Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/191cbfe9-5953-3206-a460-fb8d5c94845d.roa
File:                     191cbfe9-5953-3206-a460-fb8d5c94845d.roa (raw, json)
Hash identifier:          cqUn1I0MMJQSxAyCXO+efuYV0NzsfPaZboHzLNW0Bcc=
Subject key identifier:   7E:6D:49:52:40:7E:8B:8A:1C:F8:DF:FD:45:D2:D1:98:6B:70:40:5F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F63EA1E6DDF7EA66B0EA00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/191cbfe9-5953-3206-a460-fb8d5c94845d.roa
Signing time:             Fri 12 Apr 2024 17:24:44 +0000
ROA not before:           Fri 12 Apr 2024 17:24:44 +0000
ROA not after:            Thu 11 Jul 2024 17:24:44 +0000
asID:                     136787
IP address blocks:        23.27.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:3e:a1:e6:dd:f7:ea:66:b0:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:44 2024 GMT
            Not After : Jul 11 17:24:44 2024 GMT
        Subject: CN=1768e593-991c-4e94-b67b-20120856613a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:98:c3:07:cd:c4:b5:d6:c7:03:0b:f1:d9:b6:
                    44:80:bb:68:ff:08:73:33:be:b0:fe:e5:71:3b:58:
                    c1:26:71:4b:b9:e6:45:2d:87:f3:cc:fa:8c:14:05:
                    8c:7a:0e:c4:af:99:e5:91:a6:01:b9:b9:cb:9b:4e:
                    24:66:47:c3:ec:26:1b:f5:b3:c3:12:d8:61:95:f1:
                    3d:96:19:6e:92:a9:0a:36:c9:fd:ba:82:fd:89:8b:
                    73:68:d8:44:d1:c4:36:8a:4e:01:5d:e9:1a:f0:20:
                    c4:e5:99:bd:61:0a:91:f3:61:ce:e5:eb:0c:e9:9b:
                    de:2d:62:3f:3e:f2:97:9b:af:70:29:10:37:dc:42:
                    25:83:bb:a9:fb:8c:50:5d:03:9f:db:e9:6c:3a:14:
                    3c:bf:e6:e3:27:e1:d1:9e:c9:26:df:db:e4:4c:ca:
                    90:dc:8f:c0:12:a2:cf:9e:e2:82:df:dd:a2:f6:4f:
                    96:65:77:9c:ee:13:9e:ac:d8:12:08:38:8f:e8:b2:
                    c9:59:46:20:8b:4d:33:95:05:59:db:c8:3a:4a:5c:
                    51:64:33:52:61:5e:17:65:b1:48:11:c1:e0:a2:28:
                    2e:e1:90:eb:c3:08:cc:22:3e:41:c1:16:8a:db:71:
                    ae:1a:5a:ec:76:1e:88:87:ac:0c:dd:4c:8d:77:b5:
                    87:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6D:49:52:40:7E:8B:8A:1C:F8:DF:FD:45:D2:D1:98:6B:70:40:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/191cbfe9-5953-3206-a460-fb8d5c94845d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:34:78:b0:24:0f:4c:06:35:f1:47:2b:57:b8:57:5c:db:83:
         1a:77:ca:b8:48:5b:4c:4e:91:b1:26:91:17:1b:e8:24:09:c9:
         78:a7:13:d0:fc:d0:8e:67:6b:c7:26:1e:98:d9:e1:aa:7f:8d:
         61:5d:b2:3f:a8:46:c8:7d:f0:7c:63:85:b4:9e:36:42:18:77:
         12:3f:94:5a:1e:52:d9:d1:97:cc:df:f9:91:0c:a5:bc:b7:ea:
         bd:d9:4f:2a:ec:04:3c:57:6e:4e:be:d8:60:b0:e9:c6:29:53:
         55:59:c7:29:67:db:5f:a1:8e:27:23:e2:66:b2:4a:2b:30:3e:
         05:1a:e0:27:89:38:c0:b2:ce:41:01:b0:e5:ff:ba:93:de:35:
         7f:31:ad:96:61:05:76:9d:f7:3b:65:78:b7:e8:16:ee:21:9f:
         09:39:36:54:cc:db:d4:03:09:08:ff:f7:b8:89:6a:5d:f6:8f:
         87:8c:93:a6:95:2a:c9:4f:8a:4d:d3:1d:73:ac:c0:c4:80:a0:
         65:a5:e2:95:01:69:b1:58:98:3b:18:0e:3b:d6:e1:b4:c9:47:
         47:8d:98:b8:71:8e:82:3b:ba:72:71:be:3a:a6:8f:ab:5a:4e:
         3f:be:f2:f7:6b:32:4a:ac:a6:25:b2:73:77:70:a7:77:bc:5a:
         ca:4b:3d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:37:03 2024 by rpki-client on console-ams.rpki-client.org