Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/75430f52-6fcd-3622-a84d-ce23921e5d81.roa
File:                     75430f52-6fcd-3622-a84d-ce23921e5d81.roa (raw, json)
Hash identifier:          UyHEFN2MKuIMzEz34v+jOHwLEb/pf7eBDiLCIMcfrBc=
Subject key identifier:   DA:71:AF:0E:5F:79:9B:FB:E8:DC:48:EF:D5:50:3D:59:34:08:0C:E5
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584AF5216FBAF7F107F5E68E2200
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/75430f52-6fcd-3622-a84d-ce23921e5d81.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     3949
IP address blocks:        204.27.71.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:6f:ba:f7:f1:07:f5:e6:8e:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=134138a3-da78-490e-a636-1c1af152b42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:ec:c4:a7:a0:1c:a9:b9:22:e9:bf:f7:f9:
                    3e:dc:3b:fc:5b:59:69:c7:e4:47:99:40:fc:9a:40:
                    c3:f4:da:ac:c3:a9:60:ed:9d:d6:c4:e8:c0:5b:a5:
                    dc:8b:41:4b:37:9a:60:dc:0a:96:1a:5e:1f:a4:d3:
                    55:3f:74:58:76:6d:46:66:de:48:e6:e6:f5:ae:77:
                    62:8f:7d:49:0d:98:62:96:6d:3f:4d:e2:71:44:eb:
                    92:a3:9d:a7:b7:de:a3:09:22:f5:ab:fb:49:30:f0:
                    ea:66:7f:b7:32:c6:d6:37:99:63:7f:9f:38:61:20:
                    60:f3:19:e3:61:07:4b:a6:c5:d7:b5:e3:a3:94:36:
                    9f:fd:40:2c:12:e4:ba:fb:35:e6:80:db:06:06:65:
                    2c:8e:c7:d3:37:3b:b0:2a:73:43:95:36:70:9e:ae:
                    75:85:6a:b0:c7:81:02:df:26:82:9d:66:66:f9:ae:
                    7f:29:f7:0c:8c:27:21:2e:5e:24:12:6d:a6:56:66:
                    7a:a9:61:35:b7:99:36:b2:d6:d2:28:f1:80:3b:1b:
                    2d:8a:2c:4c:e7:9a:0a:9d:83:f9:1e:82:62:89:ab:
                    5f:99:18:a2:5f:1e:31:1d:03:27:04:87:08:aa:e6:
                    b9:4e:46:da:93:01:bc:9f:c5:2d:b8:79:d4:4b:a9:
                    9a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:71:AF:0E:5F:79:9B:FB:E8:DC:48:EF:D5:50:3D:59:34:08:0C:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/75430f52-6fcd-3622-a84d-ce23921e5d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.27.71.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:61:6f:84:0c:7d:9a:5c:b0:9e:b6:ab:66:1a:84:99:0d:3b:
         3e:5d:8a:84:e6:9d:fb:69:20:a4:cf:60:00:ff:fc:69:db:18:
         8a:73:75:e4:dc:24:da:f7:33:7d:37:d8:e8:0b:94:f8:ac:59:
         7d:9f:62:9f:83:09:dc:61:5a:c0:09:ab:ff:25:19:47:52:50:
         f1:17:ed:73:b7:84:9d:c1:e2:c5:29:0a:cd:2a:30:92:e3:06:
         18:d5:16:04:3d:b5:32:13:ec:f1:ad:af:88:ce:82:d5:e2:3d:
         f2:a1:f0:1b:41:81:69:4e:08:e6:be:c8:68:a9:d7:35:2f:7c:
         7f:81:1c:7c:fe:ce:4d:e8:04:f4:9e:d2:06:13:cc:e1:e0:f4:
         7e:36:8e:55:93:73:21:89:6f:89:3a:a8:9a:cd:2c:7b:bc:0c:
         ac:5a:de:fb:3e:fe:6d:eb:83:3d:2d:2c:eb:70:0a:3b:cf:9d:
         5a:83:93:c9:fe:c7:85:b4:62:6d:e4:fc:64:35:62:86:da:eb:
         10:a7:c9:f2:55:55:23:93:17:44:5d:ec:cd:3e:8d:be:f7:1b:
         22:4d:79:13:0b:29:25:66:39:50:02:e8:ad:ff:2f:c7:e6:2a:
         fb:65:fb:be:10:62:0e:48:bf:28:bd:00:a3:a1:3a:ca:60:70:
         7a:40:f6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 10:48:33 2025 by rpki-client