Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27b043e7-9987-3970-8580-cbf49babb572.roa
File:                     27b043e7-9987-3970-8580-cbf49babb572.roa (raw, json)
Hash identifier:          2HBgYarh//YVsK+nCPFHayc9obW09pqvLOq29QhgJLc=
Subject key identifier:   16:4F:2D:E4:C0:E0:2E:00:EE:42:8C:84:3B:98:0F:D8:05:D2:6D:6D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DD7765EB7864061AFF500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27b043e7-9987-3970-8580-cbf49babb572.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        2001:558:5024::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:d7:76:5e:b7:86:40:61:af:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=34cd54c6-f10b-4482-8b51-bf1aecec7d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:39:7f:1c:ef:17:49:7b:b7:d9:55:49:fc:
                    90:9a:69:5f:b4:93:28:e0:85:c5:b5:a9:11:2b:f5:
                    9b:5a:06:b2:2f:be:a4:d6:1d:f1:76:67:4b:46:af:
                    76:d0:eb:05:19:91:3e:ec:55:4e:61:f6:89:5c:16:
                    a6:15:8d:b9:d8:52:20:36:d6:f9:d5:91:f8:e1:7b:
                    bc:ef:ff:93:51:19:99:65:94:76:74:49:51:8a:85:
                    ba:d7:ee:9b:44:28:d7:fc:d5:fd:7f:69:bc:b6:3b:
                    6f:a3:b6:e7:ed:e6:1b:b0:d9:2e:73:16:38:13:de:
                    79:79:13:03:e5:53:74:8d:66:69:8d:1b:b1:73:6e:
                    52:bc:ae:fd:b4:bd:e7:99:dc:c4:6a:b8:ec:a5:97:
                    31:b4:82:36:fd:0e:a5:e5:7b:48:cc:d5:fb:64:63:
                    13:3b:2d:de:7e:44:96:f6:ee:83:db:3e:ae:c0:53:
                    f7:da:bd:db:f7:e2:26:42:6f:ef:1e:7f:7f:6c:09:
                    b1:df:0d:d2:77:a2:98:b5:87:4a:a6:a8:30:16:fc:
                    20:7e:af:66:9f:fa:82:33:73:e7:20:68:9c:ab:0a:
                    7a:72:6c:a8:54:de:0c:33:0a:77:95:5e:4c:f5:73:
                    de:1c:a6:90:fb:00:fc:f1:92:dd:07:ec:6d:e4:38:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4F:2D:E4:C0:E0:2E:00:EE:42:8C:84:3B:98:0F:D8:05:D2:6D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27b043e7-9987-3970-8580-cbf49babb572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:558:5024::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e0:bb:29:dc:62:78:d0:6d:49:bb:c1:6d:71:52:dc:01:b0:
         3e:3b:e5:ec:99:bf:db:62:bf:a0:7d:11:f6:b8:53:bf:ef:0a:
         82:c1:88:1a:bf:65:32:fc:97:c7:30:9e:05:66:aa:b9:d9:79:
         36:98:84:30:17:26:90:93:4a:a4:08:d4:90:25:50:41:d6:fc:
         a4:d6:19:46:5c:18:9e:6f:31:6c:90:a2:6e:6c:36:00:3c:39:
         cb:6a:90:65:26:67:fb:e5:0c:57:17:e8:94:70:97:67:92:e5:
         90:75:27:33:f7:7b:3b:f0:e4:a3:07:2a:45:c5:34:7c:da:dd:
         5f:65:bc:de:87:be:ff:f6:17:c0:9f:fd:62:52:03:23:01:b7:
         e1:dd:4d:fc:a7:f3:91:96:30:a7:28:14:7a:b3:6d:25:d9:cb:
         47:69:aa:eb:83:66:bf:f1:8f:36:5b:18:07:86:96:29:a2:0d:
         ed:5c:06:c2:fd:54:c8:ab:8b:b6:d9:10:ba:a5:b3:2b:59:c1:
         1b:7b:8e:87:ca:b7:0a:f2:c7:ba:0d:88:be:64:c4:ee:c5:8a:
         87:0f:63:45:e3:63:17:cf:d5:9b:5b:c9:6e:7f:9c:7f:62:8a:
         79:7e:e8:92:3b:69:c6:20:cd:69:fe:dc:08:ca:65:3d:fa:a8:
         a1:6d:47:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:46:59 2025 by rpki-client