Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/27d844c1-cb4b-3176-878c-d014e29db089.roa
File:                     27d844c1-cb4b-3176-878c-d014e29db089.roa (raw, json)
Hash identifier:          Y/c4VoNoqw/vlKW6pE9sTN8uhcgsO2JBq9K02PCUg2M=
Subject key identifier:   68:41:5D:DB:5A:F5:DC:84:68:E7:38:DA:85:5B:2D:CB:90:90:B8:09
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B1C3704E1931A5258E6527700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/27d844c1-cb4b-3176-878c-d014e29db089.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     397223
IP address blocks:        192.100.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:04:e1:93:1a:52:58:e6:52:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=7f8bb076-8aa9-4d3a-9fca-253c6306947c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:32:04:f4:f7:d4:77:5b:95:19:e3:b9:b1:
                    c6:4d:52:ac:dc:78:f9:d0:98:5f:ba:0a:79:e8:fa:
                    1b:ae:7c:33:34:38:73:70:20:e0:45:35:a9:fa:74:
                    a7:62:0f:f0:52:3c:11:08:e4:fa:40:1b:05:86:f2:
                    8b:aa:7e:d4:11:37:76:98:fe:9a:0f:e9:6e:02:3b:
                    e7:53:57:85:97:b6:93:3d:89:be:9a:20:2c:be:70:
                    dd:0a:4f:54:94:4d:d6:db:ca:38:38:c9:2f:6e:e3:
                    ec:14:99:e7:75:6a:c3:70:1f:58:09:47:88:29:db:
                    c4:ad:9a:a6:dc:b4:03:c3:9a:51:b0:30:05:62:45:
                    8c:4e:fb:51:8c:e7:e7:f2:bf:9f:c3:49:43:87:8d:
                    4c:fe:11:52:94:37:86:02:df:92:32:cd:3a:9f:1d:
                    ef:6b:86:20:a3:f3:68:fb:85:3f:28:e4:5a:14:97:
                    dd:bc:e5:cd:73:d7:42:2c:77:4e:59:88:e9:af:20:
                    8e:68:bf:7d:bb:1b:be:ea:f6:51:ed:38:1b:ea:35:
                    70:d8:b1:73:90:65:e6:65:b9:a1:dd:98:09:ef:15:
                    eb:42:d2:be:f2:a0:65:79:08:19:8d:69:da:2c:c4:
                    28:85:20:55:36:36:09:96:9d:a1:26:42:d6:88:b0:
                    05:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:41:5D:DB:5A:F5:DC:84:68:E7:38:DA:85:5B:2D:CB:90:90:B8:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/27d844c1-cb4b-3176-878c-d014e29db089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c5:03:d8:8f:f1:79:81:59:74:d9:a1:3f:ba:36:6c:92:d9:
         4d:83:4d:a1:3e:46:41:13:dc:35:7d:67:c6:bf:4e:2b:53:0c:
         49:e9:90:70:ad:c4:39:bf:aa:17:a0:11:4e:cd:7a:16:d2:56:
         e2:6e:6d:64:35:0a:11:24:fe:f5:86:20:fc:05:0b:38:53:01:
         75:96:3b:7b:f2:e2:ca:8d:df:9d:1c:7c:d3:d5:30:fd:0c:fa:
         cc:fe:86:bd:71:7b:d0:2e:ef:5d:df:f4:68:96:90:f7:74:45:
         38:35:b2:1b:27:ba:a0:66:ea:e2:2d:b8:ae:4a:d6:fa:c1:2a:
         24:75:10:d5:86:03:c9:3c:21:b2:06:ab:69:bb:4e:7f:7f:7f:
         05:e7:03:76:a7:cf:af:46:43:6b:0f:7a:7f:fa:4e:73:4f:5b:
         18:c5:6c:22:e6:1d:65:b1:ed:67:52:91:94:ad:7a:d2:61:5c:
         bc:48:57:0a:8a:ed:17:f4:04:b7:68:3f:86:78:ba:0b:94:1d:
         8b:e5:e0:90:e9:7e:36:53:ee:68:68:08:ef:18:14:14:43:ef:
         53:0a:74:e7:f3:d6:8d:bc:4e:c1:4a:65:4c:2a:ec:65:1f:78:
         ff:d9:92:85:17:0e:cd:08:db:2e:9f:6d:a9:fa:9d:52:a2:3e:
         83:bc:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:20:17 2025 by rpki-client