Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/27593cf5-6bef-3c51-8bae-42463edbd0db.roa
File:                     27593cf5-6bef-3c51-8bae-42463edbd0db.roa (raw, json)
Hash identifier:          We5eiqvrOUMkgZq2kZviS6FKIlISXKNjIa1HP5urryI=
Subject key identifier:   E9:DE:E6:2A:C9:81:A3:ED:B5:8D:40:28:A7:9D:C6:2D:44:F3:38:37
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F4328584A5765CAA4C14793B1EBA39F80
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/27593cf5-6bef-3c51-8bae-42463edbd0db.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     396982
IP address blocks:        162.210.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:ca:a4:c1:47:93:b1:eb:a3:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=8686383d-628e-4aad-916f-23ce0bea5e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:4d:05:2f:7c:2b:ba:99:6c:7e:53:ca:e1:
                    04:98:54:63:e1:d6:19:4b:92:4e:da:b8:73:4e:72:
                    d5:b3:89:84:1f:e7:67:3e:c2:77:9f:89:d2:74:ab:
                    37:29:0d:8f:9d:87:21:27:f9:65:70:57:8e:8d:22:
                    d8:9d:30:63:06:cc:2d:48:c6:5e:a4:d5:ba:5e:5f:
                    8d:41:59:b5:90:80:db:e5:c5:54:39:9b:5d:50:3a:
                    be:93:c9:8d:77:77:af:ec:79:06:96:af:4e:41:e8:
                    c5:d9:ce:58:e1:d2:dc:36:76:09:4b:a1:ed:2c:8c:
                    6b:9f:3f:ed:ca:12:42:78:8d:76:ac:58:ff:38:5f:
                    b7:d3:dd:94:ab:62:7a:78:40:0d:63:ae:98:46:7a:
                    7c:cc:39:dd:11:4e:1f:22:ac:5a:2e:eb:65:fd:8a:
                    e8:5b:14:38:be:64:da:8c:9c:e7:9c:1e:45:cd:a0:
                    6c:bf:3e:52:1d:14:fe:97:50:95:d1:c9:ae:a4:d6:
                    0b:65:39:3b:b0:42:6f:35:cc:62:5e:ed:a2:88:13:
                    36:7d:12:ef:8e:d4:e9:7d:6b:b1:83:ca:3f:25:bf:
                    0c:c6:04:e7:48:9e:6e:5f:32:18:5c:71:e9:29:c8:
                    80:3b:5f:51:da:d1:97:3b:66:30:dd:27:31:38:34:
                    ce:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DE:E6:2A:C9:81:A3:ED:B5:8D:40:28:A7:9D:C6:2D:44:F3:38:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/27593cf5-6bef-3c51-8bae-42463edbd0db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:db:8a:d5:6d:06:24:c9:5c:ee:ea:35:4a:75:e5:cc:45:c3:
         12:9b:76:fe:aa:57:d0:a7:3f:9d:de:69:7a:a4:19:ea:cc:b3:
         aa:01:ed:f4:10:a5:15:75:e7:9c:dd:81:2a:ef:84:fe:94:35:
         b4:51:d0:25:f1:8a:1f:1d:c7:6e:96:56:d4:6f:19:1b:44:33:
         cf:78:3f:fa:5f:63:ee:d1:57:91:93:06:e0:8a:e9:f0:96:f3:
         25:44:60:5a:ae:5c:43:b0:c4:0f:93:9f:bb:5d:c2:61:b2:c2:
         1f:ad:33:fd:6e:49:4b:45:bd:72:29:5c:89:11:ba:28:da:72:
         ad:7e:dd:01:4e:26:51:c4:ee:29:53:28:17:d2:7f:91:dc:50:
         d6:a9:75:16:28:00:3c:7a:e2:85:ed:74:4b:d8:dc:b1:08:08:
         fa:e2:c1:1d:15:b5:d1:33:10:6a:6d:22:0c:66:cd:3e:20:7f:
         a6:55:f4:76:ec:dd:a7:ca:59:96:2b:be:11:e0:1b:65:a2:9c:
         f9:df:b4:f8:4a:59:da:50:61:46:cd:ed:51:c4:c2:ab:df:7c:
         1e:ef:d1:33:ca:f4:00:c5:ed:0c:bd:6e:3a:ce:16:1f:7c:4e:
         6f:27:9a:59:84:7c:cf:9e:f2:7b:01:0b:b2:01:ef:88:0c:94:
         88:cc:1b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:29:23 2025 by rpki-client