Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fa01913-23b7-3e84-8b2f-a8cfe8d8c2ed.roa
File:                     2fa01913-23b7-3e84-8b2f-a8cfe8d8c2ed.roa (raw, json)
Hash identifier:          l93wCwDQkBL3YrU0nfqFtY/Ed9cBzetYNqqB6eEePh8=
Subject key identifier:   4D:E0:8F:13:8C:F0:37:4E:61:AE:9D:BC:DD:79:2C:3E:B7:9C:10:E5
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A784B032ED05E75FE9763000
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fa01913-23b7-3e84-8b2f-a8cfe8d8c2ed.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     30036
IP address blocks:        173.27.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:b0:32:ed:05:e7:5f:e9:76:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=a56fb724-a8c5-42e6-a2ed-b678bcae1c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:97:1d:77:56:6f:5c:8f:bd:8a:f8:51:5f:cd:
                    2a:73:ff:29:42:0e:8c:60:74:87:00:2d:1a:ee:c6:
                    f9:2b:8a:7a:36:49:bf:fe:cb:ef:7e:d2:21:cc:d1:
                    13:a9:6e:cb:de:93:e6:f6:77:5d:80:a4:db:04:22:
                    60:14:39:25:f0:6e:0a:f1:e5:74:98:eb:ae:8a:ba:
                    e6:33:07:71:9e:3a:a5:cc:7b:45:b8:b1:c8:f1:66:
                    b5:cb:92:24:9b:6b:49:01:d1:60:a9:4d:39:b4:4f:
                    17:f1:1a:f2:4f:f2:eb:ad:e9:b3:b9:86:0b:09:bc:
                    a6:c0:fc:e3:3c:e8:84:c6:ba:57:f7:69:27:ae:12:
                    26:dd:21:ed:30:e4:ac:48:b3:81:1d:47:aa:2f:9a:
                    d8:ba:ad:3a:a2:5b:6b:55:df:73:30:36:f8:c9:41:
                    e3:db:39:32:f4:db:11:cf:6d:74:48:a9:26:40:c2:
                    91:db:75:6a:8f:8e:f7:85:10:35:ef:29:81:94:16:
                    72:41:be:5d:d7:8d:e8:a2:d3:d7:58:a6:fd:7f:b5:
                    f2:4c:70:4f:0f:c5:71:b9:4e:ee:2a:9d:4e:01:4f:
                    7b:05:04:95:7c:3c:6f:7e:60:8c:aa:68:84:32:4c:
                    00:82:17:f1:9c:70:8f:13:60:e6:53:23:4f:e7:96:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E0:8F:13:8C:F0:37:4E:61:AE:9D:BC:DD:79:2C:3E:B7:9C:10:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fa01913-23b7-3e84-8b2f-a8cfe8d8c2ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:46:9c:ff:39:26:05:5c:cc:19:90:67:7d:9a:70:41:25:90:
         16:26:7d:6e:02:e3:ac:79:6d:57:28:00:3e:35:c9:53:68:34:
         6e:20:ab:b8:89:67:fe:fe:b2:2a:64:9a:03:ae:fa:4f:81:20:
         91:0e:90:85:7e:1d:39:b2:c7:03:17:83:3e:64:8f:d4:8d:07:
         7a:c5:18:c5:e6:76:6d:9d:ed:db:fa:f9:2b:b4:5f:19:c8:ff:
         97:de:a7:6d:8f:b2:e7:95:94:2e:88:42:b4:42:1d:45:05:0d:
         37:28:dd:f0:11:17:b2:70:14:33:ca:0c:7a:5d:d0:bf:82:c4:
         bb:13:37:c5:c8:71:c2:65:9c:17:b1:3f:c6:95:3a:86:fd:b5:
         15:24:73:d4:de:e1:88:3d:dc:e5:86:dd:91:3c:28:03:b2:ce:
         03:fa:6d:91:73:a3:5d:d3:22:44:34:ff:9c:bd:64:ec:16:08:
         d0:27:ea:92:42:4f:73:cc:6a:e9:be:88:92:67:8f:28:c1:ca:
         a7:80:b0:c8:38:39:21:64:ef:93:2d:77:2e:f5:bd:7d:f7:d0:
         32:e3:fd:13:cb:86:5a:a6:75:5f:19:44:40:bd:c5:80:79:6d:
         88:7d:52:4d:bd:a7:c6:37:b5:5f:23:3e:b1:48:9a:5a:ea:c0:
         13:99:4c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:41:34 2025 by rpki-client