Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/01b4151a-420f-3e1d-8ff3-f703df70087a.roa
File:                     01b4151a-420f-3e1d-8ff3-f703df70087a.roa (raw, json)
Hash identifier:          dXVtJo2Y5YGeXDO10TnBKZlt/6kYyAY7l42pIhY+t9E=
Subject key identifier:   81:0C:95:AE:CE:12:7A:B1:59:10:DB:C2:23:0C:1D:0D:71:DB:11:F0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847EFEF93090951C06AB4085600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/01b4151a-420f-3e1d-8ff3-f703df70087a.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     44477
IP address blocks:        23.27.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:93:09:09:51:c0:6a:b4:08:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=a10fe8fb-c2cd-4af0-9b8e-917e720451b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:62:dc:2b:a3:ef:1d:a4:59:d5:c3:e6:82:09:
                    1a:14:d2:cb:58:e4:05:1c:2e:9c:55:26:70:9f:0f:
                    61:fc:9b:ab:8e:f3:7b:ca:63:14:36:93:f6:f5:fc:
                    b2:78:f0:7e:11:f1:03:44:00:bc:6a:36:e8:af:f6:
                    b7:79:8f:9b:8b:39:2c:0a:99:92:1f:32:8f:ae:b4:
                    4b:2d:f4:98:16:ae:b4:5a:5c:85:8f:86:58:df:cb:
                    f4:34:01:50:5c:8b:79:03:92:ac:41:cf:c5:86:7a:
                    66:2b:f7:77:ee:85:12:e7:0d:67:ac:32:fa:c6:5d:
                    7d:5f:21:08:4b:ed:db:36:2c:40:f6:a0:a2:61:af:
                    e4:8a:36:1a:5a:69:ec:0e:02:82:69:17:a1:df:1a:
                    8f:67:4b:eb:3d:75:18:75:0d:c7:cd:95:a2:93:e8:
                    3c:ff:ab:d1:06:76:27:46:93:5c:f0:cd:b8:df:73:
                    7c:42:11:e3:2b:30:44:56:ce:a9:6b:ef:36:1e:86:
                    b6:68:5a:45:ca:e9:ac:f0:8d:0f:1c:a9:6e:ff:fb:
                    26:5d:66:51:b6:dd:06:d0:e8:80:72:77:6d:f2:14:
                    6f:0f:85:32:7e:45:6a:02:7c:1a:15:b5:e3:ba:a6:
                    3a:a1:e6:f1:90:8d:a5:57:9d:37:61:c0:b3:18:4c:
                    6e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0C:95:AE:CE:12:7A:B1:59:10:DB:C2:23:0C:1D:0D:71:DB:11:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/01b4151a-420f-3e1d-8ff3-f703df70087a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:5c:33:35:e9:e2:e3:d2:e1:99:38:1c:e6:9d:3c:7f:3c:eb:
         f7:c8:06:ee:19:e6:35:87:80:7f:58:4e:5e:5e:83:5f:4e:4e:
         4b:71:ac:8e:95:18:34:fb:de:e1:3e:89:1a:d6:af:9a:77:5f:
         d0:53:fe:71:20:64:de:db:0a:8d:92:da:d7:1e:b0:3f:6f:97:
         e2:ca:58:0c:70:ee:1c:63:ad:cb:5f:96:6e:1e:4c:6e:ae:a7:
         f4:fc:dd:9b:a1:42:1f:3f:32:83:fc:a1:99:fc:1a:7a:7f:49:
         43:b6:78:a9:e3:62:c4:42:37:63:c8:4e:02:8c:c9:5a:39:16:
         a2:6b:a3:fe:b6:9d:5e:90:8f:ee:25:eb:e2:19:03:c3:f9:4d:
         05:6d:7e:8d:1c:8a:1c:13:0a:e9:2d:b0:19:82:00:9b:4d:9a:
         c2:46:88:2e:5d:f8:5e:f7:3a:01:54:5e:40:c5:b8:58:3c:5e:
         29:fe:da:87:2d:d9:92:08:7e:a9:3c:45:cf:70:67:4a:67:a8:
         c1:a0:a7:d4:a5:90:98:9a:75:22:fe:08:f1:82:be:8f:2d:b7:
         b3:bd:05:ba:22:eb:b5:17:d2:0c:70:e4:06:52:d9:ea:5f:f3:
         e9:b6:58:66:57:da:95:28:de:b4:34:f4:ba:3c:e3:0e:11:57:
         ed:7f:6d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:52 2024 by rpki-client on console-fra.rpki-client.org