Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/96c3f96c-fa15-3ebe-8307-e0e08190b905.roa
File:                     96c3f96c-fa15-3ebe-8307-e0e08190b905.roa (raw, json)
Hash identifier:          A4snS4AQWeUoQWKFR8b9goGHg2IiPcBLzzytjtOQx20=
Subject key identifier:   EB:CD:55:8E:E8:DB:85:50:AA:E3:08:E5:A0:09:DA:43:CD:C0:1E:EF
Certificate issuer:       /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial:       010D0C9F4328584A4C3B184C10E1AE68EFFA9B00
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/96c3f96c-fa15-3ebe-8307-e0e08190b905.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     62563
IP address blocks:        198.57.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:18:4c:10:e1:ae:68:ef:fa:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=e979de22-df61-4c65-8076-827fb4fa45a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:af:b5:4c:a5:94:9e:a2:e0:a8:b3:5b:82:46:
                    1c:5c:08:09:ad:87:23:66:cc:76:73:ec:f0:f6:d4:
                    09:9b:b3:28:e3:b4:5a:df:11:fc:cc:9c:5e:25:27:
                    05:fa:f1:b6:38:94:64:67:c1:43:de:c4:5e:f9:d3:
                    0d:8b:86:46:43:99:f4:64:27:88:4f:f8:c5:29:7d:
                    2b:24:9f:a0:68:e5:56:7b:e3:87:15:90:39:41:82:
                    e0:97:79:bf:78:f3:69:84:a9:38:85:e0:7f:2d:a8:
                    f0:55:15:b0:c6:b1:a7:a4:26:02:30:b1:74:68:c7:
                    dc:36:5d:c1:30:98:a0:b3:f9:70:f0:82:be:71:45:
                    93:9e:40:a9:69:5e:80:d1:37:36:c8:59:ed:d9:28:
                    a9:31:4f:a1:88:3b:c3:19:b9:94:5e:58:6f:24:3d:
                    22:72:30:6f:9e:3c:ed:23:28:18:08:c9:8d:4d:36:
                    b3:43:85:5d:e0:7e:3c:c8:e9:bb:40:34:bc:59:7b:
                    ad:b0:1c:7d:c6:dc:8e:b8:68:d6:07:1c:c6:70:7f:
                    6d:1f:6a:c2:bd:a5:ec:84:93:4d:65:c5:8e:91:e7:
                    5e:d3:c5:07:2e:68:79:89:f0:f4:0a:18:3a:a8:c7:
                    77:d1:87:11:f9:bb:d2:59:9b:20:b0:a9:0c:00:57:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CD:55:8E:E8:DB:85:50:AA:E3:08:E5:A0:09:DA:43:CD:C0:1E:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/96c3f96c-fa15-3ebe-8307-e0e08190b905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl

            X509v3 Authority Key Identifier:
                keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.57.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:49:a0:04:68:29:14:1b:b0:6a:85:11:fa:77:4f:c6:21:08:
         4b:0f:10:e1:ed:2b:34:67:fe:61:9b:db:a1:e5:19:fd:a2:e3:
         68:ca:ed:d6:0b:02:06:19:b6:10:36:f5:82:f5:48:2f:86:ce:
         f9:ce:f7:8e:0b:91:a9:06:58:75:b2:93:5a:f1:eb:a5:a3:ac:
         64:39:47:e8:71:c5:b5:b8:a1:5c:b0:01:3f:19:26:dd:da:24:
         4e:d5:3e:14:22:38:82:f5:d7:d5:26:d0:88:48:e5:0e:8f:ac:
         00:b5:f3:b2:8b:c4:d0:fd:50:1f:55:4e:0c:2c:4e:fa:e2:13:
         61:e5:a4:da:5e:20:7d:06:68:2f:dc:9b:27:72:22:c9:a7:c9:
         a9:45:b8:d8:ce:4c:88:83:db:8d:d1:54:08:47:3d:9e:90:11:
         01:84:90:ad:42:e2:18:68:ca:f4:2c:36:53:bf:2c:1f:85:1f:
         cf:d0:9a:e0:bd:c2:3a:b6:2b:98:64:25:50:8c:da:e4:d2:9a:
         54:41:7d:ec:54:4a:37:33:30:63:d5:5f:1c:c5:4f:f7:10:f1:
         a2:99:62:a4:db:03:f3:d0:9a:9c:46:0c:9d:2d:4a:3e:68:98:
         fc:98:0f:1b:08:95:0a:fe:8a:db:ef:46:9d:99:0b:b4:bf:be:
         0c:7f:a1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:00:24 2025 by rpki-client