Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/51f2f19f-4253-3216-9f67-f810a90a6463.roa
File:                     51f2f19f-4253-3216-9f67-f810a90a6463.roa (raw, json)
Hash identifier:          cEJ71Epr/8R/mD7q/HYGdRV3hlhJcfXMvKFmsutvQQM=
Subject key identifier:   A4:AB:2F:1E:7E:64:F9:73:F5:F8:21:18:F9:6F:AE:8F:DE:9F:70:D3
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285848A1689B5BE62DF4C0DFB36800
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/51f2f19f-4253-3216-9f67-f810a90a6463.roa
Signing time:             Wed 22 Jan 2025 15:42:48 +0000
ROA not before:           Wed 22 Jan 2025 15:42:48 +0000
ROA not after:            Tue 22 Apr 2025 14:42:48 +0000
asID:                     395075
IP address blocks:        207.253.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:68:9b:5b:e6:2d:f4:c0:df:b3:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jan 22 15:42:48 2025 GMT
            Not After : Apr 22 14:42:48 2025 GMT
        Subject: CN=b9d5d9fc-94eb-4ecf-b936-98e740b30ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4a:42:df:e7:aa:f2:70:7c:66:d8:95:5f:9c:
                    0a:6f:74:7a:72:3a:e3:18:26:14:fb:b2:4f:e8:50:
                    50:06:95:86:0c:bd:ec:e0:30:8c:06:f3:f5:dc:3c:
                    a9:51:88:c8:4d:94:92:e7:a7:30:51:8e:8f:6a:d2:
                    55:d5:57:b9:db:b9:06:c1:79:1b:a3:e7:23:81:2e:
                    0f:d6:01:76:b4:a5:35:99:34:64:87:87:cb:b8:c1:
                    df:63:ba:df:2e:63:03:74:25:21:cd:6a:9d:03:54:
                    c5:fa:68:51:65:e3:dc:17:56:27:71:16:85:50:4d:
                    b1:7b:c0:54:4e:4e:72:d6:6b:bf:f6:7a:e8:de:55:
                    a3:37:66:01:29:c4:81:2a:56:dc:7f:07:86:24:a1:
                    bc:5c:60:06:04:fc:dd:05:bc:60:42:6d:c0:65:9d:
                    9a:77:6c:20:20:46:fc:51:de:5a:05:93:3a:ae:53:
                    fa:0e:b3:3d:2b:8a:05:12:a1:3f:d8:16:c2:ce:a5:
                    3d:20:50:8a:99:5c:fa:81:f4:23:0b:56:d6:4e:f6:
                    c8:6f:07:6d:48:5a:4d:c8:d2:e3:ad:e9:9a:e3:98:
                    4a:2c:46:f3:86:25:fa:73:c0:45:a1:84:e4:e9:fb:
                    e3:5f:fd:2d:37:ed:9d:46:fe:34:8e:9e:be:0e:9d:
                    39:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AB:2F:1E:7E:64:F9:73:F5:F8:21:18:F9:6F:AE:8F:DE:9F:70:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/51f2f19f-4253-3216-9f67-f810a90a6463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:79:5f:c1:97:86:d0:d0:f1:a5:e5:40:59:50:d7:1a:a0:a7:
         b6:ef:f6:26:35:c0:28:47:cd:82:96:b3:b8:88:6e:79:b8:2c:
         2d:e6:1f:c6:19:5b:0e:80:f3:fd:a1:d4:85:80:e8:fb:6b:e6:
         7c:35:cd:36:db:b0:f9:d8:f8:3b:d8:20:3b:14:f7:d5:f5:c8:
         c4:4e:aa:77:86:f3:21:7d:d3:b6:58:6d:fa:ef:f7:ae:c6:24:
         1d:29:9d:66:8f:be:e5:df:cc:24:d5:4c:89:e5:25:3c:b9:e9:
         4c:8a:e2:f6:c0:e6:86:da:ec:8d:bf:46:e0:2b:d4:03:01:3d:
         b8:eb:4b:39:34:21:3f:ea:85:38:8b:47:76:79:c4:18:da:31:
         00:5d:4f:3d:8d:0b:c8:4f:46:eb:24:62:b7:7f:7b:ab:0e:a1:
         08:f0:d8:92:1b:6e:95:64:55:a0:7d:85:e4:09:a4:cf:88:7b:
         9e:42:b1:08:53:b7:de:34:97:08:16:94:b7:dc:26:b7:91:7b:
         9f:29:4b:b4:4e:53:1a:ee:6e:88:d7:b2:85:00:db:cb:b9:41:
         f4:7d:f5:d3:d0:90:b4:be:05:57:17:a8:17:bf:59:69:53:dc:
         3d:4e:a3:4e:71:3e:b6:9c:c0:c6:86:3c:3f:d2:a4:4e:67:65:
         4a:b6:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:39 2025 by rpki-client