Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/15d23039-fd02-3751-8fad-002eba30d6ba.roa
File:                     15d23039-fd02-3751-8fad-002eba30d6ba.roa (raw, json)
Hash identifier:          mr/ArPgTxJ4hVVADPGHZMGDd1XhZCNN7UQDk8KaHjz8=
Subject key identifier:   C2:06:13:F8:41:67:E0:49:E2:41:64:75:CA:2F:5F:F0:3F:F7:24:2F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AC60DFD27CC622606AF50A00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/15d23039-fd02-3751-8fad-002eba30d6ba.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     10557
IP address blocks:        23.27.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:df:d2:7c:c6:22:60:6a:f5:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=364cc5d5-2744-46ea-a854-93df8b6b54f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:da:dd:36:e5:4b:ae:4a:fa:b4:bd:33:e8:c3:
                    07:cf:65:c6:27:31:d7:26:50:67:0b:f8:c2:37:4d:
                    5e:90:d9:ab:c4:52:f0:52:e7:97:3d:d5:96:b1:77:
                    0b:9f:85:16:4b:fd:0d:ff:51:e9:37:f7:f1:77:fb:
                    15:3b:35:a8:a8:d7:46:ec:19:7f:cf:1d:da:bf:a5:
                    39:f1:fc:00:0e:e7:79:36:ea:d1:13:75:b8:f0:27:
                    6f:97:15:29:50:9e:a7:fe:a5:ef:86:01:1e:3a:42:
                    d0:ad:43:0d:dc:cf:f2:e9:4d:07:ea:09:87:08:76:
                    4f:ab:01:f6:10:ad:a3:49:52:e6:fb:87:da:51:ec:
                    41:0d:46:c2:68:00:6a:e3:5a:ad:20:37:73:88:d7:
                    b6:ca:da:a6:6b:64:0d:cc:72:82:a0:29:30:a2:d3:
                    90:9a:b3:f7:29:99:b1:a0:88:ca:b0:e4:58:6f:d1:
                    e9:22:a4:8b:53:dd:cf:cc:e9:be:15:3f:bb:06:bc:
                    a1:d9:e3:42:43:71:ea:f8:e3:a7:f1:71:76:c6:8c:
                    03:73:28:9e:74:c6:bb:0a:da:b7:8f:76:cd:76:8d:
                    ed:aa:a3:12:9f:f2:97:82:1c:3e:a5:20:65:0c:e1:
                    4a:30:57:a0:b9:ad:36:91:4b:3e:3b:96:d3:68:55:
                    3e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:06:13:F8:41:67:E0:49:E2:41:64:75:CA:2F:5F:F0:3F:F7:24:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/15d23039-fd02-3751-8fad-002eba30d6ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:01:93:28:2a:91:cd:7a:ce:12:09:f5:59:f5:7f:7e:85:08:
         97:1f:32:f0:a4:2d:81:11:c9:bc:52:02:90:2e:75:ff:a6:53:
         67:20:f5:3b:e4:95:6a:c1:8b:28:d4:56:44:2d:19:d8:db:81:
         67:9e:a7:5e:91:bf:b8:d0:58:7c:24:ff:cf:f2:3e:7c:c0:52:
         c6:ec:7b:58:f5:55:b8:7f:90:bb:1b:09:2e:65:d3:8d:32:34:
         05:e8:f4:39:c6:d9:ff:d4:76:26:a7:56:fa:b2:42:9b:ef:a4:
         28:3b:78:66:ba:68:b4:5e:9e:12:05:d1:59:25:c2:1a:71:c7:
         e2:2e:98:d3:0b:89:44:70:eb:5a:fb:e7:e3:3c:b9:90:51:34:
         23:78:95:e2:e3:d5:97:9b:54:d5:07:f1:78:b7:24:e7:b3:b3:
         89:72:c9:41:d7:5b:2b:2a:db:62:4a:b9:fe:52:4a:08:12:54:
         7a:80:d9:75:65:52:d7:35:f0:3e:1e:7b:5d:7f:5d:43:cc:66:
         8d:05:20:70:f9:4b:b2:6b:ed:2c:d7:c5:d4:b7:c9:22:69:11:
         5c:ec:80:db:c9:24:de:b3:18:4b:ee:a4:dc:2e:86:02:84:ee:
         f6:ab:11:59:19:cd:7a:1c:49:5b:22:58:fc:80:0e:2f:49:f3:
         89:f9:5c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:59 2025 by rpki-client