Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/182334f2-1b99-35c3-9d0f-ddb4035845e9.roa
File:                     182334f2-1b99-35c3-9d0f-ddb4035845e9.roa (raw, json)
Hash identifier:          Te9To8jR+OBPGlQtENd3sq2FOvLcLGD1oBlIoHvzVBc=
Subject key identifier:   CF:B8:A5:C1:2E:E5:FE:1E:60:8F:7C:70:72:30:A9:9E:56:6C:EF:F7
Certificate issuer:       /CN=bb6338e8-3b98-45c0-936a-f7532d14c16b
Certificate serial:       010D0C9F4328584A3A1575C107EFE1C58FB662C0
Authority key identifier: 34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/182334f2-1b99-35c3-9d0f-ddb4035845e9.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     38304
IP address blocks:        207.179.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:75:c1:07:ef:e1:c5:8f:b6:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb6338e8-3b98-45c0-936a-f7532d14c16b
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=aec4569b-bf77-4564-8e2d-2e2a99bcc3e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bc:b4:50:24:8d:98:30:ab:f9:23:75:e8:05:
                    8e:9a:dd:0f:be:6c:54:7a:b6:ac:ed:02:ff:cd:fa:
                    f3:2c:27:80:31:08:33:bf:0d:3c:ce:42:11:13:e9:
                    9f:c4:56:c2:14:65:3c:cf:f5:13:e7:1d:e4:50:1f:
                    e2:89:43:e7:9b:14:56:fc:49:59:05:ff:64:db:10:
                    dc:f7:31:8d:f3:40:87:3e:40:af:0f:f7:31:c7:79:
                    50:e4:57:86:00:67:59:80:26:6d:7d:89:8c:7f:9d:
                    90:e9:10:d3:f4:ff:45:e3:0c:72:1c:a0:0d:03:51:
                    b5:90:4c:28:56:88:e2:3a:1e:74:dd:88:93:70:86:
                    b5:3c:13:4b:9c:26:76:96:5b:30:ec:f1:a2:fc:5b:
                    7e:21:de:ca:ea:de:34:51:d8:7c:4d:98:8a:cc:9a:
                    17:82:17:9b:92:93:95:fe:16:ca:7e:64:d0:81:33:
                    74:47:56:8d:87:3f:c4:2a:11:fb:c2:43:95:ba:46:
                    89:fa:ba:54:e2:04:d8:d0:44:c5:ca:8e:7f:09:11:
                    1a:4c:f4:cc:c6:72:3e:27:53:b6:68:df:b4:25:8f:
                    83:5c:8f:90:54:7e:2a:b7:e5:15:cb:8e:a0:b3:2d:
                    3b:2a:d9:2a:26:9f:de:fd:e7:07:5a:f0:65:da:f1:
                    4b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B8:A5:C1:2E:E5:FE:1E:60:8F:7C:70:72:30:A9:9E:56:6C:EF:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/182334f2-1b99-35c3-9d0f-ddb4035845e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl

            X509v3 Authority Key Identifier:
                keyid:34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.179.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:f6:41:8b:86:76:7f:0b:28:41:98:5e:53:23:2b:78:5a:e7:
         b9:47:b7:19:17:61:62:e5:30:e8:c0:19:0f:2d:04:5c:18:fd:
         5f:ca:f0:27:9c:ea:3d:cd:39:bf:b3:63:8a:3a:d4:68:76:ea:
         d3:11:bf:75:12:a0:8a:27:bd:b7:3a:e4:28:a0:21:55:b7:e9:
         a7:f2:df:4d:8f:60:d5:7a:35:dc:9d:58:36:d7:fa:66:2f:d3:
         d1:b5:fc:b0:c7:78:19:b1:84:4e:17:56:1d:0b:77:68:a2:fc:
         18:87:17:cd:c9:10:5b:6f:05:3e:6b:8d:20:83:b6:2e:18:df:
         b9:33:20:bd:dd:0f:c6:11:85:24:7f:90:9f:33:52:d4:67:cd:
         f3:e4:29:b2:ab:92:a4:b0:9e:ed:06:3c:b0:24:d0:58:fa:f6:
         0b:b9:55:bc:f7:9d:37:7e:2c:74:6c:33:d9:57:36:ac:42:36:
         c0:c0:fd:c9:eb:23:c0:d9:c2:ff:72:cc:b4:cc:b3:3d:71:d9:
         0a:93:5b:d9:fb:5c:1e:a5:1d:7a:f4:6a:a5:4e:a9:24:e6:ca:
         aa:be:3c:1f:5d:b8:bd:45:a5:4d:4f:59:cc:41:16:1e:64:28:
         f0:bd:1f:dc:be:02:68:7f:08:42:93:26:f5:15:fb:41:56:5b:
         7f:1c:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:00:42 2025 by rpki-client