Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcea4651-a907-3639-ae96-fbb797ce48f9.roa
File:                     fcea4651-a907-3639-ae96-fbb797ce48f9.roa (raw, json)
Hash identifier:          EKismdhyGs6YNE66c+WXBufRi+2BnwOFinxZ+wHfi6s=
Subject key identifier:   0B:57:62:5E:DD:2D:C3:94:FC:92:0B:10:2F:22:15:2B:E0:47:C3:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA471ACAB821BBA5F80C60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcea4651-a907-3639-ae96-fbb797ce48f9.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        24.127.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:47:1a:ca:b8:21:bb:a5:f8:0c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=697a83a3-5443-43e3-9d25-40c83b85c564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:3e:60:c3:59:29:a2:5f:b8:13:e0:b4:1f:
                    de:fd:41:ce:f0:a6:af:76:2a:fb:f2:37:a5:19:de:
                    97:20:f0:bd:b4:89:0b:9d:c9:c7:7b:a0:c5:4b:97:
                    8f:18:ab:06:4a:a2:0a:bd:06:57:41:5c:e4:2e:35:
                    22:56:42:bb:a7:f0:6d:0b:b0:36:56:93:df:99:eb:
                    c1:23:97:e7:52:cb:13:68:c9:24:0c:4c:77:79:ce:
                    96:67:92:7a:2c:b2:30:1e:f3:e0:f2:e1:46:5e:00:
                    19:a4:f9:11:1f:d0:5b:24:68:7c:c1:a4:71:bc:d2:
                    8b:9a:80:bd:28:96:82:52:17:33:47:42:f9:10:27:
                    62:fd:d8:87:b7:44:3a:57:5e:5c:82:e1:64:e3:b5:
                    51:b1:77:18:62:88:3a:28:14:55:87:b3:bd:24:03:
                    cf:3e:af:04:35:56:37:7c:38:2f:dd:61:80:48:96:
                    07:b9:c2:ba:41:6f:76:d2:ca:e1:42:10:a6:17:30:
                    5c:57:69:3e:ef:0e:7c:c7:df:0b:a2:53:6b:bb:e5:
                    be:14:f5:3e:2c:f7:b1:bb:28:6f:85:2d:b8:25:94:
                    4d:9b:f1:1c:b1:7c:fd:4a:d0:ce:33:bc:dd:64:d6:
                    ec:6a:24:e3:c4:ce:c7:00:73:8c:e5:c2:99:85:22:
                    2a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:57:62:5E:DD:2D:C3:94:FC:92:0B:10:2F:22:15:2B:E0:47:C3:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fcea4651-a907-3639-ae96-fbb797ce48f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.127.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:25:20:8d:24:5f:ee:84:50:01:db:ee:c1:af:3e:ec:47:28:
         06:db:54:70:40:bb:1a:38:cf:71:9f:4c:f0:dc:36:fb:ca:ce:
         98:ab:f4:4e:e7:23:28:6f:5b:02:65:db:01:e2:ed:36:13:d8:
         52:b4:27:fd:40:ee:d5:30:48:97:4b:1a:61:74:b3:28:09:68:
         c3:9d:0b:3f:74:a2:de:9b:6b:3e:79:d4:52:26:87:5f:24:ef:
         90:fa:17:ed:70:22:0e:77:4c:4c:37:94:c1:07:a0:89:d1:82:
         a4:0e:0d:bd:e3:ae:5a:d8:0d:cd:bb:2d:04:46:fa:fd:8b:18:
         27:d8:ea:fd:85:5c:cd:5a:f7:c0:9f:2d:c3:45:03:45:87:46:
         2a:9c:67:d0:ee:be:a5:2d:8c:91:89:96:1f:10:f9:41:26:48:
         3e:09:cc:6d:99:09:fb:22:d0:f9:13:d2:e3:f9:0f:87:24:18:
         a8:76:24:65:92:4d:a8:2f:ab:17:81:cd:04:fd:3c:c9:32:73:
         dd:19:ef:cd:5e:69:74:a1:06:f9:9b:fd:df:79:f1:87:47:3d:
         4f:81:d3:56:fa:c1:a5:3e:b1:44:fe:d4:3d:d6:27:ce:93:a0:
         6d:72:86:96:2c:4b:69:53:49:4e:ea:7b:ec:0f:b4:43:3b:94:
         6f:f0:cc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:04:09 2025 by rpki-client