Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/889fd984-8b53-3e29-b835-37a99598d738.roa
File:                     889fd984-8b53-3e29-b835-37a99598d738.roa (raw, json)
Hash identifier:          SnI6n2n91fjvGAol8FtLtxU+x8JzteXZFlq97Rd6nUg=
Subject key identifier:   1A:57:72:64:6D:23:2C:3A:0F:6A:EA:61:4D:3F:CF:A0:3B:85:4E:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AB4ED9E1ED36BED82DB60C700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/889fd984-8b53-3e29-b835-37a99598d738.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7015
IP address blocks:        24.91.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ed:9e:1e:d3:6b:ed:82:db:60:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=e41e5172-92d1-44e3-b512-3d4b164f6f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:66:80:65:47:e9:3a:74:e0:6f:7b:8a:47:
                    e7:44:74:dd:97:a9:d6:08:3f:fb:a1:0e:f7:58:b9:
                    86:6f:11:f9:15:2b:7b:d8:fa:77:65:23:00:72:fd:
                    78:27:6e:bc:3e:48:2a:36:e5:4d:dc:f6:88:66:f3:
                    ff:f0:25:3a:fe:4c:87:d0:d7:e5:3f:0a:80:61:5c:
                    d9:2f:c5:3f:cd:e5:2a:8a:e2:a0:eb:6d:d1:cd:40:
                    78:fa:02:73:65:71:64:ba:e1:9d:77:9f:02:da:3c:
                    e7:b7:b1:06:16:18:e1:74:a6:23:d4:22:8d:8f:14:
                    ae:0f:e9:21:17:a3:fa:70:a5:b5:8c:66:0b:20:e9:
                    2e:ef:17:ab:6e:7a:57:28:53:c9:93:a1:3a:10:5d:
                    59:2f:6b:86:cb:f6:74:26:15:52:77:f4:2d:cc:24:
                    50:0a:aa:24:41:c7:f3:eb:81:06:07:92:4e:1e:2e:
                    25:94:e9:23:c6:99:45:99:d0:91:a2:dd:98:cf:22:
                    d7:8b:db:51:e2:c1:8a:52:2c:17:8e:ba:a0:e9:42:
                    50:8a:87:e8:3e:6e:ac:93:2e:79:d0:c6:d7:8f:6a:
                    a0:c1:1f:75:6b:f6:cf:82:de:51:f2:97:65:8b:8f:
                    64:05:7d:be:dd:33:a9:59:dd:c3:b6:1e:5d:8d:91:
                    eb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:57:72:64:6D:23:2C:3A:0F:6A:EA:61:4D:3F:CF:A0:3B:85:4E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/889fd984-8b53-3e29-b835-37a99598d738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.91.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:41:a8:a6:39:ea:7e:68:8e:be:ff:c1:1c:21:00:aa:67:f0:
         15:a9:8a:fb:2e:fa:83:bc:6d:d1:3c:a2:9e:46:9d:02:1a:21:
         c5:f0:cd:5b:8e:7d:c4:42:ef:0b:c0:2b:92:10:bf:77:64:eb:
         50:36:d2:79:f5:d8:59:66:bb:0f:fd:08:70:e2:48:73:bb:5a:
         83:48:69:60:f0:e1:2c:54:db:ee:b4:ad:59:89:c1:87:10:e8:
         4c:5c:a8:68:c0:b5:a4:45:c3:34:86:87:c2:51:eb:9b:9d:a4:
         a9:33:2b:b0:7e:23:de:b7:36:ab:59:03:6b:20:5f:b0:6f:75:
         f7:dd:70:a2:b7:a1:a0:79:de:c5:a1:81:dc:eb:8b:62:0a:c5:
         3a:db:12:70:a2:63:e8:9e:9d:ae:0b:95:fa:21:89:bc:2c:9e:
         80:36:b4:2d:77:f0:9e:e5:6a:cc:43:1a:97:f4:52:48:b4:90:
         81:91:ea:a5:cd:21:ee:2c:fe:d4:66:d7:c1:5d:3b:42:2b:50:
         a3:d3:a3:21:d7:af:1d:1b:08:45:3b:e9:0d:09:12:5a:d9:15:
         5d:34:0f:d7:35:03:fa:ef:7d:2c:2a:db:f3:5f:74:82:cd:9f:
         f3:6f:c9:83:9f:dd:46:d8:b8:49:ec:7f:2d:af:48:89:36:9b:
         da:6f:fa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:15:24 2025 by rpki-client