Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95a6e189-d6b7-37d0-bf8a-939ce96ddcff.roa
File:                     95a6e189-d6b7-37d0-bf8a-939ce96ddcff.roa (raw, json)
Hash identifier:          +18xKIhg2EB1+mcetL/xtiNHwi86IAbBEHvA9NR7GTM=
Subject key identifier:   4F:CE:27:74:CF:2C:54:80:D2:D9:54:6C:79:80:20:66:F9:7E:AD:80
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A94D0CB11128276DE23A07780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95a6e189-d6b7-37d0-bf8a-939ce96ddcff.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     19905
IP address blocks:        173.27.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:cb:11:12:82:76:de:23:a0:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=792477b6-cc62-472a-8438-aa6d0f323174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:05:e0:41:b0:0a:2a:61:9b:86:29:c8:62:7b:
                    13:13:52:b6:f4:ea:b0:09:3b:75:c5:b1:be:28:41:
                    9c:ec:91:ab:84:9e:82:d1:35:51:25:6f:2e:38:42:
                    d8:c2:73:fa:88:de:58:e0:9d:23:dd:54:70:05:06:
                    3a:af:f5:d6:bd:67:35:51:f5:09:ad:ca:2e:2d:d9:
                    71:aa:69:e4:79:fd:dc:c2:bf:20:70:55:59:67:d5:
                    11:25:cd:50:c2:15:b1:eb:c4:95:52:3c:f0:36:be:
                    d5:80:45:ab:23:6b:60:6b:74:db:e7:db:11:fb:8d:
                    e4:31:8c:e1:78:d3:d7:6e:f9:d3:1a:eb:32:64:60:
                    dc:c7:1b:8d:32:f4:e1:2e:9d:9f:ba:e0:e8:4e:6f:
                    69:fa:58:9d:8a:03:c6:83:01:89:e0:ce:18:2d:31:
                    00:0d:02:8b:1b:91:8d:b6:0c:06:4b:93:59:14:ee:
                    6b:a0:b3:a8:a1:dd:d4:3d:1c:b4:41:5e:11:3d:57:
                    07:59:2d:9d:8f:9f:ca:b8:1f:d2:9e:f2:d6:00:e0:
                    d3:a5:95:e1:e5:b7:96:5f:be:49:87:53:55:c0:a2:
                    9c:db:20:43:ca:07:be:d7:db:55:d0:f1:86:3e:b8:
                    0b:f2:6c:4a:d7:5d:e5:4c:6e:c8:25:b8:45:d5:b7:
                    e1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CE:27:74:CF:2C:54:80:D2:D9:54:6C:79:80:20:66:F9:7E:AD:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95a6e189-d6b7-37d0-bf8a-939ce96ddcff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d6:28:e1:67:02:65:26:3d:22:8e:9e:e7:9d:05:5f:79:8f:
         38:5e:cc:9b:8b:6c:a5:29:25:a4:83:fc:31:c5:fc:56:ff:54:
         5b:76:8a:28:99:4b:da:a1:d9:e7:82:60:b1:05:d6:92:ca:3b:
         59:89:a2:04:a2:19:93:1f:19:3d:45:68:4c:ca:30:ad:eb:6b:
         95:8f:8c:18:34:3f:22:37:cd:bb:45:85:e1:64:27:5b:27:2e:
         2b:b8:9a:6b:f5:84:8d:f3:63:5f:56:09:7b:ad:1a:f2:b2:0d:
         cc:0c:c5:01:a5:f3:75:f6:47:4b:8b:76:6d:b0:e4:b4:3a:46:
         22:d0:71:18:74:9d:b5:75:2b:93:1c:b5:fe:a1:2a:64:a4:aa:
         3c:39:c9:80:3a:64:ff:cb:67:c2:ca:3e:6b:66:14:87:39:5e:
         f7:e8:a0:0d:27:25:79:b8:67:a0:2b:9d:4f:50:7d:04:47:a2:
         8f:a3:89:62:a1:1d:09:d0:d9:bf:ca:ae:21:d3:46:11:69:29:
         c2:38:25:5f:c3:e7:1e:e4:06:e3:89:29:24:56:11:5d:31:91:
         d2:fe:9e:f8:30:44:2f:d4:60:e7:93:59:aa:c0:d5:b6:a9:b7:
         a8:71:19:1b:bf:a1:65:24:7b:97:f0:32:2e:0b:a0:44:a0:e3:
         7e:33:97:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:17:57 2025 by rpki-client