Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d0d2355-bffc-37d9-bf87-3cfb6761d289.roa
File:                     2d0d2355-bffc-37d9-bf87-3cfb6761d289.roa (raw, json)
Hash identifier:          NuexqN3cTmumkwW0Bhqd2KVDV287py3dvjWtTENST78=
Subject key identifier:   2F:DE:4B:D5:7A:AC:4E:CA:66:43:59:E9:CF:79:06:D3:C9:77:10:6F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA2C8FFF0BA644B2AFDFC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d0d2355-bffc-37d9-bf87-3cfb6761d289.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.27.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:2c:8f:ff:0b:a6:44:b2:af:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b40cab56-5494-49e2-937a-88072a8db56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7e:fd:db:12:83:e4:39:0f:e9:90:fe:4b:fa:
                    0e:8e:9e:8d:01:77:ef:74:22:08:eb:87:75:b0:0c:
                    ea:bb:a8:88:1e:67:94:22:b4:d9:b6:fe:05:40:03:
                    ac:a5:ed:3d:39:bf:20:5c:de:bf:db:73:ad:d6:27:
                    54:da:9e:54:5e:1b:b5:a5:ec:f0:0c:00:bd:99:8b:
                    28:45:08:fe:5e:77:af:cc:2f:19:29:9a:7b:19:40:
                    1b:d0:d2:5e:87:e4:bc:f2:17:8c:ac:9e:94:55:7c:
                    53:b2:ed:29:71:77:53:0e:9f:6a:57:01:2e:a8:e0:
                    89:66:84:b4:6a:63:bf:9c:e3:6a:54:50:19:c2:d7:
                    b5:66:10:08:a4:c4:f6:63:18:6b:92:7a:ce:49:76:
                    ef:ae:86:f2:7a:f1:b3:26:a8:13:34:70:4a:47:07:
                    27:03:c4:7e:ed:75:ce:ca:4b:cf:b6:6f:2b:66:7a:
                    00:85:2d:8a:b3:ca:85:ca:c6:37:ce:b6:af:02:f5:
                    1d:04:6d:3b:d2:d9:73:a4:e1:cf:1c:60:51:b3:41:
                    41:2f:98:2e:51:d9:a0:e1:44:e3:2e:f6:b5:01:77:
                    c9:e7:65:1d:36:00:30:47:0e:01:6e:43:a5:7d:7f:
                    16:08:51:e6:37:63:4b:c0:7a:cc:41:67:7b:8a:a4:
                    20:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DE:4B:D5:7A:AC:4E:CA:66:43:59:E9:CF:79:06:D3:C9:77:10:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d0d2355-bffc-37d9-bf87-3cfb6761d289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:df:4b:c2:18:b4:b4:5c:47:0c:22:f4:6a:ec:ef:0d:83:b6:
         88:66:d2:33:0b:7b:88:5f:db:da:00:bc:23:51:c4:86:6b:45:
         ff:92:8a:e4:28:6f:cf:bd:b6:d6:0a:79:39:7d:e9:e6:03:54:
         0d:79:dd:38:56:e5:7c:6a:43:26:2c:54:28:2c:39:ee:75:80:
         ce:2a:06:5c:8d:d7:2f:a4:57:9e:b1:a6:6f:fd:39:7b:7d:38:
         bd:1f:38:8d:dd:8e:44:8d:cd:f8:6a:04:02:5d:76:38:9c:df:
         86:c7:20:e1:21:5f:71:e0:b5:66:5e:e9:b8:f5:b0:c6:7e:3a:
         ad:cb:77:7c:88:db:14:86:d1:31:e1:91:91:11:40:07:fb:a7:
         9f:f5:b1:5f:70:3e:93:90:1e:c5:71:27:f6:c1:c3:26:2f:91:
         c0:59:0d:64:7c:00:5b:e3:14:12:9e:a1:5e:7e:80:4e:14:6d:
         13:58:78:45:c0:81:61:2e:91:e4:c9:dc:8e:1e:68:b1:96:2d:
         fe:71:83:82:ad:88:ad:88:55:de:9f:8c:f5:8d:9d:26:48:6d:
         f0:97:35:6c:c4:ce:59:e4:ff:fc:b8:e3:ff:d2:5d:d7:68:17:
         74:7f:06:cd:64:8a:28:b9:5a:db:14:b1:ce:fd:db:95:11:c5:
         71:1d:d7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:44:51 2025 by rpki-client