Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88b52e4d-cd1a-3bef-8fcd-7d234fd18ae5.roa
File:                     88b52e4d-cd1a-3bef-8fcd-7d234fd18ae5.roa (raw, json)
Hash identifier:          arqtHvW+GUw0Ar+ykyX5gSH5asu6X9Qb2a1Q2A+UiM8=
Subject key identifier:   BF:20:F9:6B:78:B9:B5:75:EC:60:F6:83:23:65:40:D3:2B:7F:F7:F4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43006D57F5803301BAC4A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88b52e4d-cd1a-3bef-8fcd-7d234fd18ae5.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        24.91.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:06:d5:7f:58:03:30:1b:ac:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=eabe68eb-7bab-4161-ae78-66cc89d347db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9d:c9:94:7b:54:78:98:26:1e:17:0a:a8:c6:
                    d8:ec:43:78:8c:78:3c:46:4e:b0:95:c8:c7:de:4f:
                    b4:00:43:50:8f:54:2d:de:de:95:e2:9e:14:4a:3d:
                    f5:ff:13:7f:e7:ec:7b:bb:d7:f9:0c:e2:51:8d:ff:
                    95:1e:69:0f:6f:c6:22:d7:91:89:4e:c7:ca:25:a2:
                    f8:ce:a4:9b:ea:bd:b0:b1:8b:e5:2c:a5:1a:71:f3:
                    7d:df:df:e3:2b:4d:66:8c:7e:ae:10:0c:04:fd:91:
                    9e:f9:83:e5:40:6e:6c:1e:32:5a:93:d7:f7:b0:46:
                    c1:f4:3e:1c:5d:cc:a1:a2:eb:9d:28:7c:50:70:33:
                    fe:b9:20:a1:00:45:62:de:77:6f:c0:97:e8:29:4a:
                    0b:e5:e8:09:12:a9:5d:a3:a8:e5:28:ff:6d:6c:9d:
                    1d:5c:b5:0b:b9:d8:65:7b:c9:03:38:5a:c6:cf:bc:
                    d8:c9:80:a2:37:a4:df:74:76:fc:0e:97:bb:11:08:
                    77:bd:9e:63:8b:06:9a:b8:d4:f7:c7:b8:6a:09:d9:
                    96:1b:20:75:49:4a:f3:70:86:9a:4b:b6:1b:ce:33:
                    e5:15:53:b2:9a:b5:2d:05:c3:33:24:6e:fa:2a:9b:
                    df:a7:49:2e:bb:d1:79:48:59:dd:19:0d:2b:bb:90:
                    c8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:20:F9:6B:78:B9:B5:75:EC:60:F6:83:23:65:40:D3:2B:7F:F7:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88b52e4d-cd1a-3bef-8fcd-7d234fd18ae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.91.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:08:9b:ec:1e:9c:69:40:22:8b:66:27:46:d6:25:97:03:8c:
         85:1a:6c:bc:5b:c9:e2:c8:67:67:08:8e:b8:96:bf:aa:42:bb:
         46:2c:40:ed:ca:42:ee:58:6d:d9:b9:51:7d:81:ce:21:ee:5a:
         08:ed:10:f3:a1:2f:38:fc:5b:a1:10:d2:7b:67:8c:25:d9:5c:
         e0:19:c3:a7:3c:69:ca:26:16:38:34:18:90:95:1e:d1:d1:22:
         4c:7f:5c:a8:5c:c2:22:46:92:00:bb:40:15:8e:15:38:89:f8:
         4d:38:db:fa:1f:ff:4f:73:5f:68:40:25:3a:09:74:f4:78:3c:
         48:10:bf:52:66:67:71:42:7f:af:1d:7e:aa:cb:53:d6:3a:48:
         9c:cc:80:e6:81:06:c5:ad:26:a0:a6:1b:78:3d:f7:6e:55:8e:
         a5:24:67:36:33:18:78:4d:05:8b:22:42:ca:05:b1:2d:77:8b:
         8d:43:f9:72:d6:7d:53:6a:9c:d0:cc:d9:b0:74:43:3d:d1:30:
         2d:8f:1b:99:e8:09:77:96:83:cc:93:fd:11:a4:80:4f:b5:a9:
         5c:48:1d:d4:ef:1c:5c:5a:88:28:df:7e:9d:11:fb:37:0d:1a:
         07:6e:5b:90:cb:6d:70:bf:f3:8d:c8:4d:50:41:57:4d:40:89:
         7f:b5:76:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:17:36 2025 by rpki-client