Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/27d0fe61-8a76-3748-b97b-0f7fb9925e2b.roa
File:                     27d0fe61-8a76-3748-b97b-0f7fb9925e2b.roa (raw, json)
Hash identifier:          wHAIPB1w3j9Eu25h71SCUwOYS2sLNEjwy+NS7xDyvRU=
Subject key identifier:   57:E3:F1:BD:54:6B:48:7A:88:C6:7C:F5:18:EC:CA:F3:CE:0B:73:AF
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F432858498E648B97B60DB5D8E63EBA80
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/27d0fe61-8a76-3748-b97b-0f7fb9925e2b.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     32771
IP address blocks:        198.241.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:8b:97:b6:0d:b5:d8:e6:3e:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=64e7891e-307e-471b-9caf-ef08e17460af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:27:0e:3d:a6:6f:d9:5b:23:56:dd:bf:8c:15:
                    d4:2e:4c:ca:0e:f3:7f:20:db:2d:db:a5:99:8c:a7:
                    b1:6d:85:6d:96:8c:ec:cd:f8:3a:24:ad:23:db:a0:
                    77:e4:98:d6:c0:f9:e2:5d:1f:21:a9:c0:9b:d0:71:
                    21:51:5f:ac:0d:b4:b6:35:1e:66:60:d2:ba:7a:60:
                    e3:ea:f7:94:ed:5a:9b:c1:c1:3d:eb:f6:ec:ee:8a:
                    7b:81:7f:19:ee:32:f6:54:e9:b6:9d:b2:b7:8d:d3:
                    4f:24:37:92:de:1f:29:7c:26:f6:93:90:4c:b5:26:
                    d7:24:fb:18:e3:1c:36:18:3c:20:54:15:6d:de:ea:
                    b4:c4:52:7f:05:b8:a2:b0:d1:7c:7c:85:72:7a:ab:
                    66:f3:b6:99:fe:54:55:ec:6d:88:dd:7d:06:32:a0:
                    5b:02:2d:57:89:73:cd:e3:56:37:ba:f6:96:eb:89:
                    81:53:43:5a:56:2f:5e:ba:b1:c5:57:de:13:d7:45:
                    75:22:b4:5e:03:c0:cd:42:8a:13:3c:f8:81:cf:f1:
                    4b:b5:48:6a:ba:4b:5a:ea:3b:2e:72:20:98:85:18:
                    d8:62:9f:2e:cd:38:9f:12:08:44:4c:98:ba:44:84:
                    fd:53:e1:69:2c:60:54:e1:ae:d5:98:12:d5:a8:db:
                    24:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E3:F1:BD:54:6B:48:7A:88:C6:7C:F5:18:EC:CA:F3:CE:0B:73:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/27d0fe61-8a76-3748-b97b-0f7fb9925e2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:83:69:c5:29:96:b4:f1:6d:00:87:5a:c1:96:09:7d:62:9c:
         3a:45:65:52:e2:f1:09:d4:34:79:20:85:4e:5c:1c:d5:96:44:
         f8:9b:03:c5:04:b7:05:f5:c8:5d:de:32:0f:4b:75:03:45:c6:
         13:5b:fe:9f:ea:21:eb:d4:3d:84:ba:25:46:d5:a2:56:08:d7:
         f2:9d:b8:f7:65:48:5a:97:82:40:2e:fd:f2:6a:e0:c5:62:e4:
         c2:0d:b3:01:23:8a:6f:93:5b:30:ba:60:2c:4c:01:e8:12:6c:
         9d:6a:2b:c6:81:36:cb:15:1d:06:40:ce:f7:d2:e8:44:7d:3c:
         6d:0d:89:13:be:70:a5:d9:06:c2:74:b1:7f:08:bc:f3:43:82:
         8d:57:a3:45:3a:18:76:0b:03:91:d2:8a:02:cf:6f:36:c3:79:
         ee:3a:ab:04:04:87:a0:ae:14:df:90:b6:36:12:72:40:be:e7:
         21:65:97:06:88:9c:78:7c:6c:38:2a:46:60:11:91:08:24:90:
         c5:fd:29:7c:da:78:45:d7:51:74:73:36:8b:a0:4d:05:b6:a0:
         f7:8f:35:ca:59:f8:47:bc:c1:56:c3:98:36:0a:17:09:80:c9:
         69:0b:ec:48:e6:ab:7d:16:74:b4:be:aa:f1:27:b0:dd:2d:fd:
         b0:9e:cf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:28:46 2025 by rpki-client