Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/ee5c8804-1692-3b01-8cae-45c923677711.roa
File:                     ee5c8804-1692-3b01-8cae-45c923677711.roa (raw, json)
Hash identifier:          KoSP6pK5RD6BHBvIiBrlqRJkxS7/XlIIVsh7w+Ghqww=
Subject key identifier:   D5:32:9F:A4:31:A2:C6:10:70:50:04:97:E7:35:60:B1:DB:A3:B2:5A
Certificate issuer:       /CN=48e7861e-5414-403c-8268-a7d7b18f405d
Certificate serial:       010D0C9F4328584A00DAC66B71648C9A55E671C0
Authority key identifier: 4F:99:9D:30:47:BA:8A:6F:1D:E0:06:67:BA:BA:4E:D5:1E:7C:42:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/ee5c8804-1692-3b01-8cae-45c923677711.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     20325
IP address blocks:        198.27.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c6:6b:71:64:8c:9a:55:e6:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e7861e-5414-403c-8268-a7d7b18f405d
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=19ee8ac6-cc82-461f-8326-8af76c64b0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ff:fc:f9:03:06:cd:27:48:b8:5d:74:03:85:
                    3d:1c:47:ce:ff:60:6a:ba:42:ec:2a:a6:91:77:e2:
                    7d:af:aa:fd:92:f9:a8:dc:ee:0b:7f:78:34:ee:5e:
                    ef:33:b4:20:74:ef:de:59:c0:27:3b:66:ba:c6:c2:
                    ec:a7:62:32:a7:8f:14:ea:6b:82:80:ce:04:15:5f:
                    a4:3d:85:7e:dc:b2:c3:0a:d7:51:48:f9:25:6e:c5:
                    a1:4b:e4:01:97:41:71:5d:3d:9b:69:83:74:e4:88:
                    11:f0:1b:e3:04:fb:88:28:06:6a:9e:a5:96:81:94:
                    59:79:3a:88:41:34:54:ff:c0:db:58:1b:5f:91:51:
                    ea:22:69:09:b4:5c:40:fd:9c:11:f6:ca:64:29:7f:
                    12:9a:58:16:33:5d:4d:ff:a7:33:24:ab:f0:a4:3c:
                    ce:6c:7d:6b:77:a2:4f:6f:f5:48:30:28:9e:d2:61:
                    fe:7e:b3:a1:af:56:84:83:dc:8d:7a:f8:dd:a1:fc:
                    c0:dc:5d:58:46:79:28:cb:80:48:b3:bf:33:37:49:
                    27:9f:be:48:fa:c1:fc:d3:e7:76:4b:12:51:34:68:
                    66:a4:2f:88:97:1b:4a:70:71:34:1b:43:ed:e3:99:
                    39:74:16:dd:98:4f:c1:63:72:0b:e6:7d:b6:34:c3:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:32:9F:A4:31:A2:C6:10:70:50:04:97:E7:35:60:B1:DB:A3:B2:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/ee5c8804-1692-3b01-8cae-45c923677711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.crl

            X509v3 Authority Key Identifier:
                keyid:4F:99:9D:30:47:BA:8A:6F:1D:E0:06:67:BA:BA:4E:D5:1E:7C:42:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.27.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e9:74:75:dd:80:9b:14:53:e0:01:44:02:6a:e3:f8:6d:46:
         95:cf:bb:a4:61:bc:dc:93:1d:88:17:d5:3a:dc:41:37:b6:e6:
         0a:9a:0e:b0:66:23:20:be:b6:28:ae:f1:83:00:79:28:72:06:
         29:6b:bf:63:52:5c:75:a7:ca:7f:29:d7:22:1d:93:12:23:dc:
         49:08:2c:49:e6:bb:66:44:ae:65:4e:91:f2:1c:6c:6c:4d:89:
         5b:fa:34:30:c2:44:45:c5:9d:f8:2b:bc:5c:67:f4:91:44:76:
         e1:31:be:5d:68:fe:8b:1a:a6:5c:31:2b:c8:eb:10:0d:d3:64:
         e3:05:e4:b1:52:e4:9c:19:5e:71:12:c8:b9:2d:73:69:0c:ce:
         a1:59:2c:f1:2c:b8:82:7c:45:f8:96:f6:21:94:2f:03:72:a5:
         06:96:9b:37:24:e5:7c:d3:6b:df:48:2b:d1:7d:f4:a1:f7:a9:
         f0:4b:cb:6d:22:8e:13:9f:a1:bb:e3:ed:a4:b6:dc:bc:89:7b:
         6a:85:35:c5:14:fa:0d:83:9e:37:c9:77:16:92:d3:99:ae:62:
         dc:da:27:80:5f:ef:9f:75:21:22:d7:4d:35:8c:db:48:a4:74:
         b7:97:92:a1:10:6d:b1:d6:a4:48:50:fc:e1:a4:34:f2:a3:63:
         9e:08:b0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:56:19 2025 by rpki-client