Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa
File:                     96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa (raw, json)
Hash identifier:          u9lsJVNUbDNZFilu9HcwlnHrW9ziNxDjhC4WOyuHIGY=
Subject key identifier:   95:B6:7B:25:41:F1:B0:B8:1F:EC:E9:FE:12:2B:93:34:6B:F8:EC:EA
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584AFEE6A2E7A0DADAF7FC033CE0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     29802
IP address blocks:        91.191.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a2:e7:a0:da:da:f7:fc:03:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=855562fd-edef-4d0f-84fa-9d249b3184a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ff:d3:2e:a1:1c:09:d9:e3:7c:8e:38:c6:97:
                    5a:1f:27:ac:8f:65:af:f0:ae:16:04:44:4e:92:9d:
                    a0:0f:22:f6:10:1b:66:0f:4f:98:70:64:1d:fc:43:
                    47:56:85:f0:6b:55:f5:c6:5f:c6:5d:d3:52:80:94:
                    61:ee:19:1f:28:79:3a:10:53:61:66:59:11:2b:34:
                    8b:40:99:2e:11:94:7e:db:45:7c:a3:75:0f:10:93:
                    9f:fa:db:8b:53:23:b9:55:5a:0e:55:39:d9:21:71:
                    ef:36:23:11:fc:b0:e3:6b:df:4d:82:8b:f7:5e:c6:
                    30:72:39:37:ef:84:d2:1d:50:12:5b:71:23:b3:36:
                    d0:b0:00:82:7c:8c:93:db:92:29:7f:4f:72:8f:44:
                    62:5c:b6:9e:2a:51:e3:2c:ce:c1:9d:7d:b2:5f:ef:
                    f6:3c:3d:8c:ce:c5:82:6e:29:71:e8:ea:cc:2a:26:
                    02:51:f1:31:3a:fa:56:27:b4:50:84:f4:55:3b:05:
                    24:15:6e:76:1c:e7:43:80:92:49:11:63:b0:39:69:
                    47:a7:79:99:46:4a:3e:05:d5:64:ec:f2:22:9e:09:
                    9c:a8:03:41:5f:a9:97:a0:5c:65:85:58:95:77:6f:
                    ea:a5:35:ff:65:70:3e:20:2c:29:ef:3d:fe:ed:bb:
                    98:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B6:7B:25:41:F1:B0:B8:1F:EC:E9:FE:12:2B:93:34:6B:F8:EC:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/96c3f558-d41f-3713-8ead-c54eeaf2fee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.191.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:84:65:fb:d8:1e:32:36:bb:14:c9:5f:39:55:0f:88:4f:ac:
         b2:3e:71:83:98:8b:80:26:c9:5f:cf:5c:99:6e:15:31:bc:b7:
         b4:d1:fd:ce:9e:71:b4:72:02:62:83:15:0c:fc:00:2d:e2:3e:
         a3:22:f5:91:47:f7:9d:0b:fe:96:4c:f4:e7:c0:e9:e3:5d:41:
         02:eb:4a:9c:18:69:85:78:4e:6c:6f:98:8b:75:44:ba:55:1f:
         41:fa:25:3f:61:3c:24:95:d6:b3:88:ac:1d:af:28:cd:87:0a:
         6c:23:8f:5b:64:df:62:cd:62:05:36:ff:af:96:f6:ee:2e:79:
         cd:fb:33:d8:74:1f:a4:c9:d3:99:43:1d:ac:50:24:02:e1:88:
         d8:2f:4a:4d:1b:9c:fb:d1:95:a6:88:ea:6b:ae:2b:94:6f:7a:
         76:31:15:44:82:6e:65:c4:42:0b:25:c6:86:6d:c7:44:d6:0c:
         bd:4f:2b:8a:2d:5d:ea:78:70:51:15:70:5f:c0:aa:1b:bc:66:
         bb:90:eb:ff:cc:e7:36:4b:f6:e8:a6:96:94:be:32:49:bc:1d:
         8e:a0:6e:99:7d:65:ef:96:36:76:3a:7e:28:7a:c9:93:13:d5:
         bc:3f:43:62:36:ad:75:20:30:fc:b2:df:9e:b0:aa:66:66:24:
         cb:fc:20:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 13:56:18 2025 by rpki-client