa
File:                     9749f020-7098-3a6f-910d-995637eec77c.roa (raw, json)
Hash identifier:          NRZ3IsuTrpCOShXWPl35wJPd298pVCqGVTjaVkGCq5M=
Subject key identifier:   BA:02:6C:08:15:58:4F:14:8E:C5:7E:37:35:38:3C:26:3F:CC:6D:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A7F155A7DD708B38BB0180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9749f020-7098-3a6f-910d-995637eec77c.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        24.218.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:f1:55:a7:dd:70:8b:38:bb:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=36468a16-2963-47ff-acc3-0f30e2080fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d6:e4:66:84:65:cd:5c:27:c9:e0:ac:26:70:
                    7b:37:bd:f2:5a:b8:81:3a:9e:c4:5f:05:66:87:2b:
                    1d:eb:b1:04:95:cf:b2:bc:cd:e8:4e:cc:05:64:18:
                    8c:76:40:d9:cb:02:e1:38:d9:4c:ef:54:d3:46:97:
                    be:32:83:39:b4:43:29:23:7d:2b:41:7c:7e:47:99:
                    28:30:69:02:c2:fe:1e:e5:ad:f2:f8:71:ee:1a:12:
                    a6:9f:b1:ba:59:f8:7c:29:86:e4:36:c7:35:df:19:
                    8e:2f:6a:a6:34:34:5b:ad:f9:b1:d2:9f:89:7b:9b:
                    85:e4:4c:a8:c2:d3:16:22:22:38:3f:f6:9a:93:69:
                    3a:10:e6:0c:fd:e8:69:a8:2c:cd:4b:23:e9:cd:17:
                    b7:18:c1:4e:6c:55:f1:56:99:71:03:83:51:a7:56:
                    19:a6:fe:0d:20:67:a2:2e:90:ac:8b:87:6a:e2:f5:
                    f9:c1:7b:be:94:aa:73:2c:48:ef:12:a8:3f:eb:f1:
                    6f:ca:89:ba:17:16:ec:05:10:d6:84:2b:30:0e:99:
                    9d:96:04:e4:35:94:d3:22:7e:65:3d:39:7a:86:9c:
                    23:2a:19:da:08:d2:86:04:c3:17:89:3d:2e:9b:5b:
                    09:f4:ae:58:2c:74:2e:77:d6:1b:03:16:20:36:2c:
                    65:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:02:6C:08:15:58:4F:14:8E:C5:7E:37:35:38:3C:26:3F:CC:6D:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9749f020-7098-3a6f-910d-995637eec77c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.218.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:63:86:77:8d:44:0f:28:b8:d1:ea:68:4c:e4:45:df:86:76:
         ed:60:01:8a:96:66:b8:8e:65:9c:b6:0d:19:5f:c3:f2:bf:a5:
         3d:f1:70:11:1a:6c:b5:a7:87:c3:81:43:3f:a1:dd:40:dd:c1:
         02:8f:66:39:6b:1a:82:01:bc:70:6f:52:9b:74:1a:fa:f0:b8:
         78:6a:79:c2:52:8b:cb:94:1a:4b:0e:89:6c:1b:1e:ab:41:cb:
         44:ba:6b:03:29:a5:a7:36:fe:dd:b2:b2:17:dc:7c:82:9c:17:
         f0:5b:de:f3:b9:2b:7f:2b:ff:68:84:d6:4f:ca:33:ce:f3:96:
         07:de:34:5d:69:6c:58:f8:4a:95:f1:72:7b:0b:12:8b:37:11:
         53:61:bd:94:d1:90:aa:45:59:1b:17:1b:f8:9e:7e:1b:26:f9:
         74:36:24:82:bd:96:4c:7f:c0:fe:57:81:e5:80:f8:0f:d0:c6:
         bd:1c:ac:d2:6f:97:4e:3d:33:cc:36:e4:7c:3c:cc:88:82:19:
         b3:37:5e:8a:94:44:b6:19:87:35:4b:ea:36:fc:8d:88:4a:64:
         50:9a:c1:6a:4d:61:a3:ba:f9:00:9d:db:a9:bf:51:33:30:c2:
         89:79:36:c5:1f:95:63:79:ef:7c:58:d6:d9:18:7e:97:cc:44:
         ad:72:4a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:00:31 2025 by rpki-client