Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/ed0ce194-1f69-3206-acca-aedff16314af.roa
File:                     ed0ce194-1f69-3206-acca-aedff16314af.roa (raw, json)
Hash identifier:          jh4S23iRDDzuZdoh8mG+/oHeNct3lqtHgg90amkTbBw=
Subject key identifier:   5B:10:F6:B0:81:D1:BC:4E:BF:F2:D9:E1:2C:F8:E1:F1:C0:F4:3D:E3
Certificate issuer:       /CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
Certificate serial:       010D0C9F4328584949FE85D31DFA83233ED37400
Authority key identifier: 95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/ed0ce194-1f69-3206-acca-aedff16314af.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        168.100.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:85:d3:1d:fa:83:23:3e:d3:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=ee07cd79-ae4c-4904-8de2-542c24cb7b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:4c:d6:05:20:c7:92:b1:ee:1e:66:ee:d1:
                    47:19:04:ab:12:80:a9:77:b6:4c:17:e2:5c:6c:43:
                    16:bc:32:c9:28:03:e2:de:76:0e:e0:34:79:11:42:
                    6a:08:54:d3:ad:dd:2d:21:61:13:8c:0b:8d:5d:be:
                    96:c3:b7:1f:71:d6:cd:2c:9c:6f:4f:f4:d5:1a:fa:
                    a0:36:9f:98:97:74:73:f7:53:6e:43:dc:00:38:43:
                    c2:36:7a:c0:96:c5:21:49:f6:03:b5:a6:06:ae:de:
                    85:14:42:cc:9f:2a:b4:7b:b9:70:12:ff:4f:62:e7:
                    d8:82:62:19:44:b0:6b:51:75:a6:32:ef:b9:17:47:
                    51:9e:56:4b:ab:30:e4:77:b4:20:fb:0c:eb:32:34:
                    2e:1f:74:a4:92:7f:79:2d:a8:96:22:2a:9f:18:c0:
                    d3:8c:43:ba:6e:48:e8:ef:d8:8b:40:10:41:a6:f8:
                    b2:ad:05:d6:93:c5:22:2e:2f:91:f5:c5:d5:44:3c:
                    28:71:e2:c2:10:e7:b9:b1:ba:9d:c2:e1:59:7a:18:
                    b8:6d:3a:8f:65:a0:a6:9e:c4:21:de:22:19:d7:2a:
                    2b:c7:90:80:f8:9e:38:bc:3e:ec:c4:0b:36:96:88:
                    ed:59:74:8f:63:5b:a0:63:0c:57:e9:89:95:52:80:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:10:F6:B0:81:D1:BC:4E:BF:F2:D9:E1:2C:F8:E1:F1:C0:F4:3D:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/ed0ce194-1f69-3206-acca-aedff16314af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl

            X509v3 Authority Key Identifier:
                keyid:95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f0:75:a3:89:23:86:18:9d:65:81:f8:fb:9a:1d:6c:8f:c6:
         ba:4e:98:58:0e:c6:6f:fd:28:19:20:c1:ec:3a:66:9f:fb:f7:
         82:fb:a2:7b:2e:32:a0:6c:58:15:45:c9:9f:01:ff:f3:96:9a:
         54:28:01:92:21:13:ac:3d:d2:5e:ba:41:c1:51:0e:ac:5e:47:
         03:00:49:56:cb:69:f8:0d:02:c0:f4:1b:d8:dd:41:4a:80:5e:
         4e:41:b6:fc:53:db:cc:64:f8:dc:70:f5:65:6c:4d:63:8a:2a:
         d9:e1:46:6f:4c:f0:87:80:2c:69:81:59:12:c4:e5:7d:98:54:
         a6:15:31:21:bc:27:42:55:46:d0:f1:ff:ac:b5:d0:17:c2:fd:
         40:ab:6e:09:7f:b0:12:2c:31:ba:3c:21:07:65:f8:95:52:04:
         d6:25:d2:0a:53:e4:c1:b9:da:81:8c:75:b8:79:ea:68:eb:a4:
         09:60:ce:af:1e:a3:2f:5a:d4:2e:9a:64:dd:23:b5:c0:4e:2b:
         a4:e9:38:12:7d:73:6f:0e:dc:90:78:4e:51:b3:41:b2:87:b3:
         c9:f5:ea:60:12:a3:d1:93:89:a3:06:82:93:e7:ec:9b:29:3b:
         51:cc:57:0b:b9:1c:3a:83:2a:95:63:e6:bf:00:4d:b1:72:d1:
         b2:c4:67:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:42 2025 by rpki-client