Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e454c883-aa6c-3059-ba0e-341fff58ea48.roa
File:                     e454c883-aa6c-3059-ba0e-341fff58ea48.roa (raw, json)
Hash identifier:          aVXFojl7q080c+Q02AXgKwh2ABX9qT7VTO1p14xS1QM=
Subject key identifier:   71:BF:27:FA:7E:1B:6C:B0:DE:CE:72:54:A5:56:D0:A2:D8:E8:7B:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9A60A97B6CAF0139B9280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e454c883-aa6c-3059-ba0e-341fff58ea48.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        24.63.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:a6:0a:97:b6:ca:f0:13:9b:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=facdc3ee-aed2-4e4c-8b40-c98c17164f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:37:78:0a:24:fb:c8:63:3d:0b:ae:cf:6c:
                    9f:69:97:46:96:22:d6:02:e8:bc:db:c1:6a:9d:24:
                    35:b6:7e:31:72:db:0e:68:c9:d0:b6:ff:4e:ec:c1:
                    3a:64:9f:0a:85:12:ad:69:12:fc:4f:70:ed:0d:96:
                    85:c6:20:6c:10:b3:6b:b8:cb:f3:9f:c9:af:28:3b:
                    14:bf:86:f0:5a:7d:40:e9:38:df:09:4b:78:ba:fc:
                    cc:3c:73:f9:17:a7:76:f3:55:52:e9:d8:a1:80:35:
                    35:a9:59:92:5c:e2:c1:3c:aa:3e:5a:82:68:ae:00:
                    11:2f:80:6c:79:3d:87:f9:0b:15:2c:22:19:6b:ce:
                    84:57:f2:de:fc:d4:1f:9c:b5:92:7d:00:a8:6b:ed:
                    bd:40:27:41:1c:c3:2b:fe:b8:c1:a4:7e:02:79:5f:
                    23:c9:fb:f8:31:c8:99:33:9a:7c:b3:11:3f:72:3c:
                    75:55:9d:26:d6:3f:db:59:45:3a:94:a1:8a:da:74:
                    25:0e:84:c0:48:16:2c:ac:45:68:7f:63:96:b5:4c:
                    11:ac:98:f9:2d:4d:56:15:ff:98:63:33:b9:d0:f8:
                    79:db:88:a4:bb:5a:2d:b1:73:0f:d7:3e:4e:1f:c6:
                    30:5a:7a:1b:3c:92:27:c9:9b:f9:2b:d0:03:e3:07:
                    b7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BF:27:FA:7E:1B:6C:B0:DE:CE:72:54:A5:56:D0:A2:D8:E8:7B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e454c883-aa6c-3059-ba0e-341fff58ea48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.63.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b4:c1:24:39:19:a8:34:98:c5:12:d0:a8:27:5f:5c:24:8d:
         ce:86:94:61:2c:3a:30:b9:db:ae:4f:f9:70:00:70:99:8c:da:
         de:93:04:8b:fb:c5:f1:fb:41:f3:20:e4:13:62:cf:91:e0:b1:
         66:9e:0f:69:20:d7:8a:c8:6e:19:27:d7:55:9d:ef:2c:d8:fa:
         f4:da:76:48:3c:91:18:b4:08:cd:e0:3f:ad:2e:51:b9:a2:4a:
         f3:be:6f:e5:8a:0c:6c:9e:ca:2a:c4:bc:46:1c:38:b7:42:63:
         0d:d3:d1:e6:16:2b:61:9a:84:2e:b3:51:38:ab:5a:ae:dc:b8:
         a6:6d:53:e3:7c:86:0c:d3:67:9f:5d:2d:43:1c:f9:f4:43:97:
         b5:80:97:fb:09:d5:6d:78:99:59:c9:7a:3f:3b:30:17:37:c0:
         9b:7f:61:b2:34:cd:88:c7:e2:75:a3:c1:6f:23:62:86:25:fd:
         32:af:1f:aa:2e:05:25:a0:82:a3:c9:e3:00:bf:b1:07:d4:5b:
         9e:aa:6d:7e:cc:c4:ca:49:fa:a8:65:c3:d4:0e:f5:fc:75:a2:
         4e:db:12:92:b6:64:e7:9a:9a:e0:71:48:6a:33:93:21:f6:92:
         48:85:3f:84:cf:7d:90:c5:d8:a7:a3:f2:bc:0b:97:fe:82:b8:
         e8:1d:a7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:25:51 2025 by rpki-client