Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3c226793-2934-3643-aa26-dd290ba134a7.roa
File:                     3c226793-2934-3643-aa26-dd290ba134a7.roa (raw, json)
Hash identifier:          6557zmqs8Izx9llKPVqvd1lvDKHA1G0E2PfW2x8NizA=
Subject key identifier:   AB:47:41:83:D7:E0:29:4A:43:09:98:FD:A1:53:F7:52:AB:4B:46:10
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C43C239695FE33D106F400
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3c226793-2934-3643-aa26-dd290ba134a7.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        199.27.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:3c:23:96:95:fe:33:d1:06:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=28aefd6d-0ef3-4e0f-bcf3-6c1ca4c4b00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:0b:29:7c:78:08:d6:2d:a5:64:34:e5:ac:
                    63:fe:0e:b9:ec:55:07:bb:de:bf:7c:f8:96:95:7d:
                    8c:5a:65:3f:24:70:0b:b1:6f:88:ef:26:40:fb:bf:
                    eb:dc:ba:8d:3a:b7:90:2c:a9:13:b9:32:c6:37:03:
                    79:b0:ae:86:10:20:5c:c9:0e:75:3e:15:a0:66:8a:
                    fe:82:a4:4c:71:cb:9a:ba:40:29:c7:60:59:8b:5c:
                    de:dd:a7:72:0f:38:96:fb:ec:23:ee:98:ce:c3:e9:
                    97:d4:58:b4:b8:e7:4a:83:43:23:d2:8f:38:94:c6:
                    b2:ac:c8:fa:18:fa:26:2b:db:93:aa:74:54:58:55:
                    85:ed:b9:48:e3:68:1e:11:cd:b1:4b:01:4a:85:57:
                    2e:85:3f:ad:71:56:fa:8d:f3:cd:7f:9b:f3:14:a8:
                    5a:13:92:a1:14:4c:9d:66:e5:5e:0a:34:ba:d3:3a:
                    4e:2e:50:e4:ea:4a:c8:5b:9d:bd:a7:16:46:a6:e5:
                    f1:4d:ef:0a:52:23:7c:99:41:69:6d:d7:14:31:0b:
                    e8:07:77:82:4e:13:2e:66:bc:d3:61:85:88:b4:c5:
                    c6:62:21:c3:c6:55:3e:6e:ef:2b:9e:1b:41:8e:84:
                    14:22:6c:5d:6d:49:d2:1f:e7:ee:28:9a:cc:a9:3e:
                    eb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:47:41:83:D7:E0:29:4A:43:09:98:FD:A1:53:F7:52:AB:4B:46:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3c226793-2934-3643-aa26-dd290ba134a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:2a:fa:a4:9c:d9:08:0d:a3:b5:e7:61:fc:f9:c8:94:2e:d0:
         f5:26:72:87:71:86:25:c0:ba:b0:29:f1:f5:25:61:4a:03:0f:
         04:4b:78:ad:02:35:6c:6c:46:62:d0:85:00:69:1c:4a:41:ac:
         ee:19:11:45:cd:dd:5b:21:f1:85:1f:ba:39:63:5a:09:2f:37:
         bb:07:9c:b0:d6:0a:4f:3b:30:77:82:26:6e:a4:b1:82:6a:02:
         71:59:e8:eb:13:f2:9d:04:ad:25:b3:b9:bf:0d:ef:cb:66:1f:
         0e:a7:e7:21:81:81:36:85:a8:05:61:0d:08:9d:13:ff:35:a9:
         3d:35:98:3d:46:8e:9e:31:bc:25:c6:b8:c5:79:4c:79:ab:b9:
         2c:9f:fb:e1:da:06:8c:36:a4:61:b4:c3:e1:21:7c:25:20:12:
         10:85:af:a6:9a:94:a2:33:84:03:0a:b0:93:91:c5:b4:a0:18:
         80:71:de:00:a7:19:97:10:7c:68:3e:62:b4:a7:50:d3:8a:bb:
         5b:61:7d:a5:d1:62:c5:bc:23:44:67:2b:f4:e7:b4:c7:28:b3:
         90:25:f6:68:f1:e1:bd:57:17:b6:c3:3c:53:7e:e1:a2:d2:09:
         17:b1:31:9e:fd:a0:91:f2:d3:28:45:72:58:78:ad:93:ac:bc:
         18:47:02:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 03:01:19 2025 by rpki-client