Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/27d57852-4b8a-3e56-a792-171c99162a71.roa
File:                     27d57852-4b8a-3e56-a792-171c99162a71.roa (raw, json)
Hash identifier:          WJn2Rfy/4qbaSEo9AyIG+LGCqA3OvfpD5QlheLBuBI8=
Subject key identifier:   AE:7A:8B:AE:19:96:7A:9F:4E:04:49:6B:DE:1E:3E:3D:FF:84:3F:70
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B13D6C4ACE3AC1CD907F94B40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/27d57852-4b8a-3e56-a792-171c99162a71.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     9009
IP address blocks:        67.227.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c4:ac:e3:ac:1c:d9:07:f9:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=258ebc24-9c57-4ec0-a24a-1cef9bfbab32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:82:f6:17:9a:5b:99:9b:2c:13:fe:d6:7d:
                    47:e8:c0:11:75:89:de:58:81:22:13:e5:1e:49:90:
                    fb:9e:bc:77:5b:e0:62:26:6f:8f:9a:b6:25:a2:56:
                    70:98:92:10:b3:7e:97:ea:54:ee:5f:6e:de:bf:4e:
                    31:07:f5:3e:61:24:49:07:45:be:8b:15:75:ee:00:
                    90:de:09:f5:17:86:28:ed:af:18:dd:1d:56:18:d0:
                    cf:3f:fa:79:c2:ec:7e:68:d4:7f:a7:d2:de:70:11:
                    09:9d:4c:f1:30:a2:2b:0d:5f:93:a8:ef:b5:05:f0:
                    37:98:8c:94:5b:05:e9:7f:d4:a8:ce:75:8b:e8:de:
                    3e:ce:d0:27:f9:e4:6e:16:49:c8:d3:76:6c:ad:24:
                    85:34:22:b3:8e:dc:14:bd:c2:63:c8:b3:d8:86:24:
                    f1:06:f6:2a:5c:30:0e:45:76:7f:60:64:f8:84:0d:
                    43:68:38:17:32:69:4c:55:9b:62:95:53:fc:fc:83:
                    bb:ed:cb:b0:b5:cc:d2:06:d2:ab:54:0f:f5:21:a6:
                    b8:3a:a9:c2:0f:92:c7:8b:20:42:19:6f:7a:69:fc:
                    d4:16:65:69:96:71:1d:7d:db:12:1f:ad:8d:71:a8:
                    76:00:e3:30:d5:5b:58:ae:9d:b6:53:94:a4:3e:dd:
                    b5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7A:8B:AE:19:96:7A:9F:4E:04:49:6B:DE:1E:3E:3D:FF:84:3F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/27d57852-4b8a-3e56-a792-171c99162a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e5:bf:14:3b:e4:7e:b5:d4:aa:e2:ee:5b:b8:17:b9:ae:f2:20:
         9a:e8:15:59:77:2e:aa:04:b7:03:d7:24:62:b2:d9:f3:43:90:
         6c:ea:1e:da:64:44:0f:81:82:9d:45:c0:f1:5d:41:8f:9b:dc:
         40:d0:b0:ed:70:ea:29:f8:d2:fe:69:bc:c9:e5:44:e0:a1:94:
         12:d6:e1:39:22:4d:32:27:de:08:ca:dd:32:64:4f:af:39:f9:
         58:da:3b:d7:7b:b3:7f:a4:83:a2:b5:40:bf:11:b3:d0:6a:b9:
         c5:b5:bd:5b:ad:5c:67:bf:9b:0c:55:d0:f9:c9:57:75:3b:12:
         b2:d5:0d:e0:cd:48:1a:1a:4d:87:b8:cc:4a:96:ce:98:27:c1:
         ea:ed:99:df:ae:2d:0a:17:a5:e4:47:02:e8:4f:f2:fe:ca:a6:
         dc:f1:d3:0d:aa:e3:a3:4f:41:a6:ef:38:e5:11:16:4c:17:31:
         c2:d9:94:54:4f:87:54:f2:a7:f0:78:4d:b7:0e:88:3d:62:0d:
         36:97:e2:a3:16:ed:60:d4:65:5b:3f:19:34:6d:ee:69:9a:a4:
         e5:6e:46:7f:7a:b4:bf:d5:a1:bb:d4:1c:08:f5:a5:79:a5:a1:
         5c:e3:86:15:5c:55:18:34:dd:05:c6:b7:0c:46:a5:fc:2e:74:
         fc:3c:f2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 02:28:57 2025 by rpki-client