Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d97d6a07-db56-3231-8385-cb7bdcc8aa18.roa
File:                     d97d6a07-db56-3231-8385-cb7bdcc8aa18.roa (raw, json)
Hash identifier:          LN3lCcSQ/LWQzs2izLJFUYGJsNK+GpZL+WRjTOC3WtI=
Subject key identifier:   E9:56:8B:D8:B0:09:5C:C7:22:A1:DA:86:68:16:B9:27:2F:4C:AC:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A7FA31C3B9C1D7EDB7D090
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d97d6a07-db56-3231-8385-cb7bdcc8aa18.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        24.61.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:fa:31:c3:b9:c1:d7:ed:b7:d0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=a2b8b5a3-4355-420d-9bd8-f2226cca07e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2e:ce:e1:dc:bd:ea:2a:52:b2:46:23:32:ac:
                    56:0f:bb:12:82:f0:c7:ea:9f:32:98:cb:e8:33:c4:
                    26:57:28:7d:70:e5:d7:bd:83:0c:5b:9b:e4:a8:a0:
                    20:8a:6a:fe:45:89:d8:7f:3b:31:7d:ec:eb:e7:6f:
                    8e:85:24:a7:ac:b6:b4:db:1f:da:0b:fc:4e:68:cf:
                    b8:f9:e9:dd:e9:b0:80:30:de:85:76:3e:1f:ba:24:
                    a2:81:35:90:94:e1:3e:76:de:4b:58:7e:59:f3:dc:
                    5d:8d:dc:1d:4c:41:69:7a:df:93:7a:8e:c0:63:5e:
                    bc:1a:28:2c:d2:9f:9c:8c:ee:01:16:e9:d9:1b:ac:
                    bc:fd:9c:df:f0:52:d7:af:ef:b4:2a:23:7b:02:50:
                    0f:6a:88:84:a7:82:34:b9:33:5a:8c:ee:12:58:de:
                    22:1a:f4:73:7f:7a:20:18:c2:42:3b:8a:71:d2:5e:
                    c2:7f:6c:39:67:73:3b:38:92:a3:eb:2b:09:16:c4:
                    6e:ed:b2:50:67:c3:4f:7c:db:0a:22:0e:f3:19:d5:
                    0c:b5:4a:6d:94:9c:0a:f5:62:de:8f:da:cf:7f:05:
                    95:d4:5a:cc:8e:b9:29:29:5e:e2:5c:7b:70:33:b4:
                    dc:b4:6d:26:d4:14:a5:c5:32:06:9d:9b:51:59:db:
                    fe:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:56:8B:D8:B0:09:5C:C7:22:A1:DA:86:68:16:B9:27:2F:4C:AC:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d97d6a07-db56-3231-8385-cb7bdcc8aa18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.61.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e7:11:65:a0:22:a1:dd:d9:b7:1c:07:38:6b:fa:29:b3:78:
         ec:ed:6d:b2:c8:0b:be:e6:d7:83:20:37:a5:c7:93:56:d1:b7:
         48:d4:70:32:32:df:cc:9f:ee:e1:25:75:49:62:56:52:be:ce:
         e6:f7:f3:9a:a2:07:b1:84:34:e0:11:38:7c:7b:00:74:1a:ec:
         57:77:58:3b:f4:38:59:3a:be:78:1b:c8:54:9a:03:49:df:1e:
         bc:22:fa:53:5e:df:29:57:23:ae:ce:27:0e:46:83:37:5c:2b:
         be:47:57:bf:87:01:bc:af:98:42:5c:46:8c:e7:8a:dd:1e:a8:
         5f:57:e3:bc:ec:b0:7a:65:e4:c4:fc:fe:ce:05:c3:08:7f:40:
         3c:7c:a1:45:1c:a6:f6:ed:d4:7b:ca:2f:dd:8b:27:fc:10:70:
         be:83:8e:8c:64:ee:07:e1:2e:98:f7:50:5f:97:6b:88:d4:e4:
         75:a5:79:29:36:f5:bf:4a:6f:8a:15:ae:03:ad:c3:7b:2c:17:
         e1:49:4e:51:86:f8:65:24:8a:e1:7c:73:8d:e2:14:5b:5e:65:
         3e:03:7f:d2:59:21:89:3b:96:6a:1b:85:e8:34:3b:e7:40:51:
         1b:c2:52:5a:e5:f5:66:5d:8f:bc:1d:85:90:aa:d2:63:ea:a7:
         ac:a8:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:38:54 2025 by rpki-client