Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/228c7c1c-ef9b-3f98-8178-c517520c65be.roa
File:                     228c7c1c-ef9b-3f98-8178-c517520c65be.roa (raw, json)
Hash identifier:          7SPwFQpsv2un7yicmWue+2L/R/q/t2hQF6e1kxZQ/yk=
Subject key identifier:   8F:AA:60:1A:3D:E1:8D:4C:08:51:A5:84:6F:17:99:00:1E:28:15:CD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584965E9804C932450A5A4ECC860
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/228c7c1c-ef9b-3f98-8178-c517520c65be.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     401152
IP address blocks:        23.27.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:80:4c:93:24:50:a5:a4:ec:c8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=e02d2f49-3c3a-4ecf-8d3a-fa72bced3ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fb:f8:66:56:cd:5f:9a:c3:66:75:77:6f:9e:
                    29:0f:37:f7:e9:db:7f:ed:9a:8c:f8:6c:f3:e8:ce:
                    20:49:6f:ce:55:36:93:9b:df:58:a9:7d:1a:83:2f:
                    89:cc:6d:33:e9:41:df:87:60:98:1c:4b:40:84:e3:
                    5b:74:20:0f:6d:3c:21:df:c6:21:64:a9:49:3c:e5:
                    1c:b7:36:46:94:8d:09:33:2d:cb:18:de:70:f8:cd:
                    c9:f7:89:67:fa:a9:c4:1c:5f:29:0c:25:68:c0:9f:
                    3e:04:2f:12:72:cb:19:ad:1c:21:bd:35:4f:59:58:
                    0f:0c:25:84:94:01:3b:1b:81:33:36:15:3e:d2:f0:
                    4d:78:ce:39:3d:58:ea:f9:ad:55:d8:cd:dd:4b:0a:
                    65:67:0d:95:35:0a:30:1a:df:72:a8:56:f0:d2:5c:
                    2b:04:0f:07:21:72:d2:31:9b:02:3a:ad:c7:f0:d9:
                    23:67:af:2d:55:17:aa:89:95:06:e1:ce:da:1a:38:
                    10:3e:39:13:cd:21:93:cc:19:71:1a:0c:ea:8c:7a:
                    77:72:9e:2a:1c:c9:b7:04:d7:56:da:7f:82:5e:78:
                    cd:0d:d3:1c:19:04:e7:4b:cc:f1:c0:e0:70:a6:a9:
                    6a:2f:e5:34:83:03:17:d4:76:ce:79:bc:ac:94:a6:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AA:60:1A:3D:E1:8D:4C:08:51:A5:84:6F:17:99:00:1E:28:15:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/228c7c1c-ef9b-3f98-8178-c517520c65be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:43:ac:ae:69:ac:09:ee:92:26:24:1c:ff:e6:66:cc:6d:f6:
         cd:6c:3d:0f:7f:7d:16:03:f3:fe:4c:30:34:d7:d8:43:9e:67:
         86:04:8d:51:fe:7c:d6:d0:30:29:d3:db:49:68:95:fe:16:7f:
         16:b2:a1:0d:18:b5:7a:45:0b:34:45:21:75:95:80:dc:0c:02:
         72:0b:df:38:c1:8a:89:18:4e:ce:d9:08:8f:cc:10:5e:c7:c2:
         c3:41:04:dc:4f:23:75:ad:3f:71:e1:9e:06:92:b1:21:a8:cc:
         22:65:ea:be:da:1e:6d:cd:9b:5e:c1:82:fe:cc:87:c6:9b:25:
         69:c4:87:29:08:15:87:dc:ca:0b:fb:71:7b:5b:b4:05:82:f8:
         3f:39:ca:2b:39:d1:4e:62:f0:78:f8:99:46:8f:b3:f1:95:be:
         e5:86:c6:13:ee:be:61:06:87:64:46:4e:74:b8:1a:cd:e8:34:
         b3:4c:44:d1:a6:a5:4c:e6:3f:42:24:9c:2b:55:74:8a:17:60:
         8d:0e:c1:39:13:3f:3e:e1:2a:2d:62:25:82:c2:95:df:f1:f0:
         31:5e:d3:e6:c0:56:36:f2:6a:15:5d:ef:ab:fd:8b:ed:f7:96:
         44:17:87:92:b2:3e:a1:04:cd:c5:a1:92:c6:41:f0:af:52:be:
         03:53:49:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:06:28 2025 by rpki-client