Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/027e198c-db7e-372c-b39d-414469965145.roa
File:                     027e198c-db7e-372c-b39d-414469965145.roa (raw, json)
Hash identifier:          jx9BuatBgM2ygrWtiQ0MK9luoVAo/hfD9mlIJYlaZps=
Subject key identifier:   D1:90:C5:18:08:CA:ED:5F:BA:AD:71:2A:FE:02:7E:2C:70:E9:60:40
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F43285849203C11E80690DEEB752F1BC0
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/027e198c-db7e-372c-b39d-414469965145.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     400238
IP address blocks:        209.127.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:11:e8:06:90:de:eb:75:2f:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=2206264a-cd63-4362-ba02-07ab3b636cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:8c:e3:29:a6:c2:75:39:97:5d:c5:59:3e:
                    f2:96:87:8c:96:ac:2e:8f:a4:b4:10:23:ab:eb:be:
                    ce:e6:b7:c7:de:53:8c:f7:ed:8c:42:aa:b5:bc:e9:
                    c2:5a:df:7b:51:83:a4:7d:db:2c:17:f5:4f:08:e3:
                    63:fa:90:83:f1:7c:d8:79:fb:56:5f:40:cf:6a:0a:
                    05:63:c1:9f:a3:96:00:71:18:5a:74:34:57:13:a8:
                    bc:f8:10:ff:ba:1d:c2:3d:fe:6a:19:fb:73:76:cb:
                    53:63:51:05:a3:38:60:a1:e6:da:56:81:fc:8b:3d:
                    ec:02:4a:53:e4:bd:4f:d7:ac:f6:1d:11:79:66:f3:
                    38:09:4b:f3:d2:20:8c:2d:0a:cb:15:60:37:0e:d5:
                    67:64:7c:25:e7:f7:99:25:0e:e5:12:b0:c8:c3:57:
                    b5:27:51:72:e7:85:fc:45:7e:fd:ed:ad:f6:d2:c4:
                    bc:51:cc:b0:c2:e0:30:24:3a:f9:0c:33:8b:a2:24:
                    e5:4b:35:ec:81:ef:7d:8b:6d:f7:2a:b2:6c:8f:f7:
                    b7:21:ed:5c:c7:08:05:65:9e:6a:8f:13:c6:cf:57:
                    bf:3c:f9:1d:d7:79:c4:54:26:b7:ce:72:9e:af:2e:
                    73:9f:e6:f2:4b:18:8a:34:81:8e:4d:81:81:59:72:
                    6f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:90:C5:18:08:CA:ED:5F:BA:AD:71:2A:FE:02:7E:2C:70:E9:60:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/027e198c-db7e-372c-b39d-414469965145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:0b:c8:37:5d:9a:56:d8:aa:49:80:07:6d:87:38:d5:97:f9:
         db:f3:f1:a1:44:5f:6d:c2:3b:24:28:25:3f:72:26:85:0c:28:
         5d:48:48:26:90:0d:ab:ac:76:8d:71:93:f0:21:db:79:cd:3b:
         db:f6:c3:ec:b2:db:64:92:86:cd:0b:6d:ef:d9:2d:92:0e:29:
         94:77:04:d4:a6:24:be:05:4e:2d:78:52:f5:c1:a5:7d:9e:11:
         41:f4:58:7a:0e:1d:10:e6:61:d5:52:5b:5a:ef:19:f6:08:40:
         bd:70:e7:a4:1b:6c:5b:27:ce:53:ec:a6:dd:a3:57:ae:a1:a2:
         9a:56:78:fd:cb:c9:24:ae:21:d1:66:f5:48:b5:d2:ad:ed:88:
         45:6d:3e:32:02:58:de:ba:cc:5c:f4:a1:57:66:8e:76:b9:2b:
         95:62:5f:c8:b2:4c:eb:3c:8a:57:ea:98:77:c4:20:e3:df:95:
         a2:f4:67:0b:7e:fc:7f:01:86:c2:c1:fc:50:b7:ac:8a:5c:0a:
         a8:44:25:3f:7f:6a:8a:1c:f1:92:f5:7d:e9:aa:11:b3:a6:f0:
         10:33:0c:c9:5e:27:31:a0:e2:c3:ee:01:ec:da:58:ad:76:e6:
         0d:a6:74:97:92:a6:bc:31:a6:f5:7e:1c:90:18:7c:9c:5b:c1:
         1b:15:16:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:10 2025 by rpki-client