Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/e2e02c4f-a3b0-389e-9b26-19560d0bf0f9.roa
File:                     e2e02c4f-a3b0-389e-9b26-19560d0bf0f9.roa (raw, json)
Hash identifier:          VrdvFjP/8ukGK5LzJsYBEc1Jx0yG2XkzaHHJd3h97G8=
Subject key identifier:   15:CA:9E:48:E8:09:55:10:2D:36:D5:D0:0E:B0:92:54:D7:45:F9:52
Certificate issuer:       /CN=27f24f9e-ef46-4828-9575-be547ae0263d
Certificate serial:       010D0C9F432858498E648CD6747FE369AAB6FA80
Authority key identifier: 5C:D9:FB:4D:9B:51:64:06:A6:D0:AB:BE:A0:03:92:1D:13:83:FD:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/e2e02c4f-a3b0-389e-9b26-19560d0bf0f9.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     46475
IP address blocks:        141.195.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:8c:d6:74:7f:e3:69:aa:b6:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f24f9e-ef46-4828-9575-be547ae0263d
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=0a240678-61b4-4cd5-b2c9-153366ea10e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:17:5a:b4:9b:8e:31:59:c7:f4:3e:c6:38:
                    9f:18:ac:91:d5:a0:d5:44:a8:43:f4:ee:fc:3c:9b:
                    0a:03:b1:35:18:00:c3:6f:79:29:3e:37:07:0c:22:
                    d1:8c:1f:df:d5:35:da:66:a8:57:7b:6a:ba:1b:62:
                    58:77:b0:2d:32:6c:bd:2c:fb:93:3c:1f:b9:13:f0:
                    6f:35:09:b5:26:3a:9a:8f:c4:6c:be:41:f2:ba:3b:
                    62:13:ea:94:ce:7b:53:fd:7a:aa:31:f3:c0:3d:d1:
                    07:2e:5a:1f:80:45:a8:0c:87:be:8b:51:90:e5:bf:
                    97:20:18:8a:7c:22:44:4c:49:2b:51:17:a7:a6:dc:
                    77:bd:71:32:42:7f:95:8d:ae:4a:43:9f:c7:4d:9e:
                    47:59:cd:cf:8a:bc:c9:74:42:53:55:ab:30:76:d6:
                    91:d7:a5:e4:bd:d5:d3:65:6b:47:ec:bb:3d:09:61:
                    b1:37:5a:fc:be:b8:5a:50:70:12:0d:f4:74:1a:4c:
                    4a:6b:19:f8:42:b5:3b:96:5a:c8:52:bb:e7:34:c5:
                    60:79:15:32:62:ca:6c:3a:f3:10:29:66:28:99:78:
                    35:ae:68:42:46:50:7a:7f:22:44:e9:42:1c:7e:99:
                    13:fc:6e:89:90:77:85:01:4e:af:cb:cf:c1:e5:6c:
                    73:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CA:9E:48:E8:09:55:10:2D:36:D5:D0:0E:B0:92:54:D7:45:F9:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/e2e02c4f-a3b0-389e-9b26-19560d0bf0f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.crl

            X509v3 Authority Key Identifier:
                keyid:5C:D9:FB:4D:9B:51:64:06:A6:D0:AB:BE:A0:03:92:1D:13:83:FD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:3b:5b:a4:b1:71:a7:01:da:39:7f:07:b7:f4:e0:7d:0e:1a:
         32:1c:25:94:4b:18:d2:d9:97:30:21:84:13:9a:89:ff:f2:a1:
         e6:3b:76:6d:d5:a4:e7:fb:40:f5:a1:b3:f3:0e:6a:61:65:f4:
         74:21:1c:9c:fb:b8:25:34:fc:31:ec:21:6c:ef:ee:26:af:73:
         74:50:c4:91:cd:fc:36:7c:97:34:77:d8:15:cd:ab:79:c3:7e:
         45:da:32:87:f9:58:56:df:94:6b:ea:a3:b4:96:33:9c:97:a9:
         57:ca:e2:b3:12:be:f8:2a:ca:3f:6d:40:02:25:60:6c:d5:6c:
         b7:38:8f:36:b2:4b:da:06:f8:48:85:a4:d4:11:52:ab:d9:4d:
         ca:00:59:28:72:81:78:f3:db:a6:71:6f:3e:3c:89:2b:0f:d5:
         bb:39:86:d9:d2:1b:24:1a:6d:08:e1:d3:a7:e6:98:40:ab:e4:
         e2:81:39:90:b3:e5:82:da:eb:a3:31:aa:92:db:25:f7:a2:8c:
         4e:46:f9:2e:f0:85:5b:9b:1a:87:91:16:1a:d1:2e:32:01:1a:
         bf:24:b7:eb:8c:6a:15:29:5e:83:10:07:7e:c6:5e:d2:a3:cb:
         3a:b8:5c:32:28:95:85:0d:7e:ce:7c:96:68:41:08:9d:6b:40:
         5c:b3:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:13:06 2025 by rpki-client