Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1eee8614-af6a-31bd-8104-e06ea5920c95.roa
File:                     1eee8614-af6a-31bd-8104-e06ea5920c95.roa (raw, json)
Hash identifier:          IGX28oR3eb4wvA2KTO23g9R357+s7B0VZBAw8RQHmeU=
Subject key identifier:   31:6F:A9:E3:2B:F2:B8:29:5E:04:85:9F:C5:9D:88:12:E4:0E:16:F1
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AC60DF70DCF78E0F8CE33DD8
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1eee8614-af6a-31bd-8104-e06ea5920c95.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     7922
IP address blocks:        23.27.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:df:70:dc:f7:8e:0f:8c:e3:3d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=a6f0d8e1-6a88-41f2-9393-f799c96598c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:34:cf:32:14:33:59:83:25:af:86:15:b7:53:
                    62:2e:34:7c:21:25:b4:9b:f4:42:0f:94:25:5e:1d:
                    c2:90:88:04:49:fd:d1:03:ef:6a:88:8b:47:f6:73:
                    c6:19:fd:0e:2f:cb:bb:22:21:10:42:07:74:24:e8:
                    9a:f0:64:1c:ea:f5:25:ec:24:86:2b:f6:f4:a7:aa:
                    9e:41:98:f7:ce:11:69:30:20:b9:f4:21:ee:8f:00:
                    14:9e:53:23:e9:cf:b5:57:58:9e:00:3f:26:82:fd:
                    c8:39:77:f8:55:f9:69:77:40:2f:20:1c:75:19:99:
                    ae:05:bf:a6:f6:7c:be:5d:59:76:a3:2f:6c:50:8c:
                    42:ff:fa:89:ae:a5:62:cf:ab:1c:b8:0c:15:63:2b:
                    24:f4:7e:d8:6b:3e:d3:5b:21:da:cc:06:9f:34:34:
                    68:e2:5a:af:7b:4c:4f:d8:4b:0f:d2:7f:9e:46:04:
                    1b:df:a9:fa:be:4c:58:69:95:f1:9f:6f:f4:17:88:
                    20:c3:b7:84:39:0b:73:fe:64:30:1d:6a:cd:df:a1:
                    70:40:9e:6e:24:a2:87:14:c0:ee:92:8c:8e:7b:65:
                    39:b0:2e:77:db:56:02:e7:34:1f:29:6b:73:27:b3:
                    f5:9d:05:e4:ce:34:c4:9a:03:34:27:da:a2:54:43:
                    de:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6F:A9:E3:2B:F2:B8:29:5E:04:85:9F:C5:9D:88:12:E4:0E:16:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1eee8614-af6a-31bd-8104-e06ea5920c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:4f:ee:77:34:46:2b:7c:d6:b0:f4:d6:54:cd:59:96:03:76:
         b9:fe:e2:7f:53:50:59:f5:d1:ee:c1:99:88:6f:eb:29:7e:e7:
         15:10:28:a5:b1:06:94:ee:80:e7:ff:48:82:ab:ab:0b:c3:63:
         a9:fb:9c:e4:51:08:51:2b:d7:2e:0d:84:9d:a8:b0:cb:16:72:
         01:e3:70:61:f1:cb:1a:64:14:c2:eb:a4:a6:98:4f:ee:36:ed:
         8e:b3:c4:5c:b1:09:f2:4d:a3:e3:88:af:58:8c:56:1b:bc:3c:
         9b:fe:9c:37:85:78:f4:70:64:93:8a:92:d2:4e:99:81:49:73:
         c1:0c:4e:17:4f:d7:ed:1b:14:20:35:8b:de:62:50:a3:0e:c9:
         3e:7a:20:26:f0:f7:cf:56:5a:84:db:7b:0e:9f:ba:42:52:b6:
         d3:64:6e:0d:58:9a:da:23:37:2a:b1:e8:14:8e:5d:8c:2a:20:
         84:a8:24:fb:c2:67:e5:cb:c8:bf:e8:0a:fb:03:80:61:d3:70:
         a3:59:90:3b:00:51:da:57:25:78:3e:78:a0:71:f1:54:69:75:
         52:d0:a9:de:1f:a7:f3:6c:68:fa:54:00:f2:db:a3:83:5c:c3:
         dc:67:7c:09:b5:95:7a:37:b8:a9:ea:82:26:d7:5a:3c:37:ea:
         a6:73:ce:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYN9w3PeOD4zjPdgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk
YTZmMGQ4ZTEtNmE4OC00MWYyLTkzOTMtZjc5OWM5NjU5OGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDTPMhQzWYMlr4YVt1NiLjR8ISW0m/RCD5Ql
Xh3CkIgESf3RA+9qiItH9nPGGf0OL8u7IiEQQgd0JOia8GQc6vUl7CSGK/b0p6qe
QZj3zhFpMCC59CHujwAUnlMj6c+1V1ieAD8mgv3IOXf4Vflpd0AvIBx1GZmuBb+m
9ny+XVl2oy9sUIxC//qJrqViz6scuAwVYysk9H7Yaz7TWyHazAafNDRo4lqve0xP
2EsP0n+eRgQb36n6vkxYaZXxn2/0F4ggw7eEOQtz/mQwHWrN36FwQJ5uJKKHFMDu
koyOe2U5sC5321YC5zQfKWtzJ7P1nQXkzjTEmgM0J9qiVEPe2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDFvqeMr8rgpXgSFn8WdiBLkDhbxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWVlZTg2MTQtYWY2YS0z
MWJkLTgxMDQtZTA2ZWE1OTIwYzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJhP7nc0Rit81rD01lTNWZYDdrn+4n9TUFn10e7BmYhv6yl+5xUQKKWx
BpTugOf/SIKrqwvDY6n7nORRCFEr1y4NhJ2osMsWcgHjcGHxyxpkFMLrpKaYT+42
7Y6zxFyxCfJNo+OIr1iMVhu8PJv+nDeFePRwZJOKktJOmYFJc8EMThdP1+0bFCA1
i95iUKMOyT56ICbw989WWoTbew6fukJSttNkbg1YmtojNyqx6BSOXYwqIISoJPvC
Z+XLyL/oCvsDgGHTcKNZkDsAUdpXJXg+eKBx8VRpdVLQqd4fp/NsaPpUAPLbo4Nc
w9xnfAm1lXo3uKnqgibXWjw36qZzzr8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:25 2025 by rpki-client