Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/827e29d9-2339-3389-87b3-9281bfe75ac3.roa
File:                     827e29d9-2339-3389-87b3-9281bfe75ac3.roa (raw, json)
Hash identifier:          bGYjTTNStkmu/ZJWgd/dFbIubih7cN2JVKvDbu/uW9g=
Subject key identifier:   F6:A6:46:EA:F7:BB:22:DE:87:B7:80:AF:31:A7:68:3D:CD:68:71:A4
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584957F406B5DCACE8A431A4C7B0
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/827e29d9-2339-3389-87b3-9281bfe75ac3.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     7992
IP address blocks:        24.204.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:06:b5:dc:ac:e8:a4:31:a4:c7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=e6fea0fa-7160-4862-b7e1-e2c0e75f57e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:31:14:b0:ff:02:43:0c:83:bc:ea:f7:f5:
                    9c:a0:cc:fe:a5:b4:7a:17:1e:24:76:b1:3b:17:2f:
                    53:1f:51:ad:0f:5f:20:e7:a9:3f:56:41:9b:ef:4f:
                    c1:28:d6:9e:bd:99:31:63:e6:00:b6:4e:96:33:d1:
                    1f:3b:60:88:86:c3:bf:f5:61:bd:03:dc:66:60:1d:
                    d1:ca:99:2a:32:05:e9:dd:f2:c3:ae:e2:5e:08:d4:
                    19:d6:42:e4:77:e7:d2:17:2f:6a:2f:b8:8f:ab:76:
                    da:4a:b8:8e:e4:b2:66:24:8c:67:61:d1:0f:21:6e:
                    88:3f:1f:42:e3:39:16:d2:92:81:a5:fd:d6:0c:d3:
                    36:ac:6c:94:bf:ba:f6:9d:8e:d6:28:f3:51:18:bc:
                    60:4a:0b:18:46:0a:a1:41:ec:87:e0:f1:fb:1b:96:
                    ce:4b:50:87:d6:28:90:2d:84:7d:0c:b7:a9:09:d6:
                    3a:5f:06:88:b8:1c:23:dc:0c:9d:1b:fb:90:ff:e1:
                    76:04:b6:7b:b5:b7:3a:5b:e5:5e:9b:10:49:09:70:
                    c6:0b:6c:e9:c2:94:5f:36:8c:22:9f:6b:54:c3:65:
                    0e:18:9f:a5:c7:f8:13:46:cf:43:b9:9e:ef:c3:7e:
                    1e:31:06:c1:bf:bd:5f:4e:60:a2:47:03:d9:ab:68:
                    ba:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A6:46:EA:F7:BB:22:DE:87:B7:80:AF:31:A7:68:3D:CD:68:71:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/827e29d9-2339-3389-87b3-9281bfe75ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.204.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:46:b9:de:a9:ba:f5:a9:76:39:25:f3:3d:45:2b:1f:7c:d9:
         91:75:54:37:fa:dd:66:15:ac:8c:a9:d4:05:3e:f3:0f:c4:ea:
         9b:74:f4:87:91:b1:7c:d5:a8:f9:0f:64:e6:59:91:94:72:6d:
         9f:8d:08:d5:54:4d:8d:80:63:ee:4b:68:18:e0:89:d2:97:e6:
         a9:1f:87:e6:9d:6d:80:05:93:16:61:6e:2d:2f:37:56:2c:b4:
         ae:4f:07:67:b4:94:05:2f:ef:e1:24:e2:db:f3:e6:f4:03:aa:
         48:48:04:fe:88:00:6b:d2:cf:14:b9:b2:14:6d:7c:20:37:52:
         9a:58:49:a8:5d:83:c8:e9:7e:0d:e9:10:1f:11:0b:04:35:b9:
         ba:44:2f:71:0c:03:fb:a1:2e:fc:24:f3:27:41:51:e9:dd:55:
         9c:ac:9d:bc:68:89:73:59:07:41:07:e5:3e:cc:00:49:43:36:
         10:c4:ca:df:14:d0:50:a8:c2:24:66:26:64:26:ed:c0:72:55:
         7b:03:f3:72:6c:47:d3:06:95:bf:fe:2a:41:4c:47:56:3f:8c:
         87:e0:87:00:6c:26:ce:73:01:3b:22:ae:43:0b:24:49:fc:ca:
         75:bb:a4:ec:55:91:3d:f6:e8:2d:38:bb:a1:57:74:4c:19:07:
         31:4f:f3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:51:58 2025 by rpki-client