Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7964dabd-5753-3127-8270-5a7b659dee9f.roa
File:                     7964dabd-5753-3127-8270-5a7b659dee9f.roa (raw, json)
Hash identifier:          SCrYJkhLpXeQJEYxBzGhMIspv1+gdtrh/ODtwK59adM=
Subject key identifier:   37:E4:33:A6:68:0B:30:71:BF:ED:79:37:2C:82:87:92:C1:D6:47:82
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A4BA3511147A709744427D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7964dabd-5753-3127-8270-5a7b659dee9f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        173.27.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:35:11:14:7a:70:97:44:42:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=d94fd7ce-37dc-4464-a265-f72494e2fa04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4a:b8:eb:9c:3d:83:6f:71:b7:9b:35:49:a1:
                    77:24:ae:4c:b7:a5:02:2c:78:94:ff:fe:b1:f2:d3:
                    0d:46:fa:73:ac:86:2c:61:e7:90:e5:fe:ac:73:db:
                    7c:f8:0a:85:fc:4f:4b:31:55:9a:ac:01:90:64:61:
                    7f:17:a9:b6:1e:39:57:58:d5:d8:09:5a:ed:40:3a:
                    51:3d:2b:d3:ba:86:b2:52:d3:7c:88:16:55:e5:b8:
                    a4:85:f2:51:14:7a:db:24:76:28:ff:81:22:80:c5:
                    c2:a2:9d:14:fa:63:17:5b:69:c7:e2:3f:25:00:a7:
                    79:48:e0:aa:26:fc:01:44:24:93:f1:d5:b0:07:c8:
                    9e:12:28:c9:89:2f:9c:94:89:ca:e0:1f:ab:6f:f9:
                    8d:2b:85:68:33:d8:fb:ce:0a:fc:d1:4a:f9:eb:50:
                    80:88:da:66:3b:51:a4:26:b9:56:19:41:ee:73:b5:
                    35:aa:85:14:42:66:48:52:3f:21:9f:7e:4a:60:c2:
                    26:12:8c:7a:fa:1e:af:0d:14:93:7d:ed:e6:4e:6d:
                    ca:23:c9:b0:c6:dc:75:bc:98:e5:10:63:d3:6e:17:
                    61:f8:3a:bb:38:6a:b5:9e:44:7a:0b:fc:9e:56:88:
                    0e:d5:36:f1:13:ec:1b:f8:f7:b1:0a:ee:1a:c9:05:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E4:33:A6:68:0B:30:71:BF:ED:79:37:2C:82:87:92:C1:D6:47:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7964dabd-5753-3127-8270-5a7b659dee9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:76:39:61:e2:6b:2c:02:f6:fc:47:d5:9d:23:19:a9:d5:a1:
         d9:f1:fc:70:ac:5f:9b:91:87:fe:1f:69:da:57:cb:74:91:4d:
         2e:7a:76:a5:ac:42:70:fc:d2:c8:fd:25:cb:ae:e8:bb:7d:72:
         1f:3b:ee:97:f9:1c:e3:60:d0:38:99:62:63:a6:9c:8a:7e:0e:
         60:f3:dd:57:b3:a5:fe:5f:59:df:7f:fd:f8:99:1f:7e:21:eb:
         75:6e:64:f5:07:e4:aa:48:3e:4f:4b:5e:37:65:4d:ea:de:cd:
         16:a2:1b:c6:d6:4a:f5:38:b5:41:82:ff:f1:27:6c:5c:a7:05:
         ac:ae:15:28:75:c2:45:8b:da:62:51:eb:90:01:6d:62:ef:23:
         ee:40:59:bc:89:37:44:a6:0a:c0:03:06:04:52:3c:3c:f3:bb:
         8d:6c:30:27:6c:8b:33:dd:c6:73:72:16:03:88:88:c2:44:df:
         e5:6d:4f:88:c8:32:e9:33:ed:f9:cd:cc:3c:19:e9:44:22:13:
         41:f7:b7:f9:74:c9:6f:c4:3a:31:e7:c0:3b:e7:ef:15:67:c6:
         1d:56:ed:ea:1b:a6:f7:4e:a1:20:e3:64:3b:b8:f0:78:25:56:
         6e:dd:e3:6e:3e:77:82:0a:76:f3:57:12:97:b9:e4:b9:ae:1e:
         b3:02:53:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:48:21 2025 by rpki-client