Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4/8d7330a4-9f86-363a-8af9-b0a4a087c358.roa
File:                     8d7330a4-9f86-363a-8af9-b0a4a087c358.roa (raw, json)
Hash identifier:          wk6m3ycrLVYdBeyGD9V5TBOeV+L9rvAACzLJM58Tjnc=
Subject key identifier:   2F:A7:21:4B:99:C3:A9:96:CA:84:63:51:D4:BB:4E:EE:ED:D3:3E:8F
Certificate issuer:       /CN=bfbc72b9-37fe-4bab-9a0e-58161c6541c4
Certificate serial:       010D0C9F43285848A400C35D94C78748479A6880
Authority key identifier: 93:4F:9C:EB:E8:4F:E0:9F:E5:6E:87:8E:CF:23:03:47:43:DA:72:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4/8d7330a4-9f86-363a-8af9-b0a4a087c358.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     395717
IP address blocks:        27.131.252.0/24 maxlen: 24
                          27.131.253.0/24 maxlen: 24
                          27.131.254.0/24 maxlen: 24
                          27.131.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4/bfbc72b9-37fe-4bab-9a0e-58161c6541c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4/bfbc72b9-37fe-4bab-9a0e-58161c6541c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:c3:5d:94:c7:87:48:47:9a:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbc72b9-37fe-4bab-9a0e-58161c6541c4
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=79e89f7b-7bbd-4fa9-a648-56d4cce2ae53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:00:9d:bb:d4:47:4c:c7:d8:d9:c5:bb:a5:
                    81:e3:91:f6:7e:71:91:32:9f:7f:70:94:ae:3d:86:
                    60:a6:a3:fe:9f:15:9a:a8:36:f7:93:9e:51:8f:96:
                    74:99:30:c7:fa:0d:bc:97:5a:2f:6e:85:02:73:f7:
                    06:ef:ea:e5:56:ef:a1:0e:eb:e9:3c:65:47:dd:11:
                    23:2b:05:65:89:aa:50:a2:43:a5:9f:e4:6b:02:eb:
                    3a:4a:81:d6:f5:d3:9d:ff:ad:6c:3c:fd:25:05:85:
                    75:b8:39:6e:76:4b:40:14:38:5f:e0:bd:e4:39:69:
                    15:92:1d:45:e1:68:1e:2e:fb:42:1d:38:c5:04:0e:
                    00:14:0c:db:cb:0c:13:dc:43:42:88:a9:90:51:7b:
                    e4:06:bd:18:28:81:53:71:6a:bf:4b:cb:b3:f3:8c:
                    39:24:45:3c:b8:c7:f0:6e:a0:cf:f0:79:3f:76:48:
                    33:41:41:2d:10:04:a3:90:14:1e:50:97:41:b8:1b:
                    c5:4e:9a:e6:c3:c1:a7:2d:04:98:fb:c0:90:ce:31:
                    93:ad:e6:e8:37:80:49:0a:42:9c:b0:44:6d:4c:50:
                    2b:63:24:39:8e:ca:b5:14:1d:b8:87:62:e0:ad:d8:
                    d3:21:ee:30:f6:4b:a5:00:6a:3f:a5:c1:8c:87:7f:
                    59:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A7:21:4B:99:C3:A9:96:CA:84:63:51:D4:BB:4E:EE:ED:D3:3E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4/8d7330a4-9f86-363a-8af9-b0a4a087c358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4/bfbc72b9-37fe-4bab-9a0e-58161c6541c4.crl

            X509v3 Authority Key Identifier:
                keyid:93:4F:9C:EB:E8:4F:E0:9F:E5:6E:87:8E:CF:23:03:47:43:DA:72:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfbc72b9-37fe-4bab-9a0e-58161c6541c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:11:e7:11:16:e0:92:96:00:34:8e:ef:71:15:81:05:0d:74:
         65:22:dc:fa:3d:e4:1b:13:63:55:25:02:2a:99:db:d7:4e:68:
         63:8d:7b:ea:33:8f:6d:29:63:70:8a:8b:f0:a2:f8:4c:15:94:
         97:6a:e8:1f:cd:f4:5b:b3:12:dc:12:4a:f1:0d:fc:26:ab:83:
         7c:6c:79:40:d1:39:f6:e9:71:cc:f8:0d:46:40:ab:b3:27:08:
         5f:d9:e1:e4:99:d0:2a:72:9f:91:0c:7a:47:3b:08:3d:c0:9b:
         6f:c4:d8:fb:80:14:e6:8c:be:fb:8c:3a:9f:a9:7e:97:ea:f6:
         6d:86:92:b7:b8:31:fb:30:28:04:a1:90:06:65:5c:4b:cd:46:
         96:db:b3:3c:24:8a:5f:54:e6:1f:a0:10:e1:f8:cc:e0:2e:c8:
         e2:39:b8:90:c6:8c:ad:ad:0c:3d:7f:78:16:88:b2:66:d8:d4:
         ff:c8:e5:8e:80:c5:a6:3b:06:84:6f:5a:07:28:c6:e3:17:0f:
         a4:00:d9:ba:0f:1c:2b:05:42:3a:f2:f5:26:f9:da:fa:c8:ab:
         60:2a:6b:5d:09:04:1e:72:e1:94:26:92:c4:95:67:56:60:92:
         6e:30:bb:56:b0:08:09:ed:ab:dc:bb:b3:e6:c2:d8:b4:3e:16:
         fd:1e:8c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:15:53 2025 by rpki-client