Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdf4bb8a-9da3-3dee-87fb-9be9d62d69cf.roa
File:                     bdf4bb8a-9da3-3dee-87fb-9be9d62d69cf.roa (raw, json)
Hash identifier:          zCx77gHciwFc/JuvLCpHMk4n8en4TAghNYLFmkzEc/A=
Subject key identifier:   09:5C:C2:1F:3C:FB:18:14:42:62:15:37:B3:CF:87:C4:08:78:34:C8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A7BB0AF95C5DF127EADBC3CE0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdf4bb8a-9da3-3dee-87fb-9be9d62d69cf.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     19905
IP address blocks:        173.27.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:af:95:c5:df:12:7e:ad:bc:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=308ac3ce-e941-4f55-937e-3ad88aa81106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:10:ef:a4:83:81:9b:25:ea:ce:ef:6b:7a:72:
                    24:f0:48:9b:44:7c:ce:e7:09:2e:dd:52:a8:71:87:
                    fd:bd:13:13:51:7b:0d:08:84:24:ec:c7:8f:3a:a8:
                    0c:96:f8:dd:5f:af:53:a9:97:8e:5e:ca:a7:1d:ee:
                    a6:e9:29:7d:ca:84:bb:26:37:36:54:71:b4:45:77:
                    d7:37:d7:00:de:aa:28:5b:47:b5:35:58:d4:4d:4f:
                    82:a7:cb:73:25:bb:e0:d9:d9:2a:ea:e1:c6:bd:31:
                    0e:ba:96:35:89:ae:e0:83:8d:e3:1b:6e:e3:55:e1:
                    ed:b1:27:50:1a:18:09:70:25:b0:a6:c5:f0:63:1b:
                    04:14:28:3c:0a:86:12:9c:96:ac:77:e8:31:d7:eb:
                    75:37:46:c6:bc:f7:31:c7:b1:6b:9b:a2:88:c5:14:
                    1a:5c:67:77:26:8d:c6:b6:8c:2a:50:c5:e3:f2:ee:
                    77:31:4f:ff:55:df:fd:e3:d8:7c:9b:2f:e5:09:85:
                    46:dd:ec:57:59:a1:04:5a:67:1e:46:a3:40:2d:fe:
                    10:0a:c4:4d:58:c1:a5:d8:ae:95:42:46:14:95:cb:
                    f3:d3:c0:ae:c7:54:08:a6:47:c7:71:72:3a:be:bf:
                    dd:c7:9c:8f:6e:62:26:ab:26:21:af:4a:93:b9:31:
                    8c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5C:C2:1F:3C:FB:18:14:42:62:15:37:B3:CF:87:C4:08:78:34:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdf4bb8a-9da3-3dee-87fb-9be9d62d69cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:4a:fb:82:32:7b:4c:8c:4b:74:d0:2e:e4:53:64:30:83:86:
         f9:ac:b3:df:4e:d8:46:68:0c:f5:80:10:8b:e6:d6:f4:51:17:
         2a:2f:d3:d7:c5:8f:95:39:32:03:d4:5d:b2:fd:b4:fb:d1:93:
         93:73:89:0c:0b:f4:8f:4b:f2:48:b8:40:30:68:fb:a6:ac:b3:
         f5:6a:93:78:3b:50:2e:fb:e8:ce:9e:d9:32:d1:0b:5f:3d:59:
         e0:e1:73:56:2b:b9:f4:f4:a6:45:e3:3c:28:94:74:da:f3:ff:
         a7:8f:07:3b:53:8f:a7:e5:24:1d:9d:1c:d4:98:98:82:c9:c4:
         6a:d6:31:93:29:e2:cc:cf:37:eb:48:86:8c:0e:e1:07:23:fd:
         d8:0f:54:e3:b1:dd:59:fe:76:83:7a:cd:01:b1:9f:c8:fc:d3:
         01:54:a6:c3:7e:15:47:cd:94:80:3a:a7:cb:c1:65:41:ca:15:
         ed:88:5b:2f:16:34:f1:6d:15:a6:e4:6c:6f:03:aa:01:11:71:
         3f:78:11:9b:65:d4:f5:25:6f:f3:d3:b0:b6:ee:e7:92:35:6a:
         ee:74:a0:f5:61:bf:97:4b:65:20:00:06:24:2c:23:b3:13:3c:
         04:2a:d8:ab:f1:4a:34:a3:ac:9c:e4:af:0d:af:4b:6c:dc:7e:
         45:da:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 21:37:07 2025 by rpki-client