Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/27b3156d-f54a-3b5e-a9b5-f39133bfe1b1.roa
File:                     27b3156d-f54a-3b5e-a9b5-f39133bfe1b1.roa (raw, json)
Hash identifier:          eLFsdhwGTD84hvsjA/xocsxbbrRCOryfBgbO/mSKOIk=
Subject key identifier:   B9:4A:AC:3F:11:60:D8:84:02:0E:B8:50:64:59:09:75:DB:05:CD:1A
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285848A049122CF2A4CEBB990F7EC0
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/27b3156d-f54a-3b5e-a9b5-f39133bfe1b1.roa
Signing time:             Wed 22 Jan 2025 06:03:27 +0000
ROA not before:           Wed 22 Jan 2025 06:03:27 +0000
ROA not after:            Tue 22 Apr 2025 05:03:27 +0000
asID:                     19165
IP address blocks:        204.14.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a0:49:12:2c:f2:a4:ce:bb:99:0f:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jan 22 06:03:27 2025 GMT
            Not After : Apr 22 05:03:27 2025 GMT
        Subject: CN=951cbb9c-7b8b-434c-9794-10720a65c327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ed:e8:29:f0:1f:db:b1:cb:59:07:25:ee:bb:
                    31:f1:58:06:03:b2:68:7c:02:27:37:25:91:a0:03:
                    fe:a0:a7:3b:b0:ab:49:d6:42:5f:bd:36:0d:1e:87:
                    7a:49:8c:dd:d3:4b:47:35:43:4e:51:42:4c:96:31:
                    15:14:9c:71:e5:28:d8:11:a6:3c:b2:ea:1e:22:c2:
                    71:19:bb:b5:23:66:ec:98:58:29:4b:b2:33:bc:01:
                    34:a8:06:d2:05:5f:0e:bb:5c:8b:b3:ec:59:cd:b5:
                    86:3e:b5:07:7f:28:88:9d:e4:d1:1f:8e:3f:4a:7e:
                    0b:83:f9:43:8b:1b:e6:3b:c7:a0:88:e0:62:2d:16:
                    e0:f9:81:b1:4d:1e:11:e9:52:42:aa:d0:1d:c4:55:
                    57:60:a6:f5:91:f2:d2:d2:26:a7:76:f5:56:cc:cd:
                    de:09:24:ed:a5:1e:a0:c2:9e:55:c9:b8:6c:8c:91:
                    ac:02:be:1f:72:c1:31:b7:5d:63:f9:c6:36:22:b7:
                    8c:7a:03:fa:8d:47:ea:51:89:09:d8:6c:38:77:f5:
                    e4:01:b0:30:e0:28:6a:9f:17:39:ce:5a:1d:de:6a:
                    b9:de:27:1f:45:41:70:e8:cd:9a:cb:66:6d:85:6c:
                    a1:94:4f:75:37:90:1e:52:0d:49:66:c4:2b:f2:c7:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4A:AC:3F:11:60:D8:84:02:0E:B8:50:64:59:09:75:DB:05:CD:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/27b3156d-f54a-3b5e-a9b5-f39133bfe1b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:00:4d:6f:5e:d8:74:33:71:0f:c8:ac:bb:ff:9d:95:76:23:
         00:9a:24:48:25:af:e1:34:5f:ab:19:52:96:7c:ff:26:6f:a2:
         1e:1b:1f:5f:35:b7:5b:cd:16:c8:b9:81:9e:cf:5c:ea:0b:81:
         cf:c7:db:66:be:44:19:4b:f2:8c:95:57:cb:b3:9a:e3:45:75:
         28:b4:c8:53:75:bc:5e:3c:26:a2:09:92:e1:3e:59:96:3f:74:
         86:7c:3a:76:2f:ea:02:5b:0b:ff:55:e6:7e:b9:0c:6d:11:8e:
         71:dd:c7:9d:a2:ca:ff:f2:0a:03:f6:3d:f3:a1:ce:5d:0f:22:
         f7:6c:40:18:af:2e:58:09:fe:aa:d3:f7:b3:a2:f3:3e:4f:84:
         b1:9b:72:54:4c:c5:f1:31:d7:3c:cf:31:24:76:85:aa:42:12:
         37:72:01:05:36:03:dc:5e:cb:c9:f8:77:43:a8:3d:f4:1f:13:
         88:ca:12:8a:25:7d:37:ef:ba:6d:92:2d:93:85:d4:04:69:02:
         1b:81:e3:35:63:e8:e7:1a:b7:18:28:e2:9f:53:c1:79:d1:69:
         ab:e7:28:15:47:7e:1d:4d:85:a7:35:4e:e6:b0:da:96:0a:f4:
         3d:0c:2c:2c:2f:d9:37:bb:ea:31:6a:ff:59:86:cd:ea:ab:1a:
         15:92:22:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:32 2025 by rpki-client