Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdf4bb8a-9da3-3dee-87fb-9be9d62d69cf.roa
File:                     bdf4bb8a-9da3-3dee-87fb-9be9d62d69cf.roa (raw, json)
Hash identifier:          l2p09IrNdZGFDkyFvkExU/I+OmbldBJiBjPee4jrzzI=
Subject key identifier:   F4:E9:08:B1:9B:9A:1F:1B:9E:F3:4D:15:58:3A:A1:10:31:EA:B5:F8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858499BF515D55E22AB547A55E580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdf4bb8a-9da3-3dee-87fb-9be9d62d69cf.roa
Signing time:             Tue 22 Apr 2025 09:37:56 +0000
ROA not before:           Tue 22 Apr 2025 09:37:56 +0000
ROA not after:            Mon 21 Jul 2025 09:37:56 +0000
asID:                     19905
IP address blocks:        173.27.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9b:f5:15:d5:5e:22:ab:54:7a:55:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 22 09:37:56 2025 GMT
            Not After : Jul 21 09:37:56 2025 GMT
        Subject: CN=41d2ce86-5a93-41d8-be77-e04c8a64fae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:1b:db:da:51:c3:cf:53:68:29:33:58:1f:
                    e6:7a:21:32:59:ac:b1:15:8d:4e:45:b8:9d:9c:b5:
                    67:09:c1:25:31:5f:79:7a:58:db:7b:5d:d5:9c:65:
                    5a:0b:9e:e3:ff:4e:73:f3:ed:03:4c:0c:84:88:c2:
                    1e:d5:7d:f2:94:6a:3f:48:e5:65:93:de:a5:c1:dc:
                    90:b6:56:75:a4:9a:3d:ce:23:dd:e1:af:08:41:48:
                    64:c8:9c:7d:8a:d7:06:2a:6c:d4:08:c0:81:54:07:
                    66:ea:53:68:fa:87:28:f8:fc:f4:10:e4:ec:21:b2:
                    43:a7:68:87:87:a6:34:a3:d2:43:8a:fe:4d:07:f4:
                    c0:fd:ac:37:6f:2d:16:a5:2f:59:4d:c1:89:0d:93:
                    14:a3:69:72:0f:9a:fb:9a:7d:9f:61:e1:6c:9a:ef:
                    8e:4a:88:66:18:58:9f:0a:38:22:62:d1:6c:ee:0e:
                    28:62:53:a5:55:19:8f:bd:20:8a:7d:28:e6:e5:42:
                    77:12:b6:e5:da:6b:a7:f2:d1:68:76:83:ba:e2:34:
                    20:61:ec:4e:55:ca:d3:29:b7:de:0e:f8:16:71:ca:
                    ea:e2:ef:eb:52:5e:c7:f7:4f:13:df:c9:c4:11:54:
                    aa:ce:c1:09:e1:f7:bc:50:2e:a6:94:db:74:8c:c9:
                    28:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E9:08:B1:9B:9A:1F:1B:9E:F3:4D:15:58:3A:A1:10:31:EA:B5:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdf4bb8a-9da3-3dee-87fb-9be9d62d69cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:34:98:8c:b8:32:76:93:19:ac:1c:cc:58:01:b0:02:60:f2:
         b4:fc:05:da:49:f5:b7:4f:42:a3:43:ad:66:c2:bd:bb:dc:0f:
         e4:79:f4:8e:61:74:2f:48:78:07:47:8a:b1:a1:b9:f1:ae:d9:
         af:14:2a:3f:35:19:ed:b1:c9:b0:33:7f:c6:3f:51:e4:84:f0:
         7b:0f:e9:ec:bf:9e:5f:75:49:6d:67:b3:fe:bb:65:f6:d9:1b:
         1c:e9:0b:9b:04:dc:92:d7:d3:d4:45:55:76:3d:9e:15:f8:e1:
         c7:c6:7b:af:cc:78:ab:02:2e:8e:d0:0c:98:82:7b:0c:e6:a7:
         03:b1:af:4e:df:86:16:62:87:36:20:68:01:4a:63:3f:18:b6:
         f7:e5:14:5c:37:69:da:e0:ac:59:a4:db:8a:b0:cc:18:43:ef:
         de:d5:44:64:eb:a0:9a:ed:f0:5f:57:50:ac:2b:af:a5:d4:06:
         95:04:39:47:2c:a1:01:6d:33:f2:77:24:94:7d:33:dd:94:9b:
         83:2b:67:c6:df:80:44:a0:50:06:ef:cd:8b:8c:96:99:13:c1:
         ae:ec:96:2a:e2:1d:a1:c9:f8:cd:36:6b:bf:1c:b5:51:32:df:
         eb:fb:45:2b:89:e0:67:d1:cd:c0:fe:c0:72:23:87:d9:54:f5:
         34:77:cb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:47:03 2025 by rpki-client