Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa
File:                     7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa (raw, json)
Hash identifier:          dWo/IqXuDr816WApY1dhEHpjEaACEV3ytaTUzkif8KQ=
Subject key identifier:   8A:7C:15:E1:0F:6D:FE:DB:54:6D:14:9B:E0:6F:48:DA:2A:89:25:52
Certificate issuer:       /CN=324346b5-3875-43b0-bb0d-8052274567d4
Certificate serial:       010D0C9F4328584D492A74D8DFB05194D4A15740
Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     55
IP address blocks:        128.91.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:74:d8:df:b0:51:94:d4:a1:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=f7544af5-ce71-4bf4-990a-b5af059bd977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:73:0e:9d:26:4e:83:26:92:21:d4:b8:fb:
                    58:4a:79:d3:c3:b9:c6:d2:74:e0:33:b2:fb:20:26:
                    5f:bf:04:22:7e:41:5f:89:17:65:0e:c3:56:07:8b:
                    39:cd:cb:9c:0f:15:bf:4d:59:03:95:7d:05:dc:ee:
                    24:d2:fd:46:a0:3d:9e:98:97:cb:2e:ab:69:04:9d:
                    43:07:21:db:b9:3c:6b:ea:17:75:c8:fc:3b:48:5d:
                    86:fb:0d:31:a2:cb:99:15:9d:0f:d2:54:a7:e1:09:
                    55:cc:df:0b:92:a3:23:09:bd:2c:e7:29:fc:8c:77:
                    10:67:f6:bc:88:aa:c6:c7:bc:ba:5d:10:a8:04:8e:
                    2e:e5:05:e5:3c:31:8c:aa:d6:39:9d:61:26:bb:ea:
                    f7:3d:78:d5:25:e0:9e:7f:c1:94:92:a6:78:11:71:
                    1e:22:b8:02:7e:bb:f5:6d:07:db:ec:49:c4:0f:db:
                    9b:50:21:14:50:e8:4c:df:76:eb:82:f0:4c:96:84:
                    80:18:1d:e8:f5:a1:20:a4:ef:57:c6:a3:aa:93:e4:
                    2b:07:cb:67:31:48:69:24:4e:8a:49:65:25:15:bd:
                    9c:57:64:9f:6f:7e:be:6a:34:39:c5:b2:eb:a4:9d:
                    7c:05:d0:15:13:d7:4f:d9:86:11:4c:90:a6:b8:9f:
                    30:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7C:15:E1:0F:6D:FE:DB:54:6D:14:9B:E0:6F:48:DA:2A:89:25:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/7f5aba6a-bc36-3f62-a62f-2b140adc5a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.91.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:5e:fd:5c:9f:f9:fa:92:14:97:d6:b9:93:3a:c2:1d:33:cb:
         f3:ca:32:23:24:39:57:b4:ef:9f:a2:ba:4d:08:dd:60:0b:c2:
         e4:9a:d6:cb:d7:a2:ad:7c:a3:f2:a9:7e:9a:67:7c:c9:dc:0b:
         5b:7a:ca:39:82:9c:ac:34:97:7b:77:aa:34:35:db:f2:bc:05:
         1b:e1:2d:c7:b6:cf:89:6a:f0:95:4f:0c:5a:d7:9e:c3:d2:c0:
         ad:39:b1:ac:60:8f:37:66:c6:f2:39:47:cd:32:62:0d:5f:45:
         3c:b1:07:67:3e:38:ad:84:9a:df:4f:38:b9:43:78:e3:35:b8:
         13:63:67:51:61:74:61:4e:97:dd:e0:10:b4:82:5f:a2:1a:3c:
         b9:5c:7b:cf:a1:58:e4:f1:3d:1b:3c:4a:86:e6:33:e8:65:9f:
         94:cc:4e:2e:a8:46:a1:a4:2a:37:53:df:97:ad:57:10:fe:d3:
         db:20:36:45:79:24:16:3c:35:8a:91:09:e0:b0:89:45:47:a8:
         21:8d:53:ab:0e:e8:08:2f:e3:84:f1:22:5d:d6:b3:b5:55:e8:
         8d:9e:36:96:6e:64:95:72:ec:38:eb:0f:0c:82:2c:7f:4d:99:
         fc:b3:d2:ae:ec:10:cc:72:d4:96:bf:a7:09:56:db:48:03:62:
         01:8e:f1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:13:32 2026 by rpki-client