Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cd337d2d-26cc-35ed-b565-266953cef062.roa
File:                     cd337d2d-26cc-35ed-b565-266953cef062.roa (raw, json)
Hash identifier:          o0n1x6wpJIUapdyVoB+f2azgSknUpz4w6YFWbnnZPzU=
Subject key identifier:   06:21:9F:B2:15:73:F3:F8:99:DA:C8:34:24:2E:CA:52:61:8F:25:F0
Certificate issuer:       /CN=27e2d7ee-d239-4928-9107-ceb95cacd0b8
Certificate serial:       010D0C9F43285848EF6153CD781D4AF867F58100
Authority key identifier: F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cd337d2d-26cc-35ed-b565-266953cef062.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     54825
IP address blocks:        192.80.8.0/24 maxlen: 24
                          198.16.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:53:cd:78:1d:4a:f8:67:f5:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e2d7ee-d239-4928-9107-ceb95cacd0b8
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=bd27351f-957a-4565-b7ec-1e14d7ce366e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7e:02:18:55:08:79:14:63:9f:fa:70:5f:d2:
                    1b:02:18:ff:b8:2b:a4:5c:d2:13:a7:06:af:6b:e9:
                    24:e9:a0:33:a1:95:dc:6b:d4:b6:06:13:16:0e:c0:
                    b9:73:9e:32:26:65:24:12:66:46:8c:3f:f7:25:b1:
                    5e:1a:71:1f:a5:44:38:54:90:33:53:1d:73:2d:db:
                    7f:d2:2b:a9:1d:9c:dc:be:2e:46:b8:f2:de:6d:77:
                    e9:23:90:4d:82:4c:83:5f:0d:cc:71:71:3a:41:b3:
                    bf:8c:01:f7:39:ba:e1:a1:df:7c:ff:d5:91:9d:42:
                    3d:fd:00:13:3e:a1:57:07:38:7c:ab:01:91:60:45:
                    f4:f7:2f:5d:4e:e3:23:be:85:8f:53:ff:06:4a:5a:
                    7b:21:0b:18:37:fe:e1:c9:df:a4:9a:f2:7f:b3:90:
                    50:1f:c8:ce:a0:c9:64:62:12:39:2c:06:92:81:c7:
                    e8:fc:7a:99:42:30:47:6b:82:70:fb:ee:b1:fc:01:
                    3c:24:88:27:51:fb:49:03:ee:66:69:98:cb:ff:23:
                    59:92:f4:b5:38:51:96:28:82:ec:eb:a9:38:37:71:
                    c1:7a:d9:b2:66:42:a8:43:7f:63:d7:0f:91:ce:5f:
                    51:19:f6:cd:1d:e6:8d:76:87:9a:ee:49:72:22:a4:
                    c0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:21:9F:B2:15:73:F3:F8:99:DA:C8:34:24:2E:CA:52:61:8F:25:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cd337d2d-26cc-35ed-b565-266953cef062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.crl

            X509v3 Authority Key Identifier:
                keyid:F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.8.0/24
                  198.16.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:94:d8:bd:e5:b2:73:67:9c:57:da:1d:a7:1e:ff:4f:92:6a:
         bf:80:f1:f1:6b:5a:ea:2b:a3:15:e2:9c:24:be:2f:73:5f:cd:
         8e:55:88:d1:7b:de:ea:ff:e2:39:a7:d9:f5:f3:03:37:35:00:
         22:1e:5f:ba:07:12:e9:02:01:b6:6d:25:63:02:0b:59:f6:f1:
         79:d9:19:e1:cd:76:9a:7b:6b:74:a0:38:90:69:6b:c9:67:f0:
         d3:a3:c8:60:29:30:b3:2a:f5:88:ab:5d:c5:69:b7:9d:2f:47:
         ea:36:d8:27:36:09:03:2d:a9:c0:d9:0e:dd:6f:f3:7e:bb:af:
         9d:76:b0:11:74:9d:8d:92:fa:77:57:69:62:53:de:fe:6c:fa:
         0c:86:06:eb:a8:fc:1f:b6:02:76:43:8e:33:17:3d:7b:74:02:
         82:d6:10:ee:cd:fa:f1:bb:6e:62:c9:a3:42:50:1e:18:66:02:
         8b:c4:8f:26:45:84:c1:c6:20:62:74:09:30:d2:58:df:c1:5c:
         d4:b4:f3:4b:26:10:1f:7d:0a:c2:33:36:0f:5e:ff:1d:de:f8:
         40:e0:55:4a:eb:ed:2b:d4:88:b8:75:fe:a9:5b:a6:7f:f7:5a:
         76:a0:71:99:59:16:b5:0e:7a:a8:4a:94:2d:61:76:34:8f:55:
         63:12:2b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:53 2025 by rpki-client