Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/534a98cc-fe74-37ad-b6ae-494fcfa53272.roa
File:                     534a98cc-fe74-37ad-b6ae-494fcfa53272.roa (raw, json)
Hash identifier:          bUvb6X8olinWDzMNyPQhOgeQnrtkMf/qhMvA4Cp/EDI=
Subject key identifier:   67:8A:2B:75:F3:CC:4E:7A:68:A3:32:76:93:BB:C9:05:9A:FA:8B:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9AAD931F1839790D28E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/534a98cc-fe74-37ad-b6ae-494fcfa53272.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        24.91.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:aa:d9:31:f1:83:97:90:d2:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=c5a0d3e9-6aff-4fe3-869b-d36c4f83009a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c3:90:d6:0e:55:23:ca:b6:6e:d3:0a:10:e9:
                    79:6c:0d:d8:55:f6:77:f5:e9:f8:11:18:08:4d:a1:
                    e0:e5:6f:e8:dd:6e:2a:37:9b:82:79:be:e8:2e:3e:
                    d7:ce:ff:04:1c:54:08:27:45:0f:62:7f:ec:85:b3:
                    8a:da:fe:71:da:c3:28:62:e7:e8:e4:d2:eb:66:96:
                    97:ea:aa:77:5b:3a:50:66:26:a4:84:0e:88:ff:52:
                    1f:5b:32:be:dc:8d:0e:49:d5:c9:3f:f8:49:f7:07:
                    79:36:b6:68:61:53:08:5d:14:b7:48:9f:fe:49:bc:
                    ab:91:ba:5c:4e:7b:77:b3:cb:7b:60:dd:b3:c9:f6:
                    69:cf:e2:a1:f0:70:fb:86:c7:75:18:bd:ac:e1:4b:
                    5b:b3:86:75:48:e8:67:9c:e3:d6:7a:27:a8:44:60:
                    f2:c7:3b:3a:f9:0d:67:0b:f4:6e:e0:3f:5c:3c:5e:
                    9c:55:f6:cd:11:6e:89:d1:ed:72:27:d1:00:9a:c2:
                    df:ec:a3:76:e9:c5:8f:54:99:0e:31:10:0e:d4:1f:
                    12:72:45:78:54:63:89:33:32:af:f7:05:ce:96:e5:
                    8c:30:ad:b2:b6:97:e2:25:ba:4c:d6:cb:b1:ff:fe:
                    81:24:78:08:c8:84:fc:a9:57:05:34:bc:58:d4:3c:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8A:2B:75:F3:CC:4E:7A:68:A3:32:76:93:BB:C9:05:9A:FA:8B:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/534a98cc-fe74-37ad-b6ae-494fcfa53272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.91.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:1a:b3:71:23:c4:39:c2:b7:2b:5b:b2:b4:33:62:41:2b:5a:
         aa:1d:d3:de:40:27:60:71:ff:4f:36:b5:f7:26:95:1d:2b:85:
         0f:de:0f:9e:60:d3:90:06:fb:55:5a:a8:66:93:60:19:92:07:
         f3:49:c7:80:04:e1:e4:ac:62:97:b0:d0:0c:0a:e3:f8:09:f3:
         5f:ad:a4:80:b5:6f:0a:b7:16:c2:c7:ea:5b:bf:6d:05:06:5b:
         d4:4c:24:22:cf:8f:83:5f:e4:50:ec:55:29:c2:b6:bd:bc:e1:
         51:31:44:1b:27:e1:95:6b:9c:a4:26:30:8a:b4:3f:8b:01:1b:
         52:6a:c0:f2:ba:cf:98:ee:a5:e0:18:8c:6f:e2:6c:0a:97:a2:
         1b:b4:76:f2:70:31:62:0c:4d:bf:f3:f6:85:36:b7:d5:08:45:
         23:97:7d:cd:b4:37:ff:c1:c0:1d:b9:fc:9c:00:e2:24:47:c9:
         1b:c4:e6:f9:a8:b5:29:4c:8e:24:04:b5:30:1b:98:da:44:c9:
         92:26:46:91:1a:2c:43:c3:19:61:e9:53:70:1e:bb:89:44:e5:
         d1:7d:f0:b6:2f:00:fa:37:f5:b7:59:78:10:60:65:bf:1f:44:
         3d:49:eb:74:f6:ae:6e:1d:4b:db:26:6a:63:14:ff:25:bf:53:
         c6:72:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:44:28 2025 by rpki-client