Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa
File:                     7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa (raw, json)
Hash identifier:          at52uvLe3PmfLgGiG6r4CdVpT2CPy9J5nOJanu2s0Y0=
Subject key identifier:   02:91:26:05:8A:F6:7F:09:72:50:DC:66:29:7A:4A:81:E4:25:5B:73
Certificate issuer:       /CN=324346b5-3875-43b0-bb0d-8052274567d4
Certificate serial:       010D0C9F4328584AA85BBB22912B58472BB57580
Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     55
IP address blocks:        128.91.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:bb:22:91:2b:58:47:2b:b5:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=3357c6b6-f4a2-467f-b1c7-f02ea00ac96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:94:47:2a:ff:30:9b:54:c4:17:a2:80:d5:
                    4f:57:fe:ca:20:de:95:41:aa:c3:1b:36:f5:61:b2:
                    98:c6:b7:10:2f:89:6f:0a:10:61:91:08:79:77:0c:
                    a1:1b:c5:25:94:1f:fe:d7:5e:08:24:bf:dd:6e:13:
                    67:2d:8d:73:e3:44:b6:d7:d8:60:bc:fb:2b:76:1d:
                    76:3b:f8:c7:82:66:43:82:80:4a:ce:f2:9a:03:84:
                    22:1f:fc:99:b3:84:04:f9:1b:21:eb:21:7b:ea:4f:
                    08:e2:a1:b7:80:22:4d:ee:f3:6c:53:00:fb:0e:1c:
                    21:cf:61:9c:d9:cc:a9:9c:be:61:37:64:b8:e3:01:
                    0e:6d:ad:fd:04:90:b5:2e:7f:5d:02:d8:f0:9f:2e:
                    9f:94:c5:b5:3e:e4:6f:ea:da:d5:92:64:cd:fd:a1:
                    c7:84:8f:aa:53:cd:bb:b0:96:3c:61:8b:97:a0:74:
                    7b:29:5b:f8:ad:4e:b8:12:db:3f:6f:2f:ed:8c:1d:
                    0f:d1:e6:ea:b1:82:b3:9c:0c:cb:e9:b5:46:a1:52:
                    0e:14:41:0d:50:9b:6d:7b:d3:78:fe:86:0b:e6:04:
                    04:86:2d:79:52:94:43:6c:fb:35:5c:3e:e4:86:27:
                    7a:39:79:8a:63:45:65:32:26:2e:6c:f9:b1:08:5d:
                    b5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:91:26:05:8A:F6:7F:09:72:50:DC:66:29:7A:4A:81:E4:25:5B:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.91.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:cc:09:11:1c:9b:4b:0a:e1:50:d5:1b:d1:9e:64:c7:4f:9f:
         3b:17:21:91:22:3f:d6:88:c8:01:2d:6c:b9:df:f9:1d:0a:fc:
         d5:38:ac:c9:a6:a0:58:86:0a:55:54:9c:ae:bc:06:f7:49:eb:
         f9:c2:95:a0:a4:00:50:27:3c:d8:7f:88:34:22:99:c6:0d:22:
         72:22:2b:bb:78:8e:b0:e4:45:ad:0d:08:e1:83:98:71:b3:50:
         9e:1f:d2:38:64:ac:d3:9d:88:35:f6:49:b3:49:20:b2:a6:e6:
         4d:01:10:30:5b:4d:f2:b0:40:c1:de:4a:cb:4d:19:db:cc:2b:
         b6:9a:7c:5e:92:4e:56:5c:1e:92:1a:3a:85:ba:1f:9d:69:75:
         d9:3d:d9:ff:86:2c:d5:81:06:15:5c:00:60:eb:43:dc:d2:a7:
         e5:ec:79:69:8c:19:19:d1:40:04:10:b0:64:3d:c5:e5:e2:ad:
         14:15:a2:b9:f6:9f:f4:fd:bb:56:6e:c7:b5:5d:51:51:54:a4:
         b4:99:9d:7f:32:1e:93:3e:68:ec:06:bb:1d:8a:d0:e4:f9:3c:
         16:43:26:27:b4:f1:51:68:e6:e2:ee:82:b2:3c:58:e3:32:86:
         16:cf:11:a4:a2:af:1a:4a:80:4e:8b:5a:20:18:4d:e9:89:d3:
         1e:39:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:36:57 2025 by rpki-client