Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/948f441d-cd73-3240-abb0-b200190befc4.roa
File:                     948f441d-cd73-3240-abb0-b200190befc4.roa (raw, json)
Hash identifier:          8SvqRlrIKRFt7EXSlw9wHyLR+P7zoZ/SoB/tcYwLXDI=
Subject key identifier:   3C:24:54:C0:61:BE:93:9D:C2:7B:CA:E3:36:9A:3F:FE:5E:4D:85:FE
Certificate issuer:       /CN=91d07432-fb87-439b-b14e-e063470edfd2
Certificate serial:       010D0C9F4328584BA932680218B2F516AF030B00
Authority key identifier: FF:B0:3A:26:A8:5E:CE:2E:EC:AC:D1:74:45:5C:4C:38:D1:24:A9:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/948f441d-cd73-3240-abb0-b200190befc4.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     16509
IP address blocks:        72.18.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/91d07432-fb87-439b-b14e-e063470edfd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/91d07432-fb87-439b-b14e-e063470edfd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:68:02:18:b2:f5:16:af:03:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91d07432-fb87-439b-b14e-e063470edfd2
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=312d6974-a511-46ec-b18f-3e02a5e40f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:07:c7:4b:91:db:de:31:44:39:ef:57:51:
                    cf:2e:9e:cc:4e:c2:2c:fa:3a:89:2e:bf:e0:8d:b0:
                    9d:94:02:81:cd:a6:d7:ed:b7:4c:42:54:30:13:43:
                    95:a0:0f:87:7f:1c:60:fd:5d:57:bd:74:65:dd:d0:
                    12:6f:e9:11:57:bd:bf:4d:39:8c:ea:d4:1b:65:d0:
                    4d:8a:34:c8:e8:6c:18:5d:d2:11:84:02:95:a7:c7:
                    93:7e:f9:7f:bd:86:88:ab:cf:dd:dc:4f:76:90:c9:
                    9f:49:0d:e1:c4:07:75:30:48:ef:ce:00:72:0b:0d:
                    28:8b:51:c9:2a:21:35:3b:58:c4:1d:2a:3c:6f:74:
                    b6:4f:36:88:d9:2e:d3:a3:78:a6:81:da:57:e3:3b:
                    b5:f4:d8:3d:45:82:02:02:6b:da:9c:dc:1c:6d:94:
                    5e:6f:1f:c8:f3:69:40:3c:c9:ac:af:be:21:8d:29:
                    a3:0e:5b:46:a9:4a:90:39:a4:cf:2d:e1:bc:d8:b8:
                    97:56:50:b4:0d:d8:81:45:1e:b5:e3:2f:e1:44:1a:
                    1e:f1:86:43:c2:8d:39:8e:80:37:2e:61:ff:94:e7:
                    c0:34:31:fb:8f:95:fe:1f:0b:0e:48:c5:40:9c:06:
                    1c:5b:5f:fa:51:23:81:7e:a2:5d:78:64:37:3d:ea:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:24:54:C0:61:BE:93:9D:C2:7B:CA:E3:36:9A:3F:FE:5E:4D:85:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/948f441d-cd73-3240-abb0-b200190befc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2/91d07432-fb87-439b-b14e-e063470edfd2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:B0:3A:26:A8:5E:CE:2E:EC:AC:D1:74:45:5C:4C:38:D1:24:A9:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/91d07432-fb87-439b-b14e-e063470edfd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.18.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:57:66:d0:cf:69:20:1e:f6:a0:b6:e4:3c:61:55:2f:bb:47:
         fe:f8:87:bb:83:8a:d6:d6:2f:ba:fb:77:35:50:ba:8d:61:8b:
         2d:5c:03:d5:55:da:fb:a1:0e:90:87:5e:f4:af:77:66:7f:b8:
         96:4c:12:17:15:c9:ad:69:3e:e4:db:91:5e:27:c6:39:68:d3:
         ea:e2:b8:e2:f6:54:eb:fe:56:d9:0a:07:93:ee:9d:5b:e6:20:
         ef:3f:e6:5d:80:6b:d7:34:b9:c9:69:0b:6d:ad:34:97:63:23:
         4c:81:d0:58:ac:a8:5c:38:63:db:54:5e:b3:e5:d2:56:3a:0a:
         da:cf:8d:cd:76:6d:d8:e4:bf:f3:7c:a7:69:51:3f:4f:91:db:
         e1:29:92:fc:a2:66:5a:62:29:05:20:3a:47:57:7e:da:54:2a:
         51:4f:78:63:23:0c:15:c4:7a:5f:16:6b:a3:64:a9:c9:48:6f:
         3a:0c:d3:f8:39:82:71:40:2b:78:87:36:71:8c:80:07:30:b3:
         21:89:e5:e8:61:f5:1c:e6:98:9e:a4:1d:ad:76:26:b9:97:3c:
         5f:ed:1f:93:61:71:1a:43:32:56:29:e7:cb:28:c2:c0:b2:31:
         94:4b:7b:b7:e5:ec:eb:f3:1b:cd:8b:72:00:75:39:20:42:7c:
         ab:94:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:56 2025 by rpki-client