Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/0b27cfcb-f09b-3b45-90d8-a84c60580bc1.roa
File:                     0b27cfcb-f09b-3b45-90d8-a84c60580bc1.roa (raw, json)
Hash identifier:          cLc0dKe3vx3+D6X12tdhDucV0hIK4a0l3C7YljySUZU=
Subject key identifier:   AB:A1:FC:83:A3:C6:5A:C2:C9:E7:80:DC:27:9F:4C:94:EA:CB:FF:F3
Certificate issuer:       /CN=3ebba851-73dc-4c81-9c85-edb63b33b305
Certificate serial:       010D0C9F4328584A1523B2C7EE72AE04B9DF2DA0
Authority key identifier: A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/0b27cfcb-f09b-3b45-90d8-a84c60580bc1.roa
Signing time:             Wed 04 Jun 2025 19:24:23 +0000
ROA not before:           Wed 04 Jun 2025 19:24:23 +0000
ROA not after:            Tue 02 Sep 2025 19:24:23 +0000
asID:                     40523
IP address blocks:        192.41.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:15:23:b2:c7:ee:72:ae:04:b9:df:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebba851-73dc-4c81-9c85-edb63b33b305
        Validity
            Not Before: Jun  4 19:24:23 2025 GMT
            Not After : Sep  2 19:24:23 2025 GMT
        Subject: CN=96387b89-8497-4a85-9e5d-5cf3439b2665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:40:04:96:23:9d:f5:29:15:31:1a:e1:21:
                    8a:e8:3c:a5:d6:4d:78:53:2a:5b:27:3a:2c:95:bd:
                    55:11:17:05:aa:56:ed:04:33:d1:ec:c3:a4:67:cb:
                    2e:12:88:12:99:77:88:a1:c4:76:06:3b:c2:f4:5f:
                    cc:ef:94:9a:5e:77:ee:c3:56:ea:ab:10:0d:c3:c7:
                    e1:76:8a:e2:84:ae:f7:12:e5:aa:72:ca:3f:0e:e0:
                    23:7e:0e:51:81:69:e4:07:ff:09:5b:f9:c8:ee:d0:
                    7e:0c:60:0c:55:31:9e:1c:20:4d:0a:f1:03:35:d0:
                    0d:f1:9c:3b:56:6d:55:4f:b8:6d:b0:5b:6d:0b:d1:
                    e9:33:a5:b4:39:9e:9e:34:f1:97:8d:d1:e8:b8:1d:
                    e9:44:fa:13:23:c9:b3:34:40:36:a8:86:52:20:04:
                    f5:38:a5:71:72:96:fa:86:1a:7f:d6:a0:15:5d:79:
                    9c:28:13:af:b0:05:c7:18:e3:c1:9c:e0:0e:9e:81:
                    d3:c4:ed:93:20:b2:9e:d8:b8:bf:04:c6:60:cb:0a:
                    60:aa:9f:29:bb:13:8d:fc:01:2a:c3:24:f3:40:fd:
                    ba:60:66:41:82:b0:ce:3d:c7:81:03:2d:a3:1d:94:
                    14:f1:33:69:20:e0:35:17:5d:b4:01:51:dc:8f:cd:
                    f8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A1:FC:83:A3:C6:5A:C2:C9:E7:80:DC:27:9F:4C:94:EA:CB:FF:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/0b27cfcb-f09b-3b45-90d8-a84c60580bc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl

            X509v3 Authority Key Identifier:
                keyid:A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:29:b7:b3:58:9f:d6:b2:96:19:d5:93:49:8c:3a:04:c7:ae:
         73:06:5f:44:56:c3:ae:2c:28:4f:94:c0:aa:fe:f4:d1:d1:4e:
         63:50:f6:8a:7a:19:f4:ac:5b:55:de:81:b3:91:67:31:e7:7b:
         11:d5:27:3f:4a:0d:c5:bb:e7:54:2d:e6:6d:69:92:e6:94:89:
         04:4b:f3:bc:13:75:07:d5:bf:fa:c9:db:1a:00:61:da:fb:21:
         7f:d5:42:cd:d4:0f:6d:e3:57:0a:07:76:e1:13:31:28:d7:02:
         26:1f:8d:d7:92:43:a3:64:d2:41:84:62:6a:5e:df:d4:27:35:
         7c:73:fd:33:e2:2d:d6:ae:2f:1c:73:64:3b:b4:ec:c9:13:32:
         db:ca:24:7b:6f:30:54:4f:5b:6c:c4:f6:0e:20:64:6b:dc:c3:
         55:82:09:f4:44:67:3e:5f:a8:76:eb:bf:91:ae:23:6c:17:d0:
         85:f0:16:b1:88:a8:70:3a:8c:d9:6b:fb:09:fa:1c:02:a1:19:
         60:50:ca:a9:a0:57:8b:62:da:f5:4f:28:b8:d9:36:2c:3f:2d:
         36:51:7a:ca:a2:5a:f5:06:85:66:6c:48:cd:1b:ff:80:05:be:
         75:73:58:6d:7e:dc:75:e8:0b:4f:05:22:2a:6c:da:b2:1b:eb:
         a9:94:e9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:15:58 2025 by rpki-client