Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/27d5eade-d868-379b-8481-25bd8165a052.roa
File:                     27d5eade-d868-379b-8481-25bd8165a052.roa (raw, json)
Hash identifier:          ce1JFDufwHNzgQs+3USx1XFX8/VsKnc/LxZZ8vxB8JI=
Subject key identifier:   51:E6:90:08:4A:CF:C0:D4:B4:5C:D6:D8:E8:A6:91:A3:7E:7D:C8:07
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F43285849CBCF88DCD5174C78D11A6100
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/27d5eade-d868-379b-8481-25bd8165a052.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     3807
IP address blocks:        207.196.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:88:dc:d5:17:4c:78:d1:1a:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=e8ccd46a-2816-458e-bd07-a0f3736b874b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d2:ab:b1:c2:c8:a3:b4:ee:38:e5:6c:b6:af:
                    41:51:27:26:4a:d9:5e:eb:18:eb:84:64:5c:72:e7:
                    76:c6:27:81:0e:f1:e1:73:de:44:db:d5:6b:21:a2:
                    55:d5:b8:38:9d:95:42:5b:a7:e6:4d:73:ed:ba:01:
                    b6:3f:98:b1:31:f9:55:5a:3f:a2:89:6f:d2:1b:92:
                    0d:3a:e7:20:3b:6a:6f:f9:f4:d1:53:25:4a:84:7c:
                    9a:0d:58:04:1a:91:de:d5:33:dd:01:b6:21:4b:7c:
                    5a:f5:40:ae:b2:9a:20:a5:47:06:58:5f:f5:fe:2c:
                    10:13:a2:77:53:ac:12:53:cc:9d:c8:2f:a3:03:63:
                    c4:39:19:f4:71:20:2c:b4:d7:02:f9:91:a5:cf:bb:
                    71:fc:fd:fa:01:fc:29:62:ee:51:db:02:91:d6:62:
                    b1:43:42:c8:95:3f:d9:03:dc:76:e2:e5:1e:49:41:
                    0b:af:fe:1f:83:ff:d0:9c:5d:f8:a8:55:8e:1f:e9:
                    85:74:e7:db:fd:29:7f:ef:ee:35:b5:45:2a:55:1c:
                    69:6a:ea:76:0a:a5:ac:a0:91:43:37:ad:14:bc:90:
                    69:fb:51:c5:26:4c:89:78:aa:1d:04:92:fc:b7:ca:
                    1f:ba:3b:79:43:f7:c6:9b:c8:d2:42:c7:ff:1e:d9:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E6:90:08:4A:CF:C0:D4:B4:5C:D6:D8:E8:A6:91:A3:7E:7D:C8:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/27d5eade-d868-379b-8481-25bd8165a052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:fe:aa:34:57:80:27:51:c8:07:87:dd:a0:a5:7c:15:ce:04:
         1b:2e:48:da:4c:37:2a:f2:16:5d:30:71:a0:86:57:4a:66:63:
         70:51:c7:77:27:8c:cd:cb:ac:44:a1:06:0d:e1:c4:06:77:ee:
         91:54:7a:19:24:b5:e5:b7:a1:92:cd:b5:f6:34:60:25:3e:0e:
         05:a3:df:b6:05:b1:2b:55:73:7d:6c:db:bc:bf:32:e6:b1:7c:
         88:58:a0:d3:31:9a:e9:54:b4:c7:e4:5a:2f:f4:fb:e4:62:50:
         ab:63:2a:27:e1:c1:0b:d6:d8:54:99:88:d7:13:e7:70:a2:bc:
         d2:bc:c4:95:7b:f5:b3:8e:b5:87:a3:50:af:cd:96:4f:83:ee:
         9b:2a:3e:88:09:a5:31:1a:f2:3b:26:7e:53:7e:fa:f4:71:71:
         09:02:36:0a:79:fa:e2:50:80:88:e5:d1:1c:a4:2f:89:8f:38:
         54:dc:28:99:eb:c4:28:64:cc:09:a9:36:8d:2e:0c:44:f3:09:
         8a:56:4d:5e:46:39:f5:27:88:05:67:01:f3:a8:5e:33:82:c2:
         a0:59:5f:e4:d2:8b:41:6b:7f:c2:d1:4c:a0:92:c1:aa:7d:69:
         18:25:ae:c0:65:f1:3d:d9:2f:84:99:a8:07:74:19:01:e2:65:
         3f:3e:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:14:55 2025 by rpki-client