Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/27bf222e-cf6d-3f23-ad44-49ab29cccd41.roa
File:                     27bf222e-cf6d-3f23-ad44-49ab29cccd41.roa (raw, json)
Hash identifier:          +/rdutUJtzyyL8Tw+nIzoy0fns2XClS3quGyYIC+Cko=
Subject key identifier:   0F:6E:04:CB:DD:61:27:85:93:64:E5:CB:59:F4:57:5F:EA:7A:4E:5B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921346D49AD691A0A746AB300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/27bf222e-cf6d-3f23-ad44-49ab29cccd41.roa
Signing time:             Sun 09 Mar 2025 10:21:08 +0000
ROA not before:           Sun 09 Mar 2025 10:21:08 +0000
ROA not after:            Sat 07 Jun 2025 10:21:08 +0000
asID:                     19152
IP address blocks:        216.208.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:6d:49:ad:69:1a:0a:74:6a:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:08 2025 GMT
            Not After : Jun  7 10:21:08 2025 GMT
        Subject: CN=8843319a-c919-4976-bdc1-fda4cd441948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:bb:ef:cd:46:27:cd:5e:69:ea:99:b0:59:
                    85:d7:41:45:30:cc:58:12:b5:da:b3:53:d0:11:34:
                    79:fe:f5:98:0f:06:0e:32:16:a1:67:13:0d:97:61:
                    56:07:e6:a7:84:cc:2c:17:a9:1b:9d:b3:b7:eb:fd:
                    c1:b7:75:99:16:49:9b:9f:56:d9:5b:46:4f:ed:d3:
                    e2:f1:d0:bc:78:f6:4e:6f:00:c9:ff:39:74:2d:93:
                    fa:09:89:3a:ad:ad:68:83:b8:19:f0:d7:9a:65:4b:
                    bc:f0:17:c3:3a:27:32:cd:1c:e1:de:03:0b:7f:d7:
                    4d:05:72:5d:fd:90:70:19:d5:eb:44:83:54:12:50:
                    bc:72:f9:e6:ed:89:91:4b:6e:b0:16:82:90:9a:a9:
                    4e:61:7a:0c:2a:24:e2:09:42:12:ed:79:2a:6e:08:
                    f4:64:fc:39:4b:c7:24:d3:d1:a8:b0:dd:76:32:70:
                    bd:36:e5:83:4b:8d:c4:ab:92:c7:c2:e7:09:e1:d1:
                    8b:da:e3:b3:8e:6f:66:d5:a8:22:c2:d3:0e:c3:2f:
                    70:af:0f:7a:e3:d8:92:b7:d7:b4:d7:8f:e9:b9:50:
                    7d:59:67:4f:fa:f4:75:43:ab:ef:b9:4d:2f:80:1f:
                    37:c9:39:e9:5e:fd:57:37:2a:47:5f:97:08:8c:c1:
                    35:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6E:04:CB:DD:61:27:85:93:64:E5:CB:59:F4:57:5F:EA:7A:4E:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/27bf222e-cf6d-3f23-ad44-49ab29cccd41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:14:34:8c:e3:21:73:31:bd:e7:8d:e2:49:52:88:9e:e8:e4:
         80:b0:0b:f8:88:09:c3:ed:5d:59:18:07:2c:35:a6:5e:f2:f1:
         8c:84:de:86:89:e0:d9:ce:03:05:3f:7c:c2:ea:2d:8f:31:18:
         03:0f:05:d9:42:1c:c4:59:7f:87:fe:77:38:03:8b:1d:42:88:
         82:0a:40:8c:8c:5e:7f:c0:ae:ec:40:7e:c8:74:88:14:a7:ad:
         b7:72:98:ad:3d:01:78:e4:8a:5b:a9:e7:15:c9:71:16:43:d7:
         39:c4:3d:dc:22:30:3c:4f:75:7d:42:f5:09:25:e1:45:84:b3:
         07:9a:41:9d:54:f0:e8:1d:18:91:27:72:09:cd:50:d8:a8:93:
         32:00:60:fa:d0:7d:59:16:82:71:db:9a:27:38:f7:79:09:25:
         eb:5e:8f:df:cc:c8:6e:8d:62:ea:8d:0b:dc:1e:cc:7f:d0:69:
         a1:91:f8:72:1e:e1:8b:76:28:6e:68:a1:fb:64:94:bb:34:6f:
         10:dc:96:86:90:45:e3:69:b5:87:ff:7c:f2:7b:28:68:55:c8:
         bc:c7:f5:a5:a0:96:3b:04:b2:aa:9e:15:d1:2e:b2:84:74:d4:
         aa:00:c3:50:fd:15:ac:fc:33:fd:67:ea:c7:20:80:dc:48:f4:
         d6:6b:63:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:21 2025 by rpki-client