Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/c14109cf-35be-3be0-a14f-25d860866730.roa
File:                     c14109cf-35be-3be0-a14f-25d860866730.roa (raw, json)
Hash identifier:          /iHdHoiH0pRGBaB6yx95le6MpVRc5VrWzbscyR7baeM=
Subject key identifier:   E6:F5:7B:42:0A:0E:C1:08:DF:E9:F4:CC:72:66:D6:4E:96:60:08:B2
Certificate issuer:       /CN=acc14dc4-6768-43c1-9d95-c89a552020c1
Certificate serial:       010D0C9F432858489EB4196C62881743BA5D9B40
Authority key identifier: 22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/c14109cf-35be-3be0-a14f-25d860866730.roa
Signing time:             Tue 21 Jan 2025 16:27:29 +0000
ROA not before:           Tue 21 Jan 2025 16:27:29 +0000
ROA not after:            Mon 21 Apr 2025 15:27:29 +0000
asID:                     213751
IP address blocks:        185.177.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Mar 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:b4:19:6c:62:88:17:43:ba:5d:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc14dc4-6768-43c1-9d95-c89a552020c1
        Validity
            Not Before: Jan 21 16:27:29 2025 GMT
            Not After : Apr 21 15:27:29 2025 GMT
        Subject: CN=5384d847-e8e5-4dbd-bdfd-bfee9d07eca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:58:62:2b:64:c1:db:0e:69:d6:72:fb:31:7f:
                    65:c3:ee:a2:e5:0c:64:05:91:b1:0f:d0:b5:cb:2c:
                    f0:39:1d:d0:37:60:df:49:04:a0:b8:74:38:8f:95:
                    4e:34:bd:a6:95:5c:14:ac:01:70:30:5b:f3:91:59:
                    75:56:db:ee:9a:1b:75:8d:68:c1:f3:19:89:e1:e6:
                    51:d3:28:6c:13:84:95:d3:04:9b:b0:27:1a:aa:c8:
                    a3:99:da:9e:33:b4:a5:f8:0e:93:82:a6:51:c0:1b:
                    ec:bb:79:f3:88:b9:34:71:64:bd:32:50:49:c2:f6:
                    b4:db:ab:2f:df:dc:9d:8f:7d:31:ae:aa:f2:99:c4:
                    6f:d8:db:21:bc:b0:8e:2a:7b:ec:2b:a5:5d:43:b1:
                    8b:cd:3a:eb:6f:7a:71:80:84:fb:d3:99:45:f1:6c:
                    c5:ba:d7:83:41:2e:af:3c:c6:42:b7:0a:7d:a6:50:
                    d3:35:a5:54:41:af:c4:c3:cc:f0:d7:d8:bb:d9:da:
                    48:d7:6e:72:39:ef:42:96:7f:8c:80:ae:3c:fe:20:
                    9d:67:02:3f:c2:ba:3b:58:a1:48:fa:c7:ab:79:ad:
                    dc:00:87:c0:17:30:d0:7b:36:69:f3:91:0e:17:de:
                    d2:ca:ae:99:b2:46:b9:54:28:f5:d6:27:4f:e5:ed:
                    1f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F5:7B:42:0A:0E:C1:08:DF:E9:F4:CC:72:66:D6:4E:96:60:08:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/c14109cf-35be-3be0-a14f-25d860866730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1/acc14dc4-6768-43c1-9d95-c89a552020c1.crl

            X509v3 Authority Key Identifier:
                keyid:22:E0:BD:D1:6D:77:45:BC:65:37:F2:40:C2:45:DC:3F:AA:A3:86:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/acc14dc4-6768-43c1-9d95-c89a552020c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:9d:20:03:fa:69:47:ed:67:3e:46:ed:41:50:b5:7f:49:d3:
         86:4c:56:e6:11:25:47:c0:3e:46:c0:65:98:86:2a:af:28:fe:
         7b:b6:00:af:21:f1:d8:87:74:37:33:f7:9c:d4:49:83:fc:75:
         af:ff:81:45:e9:ed:0b:a0:6e:05:91:ab:e2:05:2a:7f:09:5c:
         18:33:88:1c:f4:71:26:a0:b4:2c:4c:cb:89:5a:ae:11:7e:14:
         e8:a1:4f:5e:35:69:81:ff:04:b2:83:cc:88:25:16:33:51:46:
         2f:24:01:63:30:78:62:5c:5c:5c:66:7a:5b:81:b0:ca:67:3d:
         35:66:08:55:cd:c5:a7:57:b2:7c:41:d6:bb:03:de:6c:c8:c4:
         a7:4e:98:87:dd:18:f5:25:57:b1:0f:45:07:af:a6:f9:8d:62:
         1d:23:4f:bb:4a:12:70:92:50:2b:b2:d3:4c:8c:a5:bc:8b:81:
         f8:da:82:8c:e8:c8:4b:6f:f4:a4:80:21:95:38:c0:1e:5a:bc:
         fa:cc:37:83:2d:65:d4:f5:32:be:38:bd:68:0c:6b:53:09:bf:
         40:e0:9e:18:6e:72:65:d9:f9:58:17:73:4a:e8:81:86:ad:6d:
         7a:1f:a7:4b:c8:9f:c1:eb:82:21:a3:9f:6b:99:e5:8a:61:68:
         34:05:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 16:31:34 2025 by rpki-client