Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/27c6c150-4348-3c20-90f5-4786f24b2bff.roa
File:                     27c6c150-4348-3c20-90f5-4786f24b2bff.roa (raw, json)
Hash identifier:          jeyh0xbg8W28DFJt3tqS/eCJk3BVGYU26KOQHiZkuaI=
Subject key identifier:   7E:BD:70:5C:36:D8:FB:BB:A5:42:83:A1:B3:EE:95:2B:AE:D8:48:55
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848F65BE99EE78C88AC610BEA00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/27c6c150-4348-3c20-90f5-4786f24b2bff.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     28753
IP address blocks:        23.19.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e9:9e:e7:8c:88:ac:61:0b:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=dff562d9-46b5-4153-a80b-1fc06bd62b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:1b:8c:4b:60:f2:2f:c5:c9:72:65:ea:bf:
                    34:a9:62:ba:3e:72:95:94:e2:6a:17:aa:cc:d7:0e:
                    45:51:3a:49:9e:8f:c9:03:a1:ea:22:3d:f2:f2:c5:
                    76:29:94:07:73:67:49:0d:4b:24:f3:4b:33:38:76:
                    0f:3e:93:62:1b:a8:78:b4:2b:32:f1:59:02:46:8a:
                    a0:50:11:80:15:e2:6d:d5:bc:62:d8:20:e4:50:96:
                    63:04:37:37:07:19:26:61:c8:62:37:7e:2a:e3:c3:
                    da:9c:65:ec:6c:cc:40:bd:0a:c3:8b:c0:88:96:aa:
                    8a:d6:62:b3:41:6c:18:88:14:5d:b7:31:a5:08:55:
                    35:f0:3e:b4:e2:9d:65:67:f1:e4:da:47:13:15:cf:
                    94:6d:37:1e:34:44:fa:ce:9a:2e:44:cf:23:44:f4:
                    25:48:bd:5c:36:d7:2f:62:a1:ce:f6:04:f4:95:03:
                    b2:54:a3:b5:aa:2b:bd:77:69:93:de:28:3d:ea:fd:
                    73:17:29:a4:6f:49:58:f5:df:90:bc:e7:04:35:64:
                    42:5d:26:48:b1:1d:c9:b4:6f:24:dc:e9:52:27:03:
                    e0:1c:79:1d:3a:2b:c6:11:2a:45:f1:d8:af:91:2c:
                    12:28:55:95:25:bc:82:54:3e:7d:72:72:ab:9f:c4:
                    94:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BD:70:5C:36:D8:FB:BB:A5:42:83:A1:B3:EE:95:2B:AE:D8:48:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/27c6c150-4348-3c20-90f5-4786f24b2bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:4d:5b:c8:d9:0a:60:4e:2e:0f:7e:09:fb:5a:14:5e:cf:2b:
         1a:f6:b5:ba:ad:d6:98:c9:0a:0d:bd:1f:0d:f1:73:4f:74:bc:
         d4:83:4b:ff:1c:3a:92:dd:b9:36:bd:6a:e4:e0:32:d0:ba:45:
         5a:1e:da:dc:59:09:4e:52:06:05:ef:bd:92:54:ea:37:8f:85:
         a6:d6:0b:ab:9a:71:18:28:4a:31:39:05:fe:97:5d:8b:88:5f:
         6e:38:3e:25:10:84:3c:25:07:7f:2b:5a:39:0b:54:a7:10:ea:
         11:14:a5:1b:84:b9:6c:c0:0c:57:1b:cb:e4:d0:b9:57:01:b2:
         24:28:ee:00:d7:ef:01:9b:71:c4:81:4a:d6:d0:21:95:c0:95:
         68:8d:6e:38:8e:97:6d:57:19:d2:50:34:b5:3f:70:1e:db:4a:
         75:82:ea:d4:f1:37:32:d4:ea:80:45:13:8f:00:b4:d0:66:40:
         71:f8:b0:bd:09:6d:b4:6a:b5:24:7f:b5:10:8a:eb:6d:2b:f2:
         2d:fd:1b:2b:ee:f8:f6:20:34:13:b1:1e:6b:1e:b7:e7:31:f4:
         67:fc:ff:e5:36:b8:9e:89:5b:f1:b8:01:e4:07:bd:85:76:a0:
         dc:d2:c7:39:7b:e4:c7:f0:5a:4d:f7:d7:53:69:04:38:65:f4:
         fb:b3:c8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:03 2025 by rpki-client