Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad7f13dc-d1b1-38e4-89a4-991287637541.roa
File:                     ad7f13dc-d1b1-38e4-89a4-991287637541.roa (raw, json)
Hash identifier:          xHWThD27uMosA9E5cMoDqR/Z5map111kXWcTSWE9MOk=
Subject key identifier:   76:FD:13:2B:DF:F5:54:72:C9:07:E2:27:5C:C0:09:34:5B:3D:23:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA336D14020D3E4FECBF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad7f13dc-d1b1-38e4-89a4-991287637541.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        76.24.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:33:6d:14:02:0d:3e:4f:ec:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=c2b45945-4cef-440f-a9dc-6c318ededfef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b5:a6:b5:f8:10:eb:6c:f0:ac:06:05:eb:81:
                    ac:1a:6b:b1:09:63:88:e0:c9:bd:e9:0f:d1:fd:b5:
                    fc:90:37:26:a6:aa:d1:b0:66:a8:ae:10:0f:8e:0f:
                    61:a3:6a:db:34:54:f5:9b:03:c1:b5:0b:c1:2e:e5:
                    c8:51:ea:d2:ce:6d:e8:10:62:eb:e4:77:0c:86:84:
                    b4:a3:84:0f:2a:56:e6:08:a9:b5:31:7d:84:b2:83:
                    40:84:66:8f:60:d3:73:e7:41:2f:62:83:35:71:f0:
                    c1:0f:57:3a:1d:7a:6d:3e:47:f6:6d:7c:48:5f:1a:
                    da:f6:45:81:f6:31:79:39:08:af:e7:69:69:34:9e:
                    59:05:b0:01:32:13:1f:dc:73:4b:f9:de:88:b2:d0:
                    63:4b:2e:f0:77:75:93:95:23:48:a2:7b:5e:e1:d4:
                    af:be:16:17:fc:d4:ec:ef:87:1e:0b:a1:f8:26:4d:
                    eb:65:5d:44:e7:ce:3b:8b:4e:11:ce:a0:eb:13:b1:
                    c6:cc:dd:19:bf:0c:ea:94:de:a4:9f:4b:01:12:a3:
                    42:c8:66:7e:df:50:a7:46:79:7e:18:b4:81:cd:d9:
                    76:9e:53:ab:47:a6:dd:6b:f0:4a:03:89:17:c7:3d:
                    17:9b:e4:92:96:a4:a6:6d:4c:6f:e6:40:2a:e5:dd:
                    f7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FD:13:2B:DF:F5:54:72:C9:07:E2:27:5C:C0:09:34:5B:3D:23:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad7f13dc-d1b1-38e4-89a4-991287637541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.24.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f6:dd:84:3a:cf:ba:f8:6d:f7:07:a4:6c:5c:cb:63:48:d9:
         6b:a3:d1:94:31:fb:0b:b9:12:46:e0:65:e8:e4:e9:12:9a:db:
         aa:d4:de:ef:e5:6c:1f:cd:fa:9c:00:28:02:15:26:84:dc:be:
         71:74:14:f1:79:03:49:21:20:2a:89:f5:d1:d5:94:5e:62:cc:
         42:84:6c:37:2c:7b:5c:61:35:1c:08:6d:22:cc:d2:3e:0b:ea:
         20:ab:56:1f:44:37:c6:3e:39:42:f2:c4:18:5c:ac:56:6c:dc:
         43:e9:ed:a7:a1:80:5e:57:3a:7e:bc:33:f0:8e:dc:a9:1f:54:
         3e:09:54:a0:48:5d:0b:f2:d3:b4:9e:ad:4a:8a:f1:ff:b7:ff:
         48:e2:93:7e:22:e0:d4:c4:92:a0:32:83:80:ce:dc:7a:d4:97:
         93:e7:c4:33:04:95:df:63:e7:db:62:2a:dc:7e:f4:c2:c4:91:
         4a:dd:c5:7c:6b:1f:0f:11:22:95:11:77:63:5e:be:24:74:f1:
         81:f0:53:bd:b8:cd:8c:24:d1:c1:80:69:06:93:9a:44:26:ef:
         6a:94:72:69:2e:dc:46:24:fa:9e:4c:da:42:f9:51:64:b7:5e:
         09:48:f4:74:68:00:28:e9:b6:d2:fb:3b:82:52:1d:e3:ec:37:
         5e:80:12:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:32:45 2025 by rpki-client