Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd88dc50-241a-3b51-94ce-a77df0faa841.roa
File:                     dd88dc50-241a-3b51-94ce-a77df0faa841.roa (raw, json)
Hash identifier:          hgXrQMF3S6k+WBfPih4ogvjY7pFlb50EuNyBCYHyJdQ=
Subject key identifier:   52:AF:FE:23:2E:8C:B8:9B:82:EA:70:ED:14:5E:5F:68:F9:9D:C6:49
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9AC43DA9E17C059F5D400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd88dc50-241a-3b51-94ce-a77df0faa841.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        24.91.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:ac:43:da:9e:17:c0:59:f5:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=0a7345d6-454b-48b3-9a4d-38604aed3950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4f:31:92:3b:9f:3d:65:7a:de:b4:3d:cf:ce:
                    9d:38:ea:21:8a:dc:82:65:b6:73:b7:90:cc:56:2f:
                    8d:61:fa:a9:c2:90:97:d7:68:20:ba:b4:72:2d:36:
                    82:5a:76:77:d1:95:3d:d4:ca:93:ce:72:41:ee:82:
                    e2:49:20:09:1a:f5:3e:84:ba:a9:ec:3d:1a:04:6e:
                    86:3f:31:f2:d8:5e:fc:6f:e3:04:df:dc:da:17:f4:
                    7d:90:c2:7e:b8:87:fc:2a:a1:67:d2:d0:5c:a2:dc:
                    09:84:44:f4:90:8a:e8:dc:10:6b:f0:17:ff:3a:0c:
                    46:3f:f6:a7:18:18:67:09:bc:07:12:17:09:0e:b1:
                    08:3c:32:0b:76:25:9d:e2:50:7e:63:c4:3c:b6:a3:
                    0e:af:1f:e4:d1:29:22:a9:b5:7f:84:33:d3:27:1a:
                    ff:4e:ba:bb:d1:14:b9:73:d6:f0:34:70:30:e1:2f:
                    b7:f4:63:4a:7b:63:a8:89:1f:12:10:40:ee:9a:a2:
                    b2:a5:61:9a:e9:61:0c:08:cf:61:92:ed:ab:53:f8:
                    14:a1:55:95:45:51:13:8e:cd:dd:cb:f0:8a:b2:22:
                    70:04:4f:43:16:42:d1:28:53:c3:8a:b0:5f:df:b3:
                    39:8f:eb:08:4f:cb:1a:02:da:4c:5f:cc:6a:90:6a:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AF:FE:23:2E:8C:B8:9B:82:EA:70:ED:14:5E:5F:68:F9:9D:C6:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd88dc50-241a-3b51-94ce-a77df0faa841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.91.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:c5:6e:35:67:26:6f:ff:01:ce:c6:3f:3c:0c:57:c0:c4:b8:
         2a:30:db:31:d3:26:5d:70:cf:04:8b:7c:fa:0c:f4:26:5c:fe:
         52:fb:56:53:c5:9d:3a:79:8f:0e:59:89:b3:3b:50:e6:c3:bb:
         6a:d0:f3:e0:37:e9:f4:b4:7b:a1:d6:28:40:07:ff:db:f0:d4:
         41:98:d3:ca:7d:d5:2b:d5:cf:af:6b:fc:da:c1:2c:cc:7e:fc:
         1a:80:01:41:3c:04:d6:af:b4:c9:70:46:dd:51:eb:7f:d5:01:
         18:27:cd:3b:93:f7:cf:75:f9:46:b1:fd:c8:bd:43:ea:e7:60:
         69:97:45:53:29:5c:0f:61:25:a5:f0:0c:28:27:3b:7a:07:b5:
         17:d7:5f:16:27:0b:91:66:82:9e:53:19:1e:03:2a:e9:be:0f:
         89:0d:87:4c:4c:89:cd:f8:70:d6:74:66:e9:dc:10:50:d4:96:
         9c:9d:4b:fc:75:06:d8:2b:ff:cf:aa:20:ca:f0:27:4e:11:dc:
         86:ae:ff:3c:15:9f:d7:dc:54:ec:8d:08:fd:a7:a9:5f:9f:56:
         e2:77:2d:94:be:0e:89:c2:24:2a:07:bb:97:ed:2d:c2:cc:37:
         85:39:3d:39:c8:24:10:6c:cd:ee:db:72:84:2f:23:e5:c6:0a:
         c6:bc:17:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:52:16 2025 by rpki-client