Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e9dfacb4-e20d-3fd4-b168-e08706ed9594.roa
File:                     e9dfacb4-e20d-3fd4-b168-e08706ed9594.roa (raw, json)
Hash identifier:          Iu2B2fRkznv5LBKZPJoK4DMBsqe8/L/Sd2RE4PdZgaE=
Subject key identifier:   8B:AE:82:3F:2A:AA:7A:4E:01:9D:6F:CC:2E:59:F8:D7:51:37:8B:34
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584A0EE58B1F749B07A1C67E8FC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e9dfacb4-e20d-3fd4-b168-e08706ed9594.roa
Signing time:             Mon 02 Jun 2025 13:44:35 +0000
ROA not before:           Mon 02 Jun 2025 13:44:35 +0000
ROA not after:            Sun 31 Aug 2025 13:44:35 +0000
asID:                     199527
IP address blocks:        216.27.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0e:e5:8b:1f:74:9b:07:a1:c6:7e:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  2 13:44:35 2025 GMT
            Not After : Aug 31 13:44:35 2025 GMT
        Subject: CN=76871b80-52a4-43ab-a124-5ac584cac4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:94:fe:10:62:6e:77:95:9b:84:df:10:bc:c9:
                    5c:b0:b4:49:35:e7:2d:7e:00:3f:7b:95:b4:48:1c:
                    6d:50:c5:21:91:ce:4b:cf:f0:44:08:b0:aa:26:cd:
                    ee:12:fa:03:54:9c:b3:e5:6e:53:88:c4:00:c6:80:
                    88:42:19:1d:0f:70:25:5f:ec:ec:3b:23:80:9e:52:
                    d3:99:d4:3c:68:f9:1f:f4:56:a0:fb:82:fc:31:c7:
                    d0:97:c7:5a:ae:bc:62:0c:e2:a2:81:58:2a:e2:58:
                    f1:56:6c:f5:6d:0a:e8:60:11:eb:4b:7e:5b:60:a1:
                    39:02:55:8b:ff:cf:90:09:c6:63:5c:d1:cb:22:68:
                    f8:4b:46:f1:a4:da:b0:b5:e9:22:75:af:dc:2e:0a:
                    88:f4:55:1c:d3:3e:26:50:39:a0:d8:de:d9:29:28:
                    d5:dd:2e:94:91:89:7c:87:99:60:f7:2f:05:83:da:
                    25:3f:ec:03:1b:a5:8b:f7:b7:fd:94:14:79:20:58:
                    12:8a:24:09:5d:9d:5d:cd:ee:db:8d:20:23:a7:1f:
                    00:4a:29:e4:42:4d:e6:02:a2:18:88:50:4a:00:0d:
                    ac:c2:c9:a9:2c:29:3c:11:d7:8a:9d:3e:cc:23:aa:
                    78:44:47:a9:b1:a7:9f:09:ed:41:d5:ae:fb:44:4b:
                    73:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AE:82:3F:2A:AA:7A:4E:01:9D:6F:CC:2E:59:F8:D7:51:37:8B:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e9dfacb4-e20d-3fd4-b168-e08706ed9594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.27.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ca:f7:9c:e6:71:15:ec:89:69:ce:9c:f3:0c:f1:e0:f6:ab:
         a0:01:22:ea:d6:7b:55:50:ba:2d:bf:c6:5c:54:6a:f8:0d:90:
         6e:5f:75:3e:56:1e:56:c9:ae:9d:5a:54:b0:e5:c8:0b:19:d2:
         0c:cf:7a:95:97:b7:d2:38:ba:b1:ba:7a:64:72:60:88:76:57:
         e7:73:fb:48:c6:1f:bc:c3:c0:6f:24:67:43:a1:58:a5:0a:7a:
         ee:65:ed:c3:c7:d1:5e:09:5a:55:c1:ad:a3:f4:03:43:f8:cb:
         3a:90:d3:a0:66:91:87:2b:84:62:db:9d:0c:a6:e5:88:2f:c2:
         7e:09:fd:c8:af:67:43:2b:60:75:1c:ff:1e:d4:f5:08:2a:74:
         4e:76:ac:e7:cb:47:fe:24:bb:9d:6e:60:9d:17:fd:43:90:08:
         ef:c6:97:23:3c:51:1e:fe:69:ab:2a:ee:61:f9:b2:99:29:14:
         e7:cd:11:d3:81:57:ac:cc:22:6d:a3:c5:b5:7a:d3:eb:42:35:
         fd:34:47:7f:22:10:13:d6:17:81:cb:1f:80:90:6f:98:d7:d1:
         6e:3e:35:8d:b7:2a:60:85:87:46:1e:bc:6c:5b:43:ca:6b:6f:
         6b:6a:17:f5:4d:59:79:c7:99:fe:fe:be:1b:4e:ef:ae:62:f8:
         61:43:c1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:55:28 2025 by rpki-client