Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/22cb1538-7682-3c6c-844c-8163f82caffc.roa
File:                     22cb1538-7682-3c6c-844c-8163f82caffc.roa (raw, json)
Hash identifier:          tMYJIEoGHDgeme/5zknh125XvLAoD8QKGiYq9FnIbas=
Subject key identifier:   BE:68:C8:F4:5F:F4:49:CB:B0:76:B5:B3:5F:59:43:84:7C:14:F8:4E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AC60DF294FBF93414169C940
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/22cb1538-7682-3c6c-844c-8163f82caffc.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     149440
IP address blocks:        23.27.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:df:29:4f:bf:93:41:41:69:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=f76f3792-3524-4c31-b71c-52576c3488a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:34:e1:3c:2a:11:24:44:1e:a5:e6:d9:94:
                    41:cc:3c:8b:c8:2e:6d:1b:7b:2a:16:af:63:a3:69:
                    35:2c:b9:71:fd:2a:fd:5c:70:4c:63:ac:51:9c:39:
                    14:e9:f8:c4:94:a1:6c:43:19:a0:ce:71:ee:8a:b3:
                    5b:42:78:8e:bd:99:c6:a6:67:08:dc:44:32:05:5d:
                    95:fd:0e:68:b7:45:94:87:1a:2f:6f:6e:8a:82:89:
                    2b:ea:4b:8f:92:50:62:63:af:6b:c4:e7:9f:16:ad:
                    9d:9a:f2:fb:70:4d:c6:4b:bc:a0:a6:1e:77:b5:c2:
                    90:6f:dd:34:6f:b2:d7:6c:c9:5b:08:30:a4:18:46:
                    73:09:a4:a1:a2:8f:e0:a2:61:93:e1:74:ec:2d:8c:
                    ef:ac:c5:30:ea:7f:50:0f:b1:29:3a:51:f5:40:c8:
                    34:e1:bd:05:b2:32:17:37:ad:f5:b3:6f:74:34:37:
                    1f:0c:c5:14:4b:cc:e2:15:87:62:5d:eb:6d:e5:4b:
                    73:b3:b5:f3:65:4a:77:bf:0f:89:95:c6:4e:9d:e6:
                    ef:d9:f4:4a:13:b3:71:11:c2:7e:ec:c8:44:8a:a4:
                    21:65:0a:41:81:31:b3:d4:47:7f:de:9c:00:30:c9:
                    51:1b:38:e8:cd:dc:9b:00:11:58:7b:4b:63:04:8c:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:68:C8:F4:5F:F4:49:CB:B0:76:B5:B3:5F:59:43:84:7C:14:F8:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/22cb1538-7682-3c6c-844c-8163f82caffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:bb:a6:16:05:cb:e7:7f:cc:49:d3:72:6b:d9:0d:0a:b3:7d:
         96:52:e8:77:6c:54:e3:9c:c7:31:c8:df:ce:e9:e5:af:77:eb:
         f3:23:98:9d:86:8e:f6:f2:a8:0d:11:c7:5e:11:2a:7a:6e:6f:
         d8:20:ca:bc:d4:02:0d:7f:43:0f:d5:d9:12:b0:24:19:02:37:
         a4:0f:1a:71:e6:9c:c5:cf:5a:f4:bf:e0:c1:a7:48:b1:d6:13:
         58:74:1e:62:a8:cf:cd:35:b2:e3:34:8c:61:c5:d9:2e:1b:c9:
         58:45:b0:6b:0b:93:16:81:85:36:90:9f:57:f6:92:0e:6d:e3:
         97:e1:9b:5b:2a:2e:05:0e:bf:99:c0:22:00:4e:e2:6d:86:c3:
         b6:af:97:5c:b7:74:f0:d0:2d:1b:1c:da:23:cb:66:7c:7a:21:
         45:cc:fd:80:68:a4:05:74:63:8f:db:72:11:65:2a:d7:e4:88:
         9e:c9:4a:4d:ea:e1:36:d3:5a:49:ca:ed:db:c6:7a:11:98:1a:
         b2:35:db:8f:fa:d7:82:c6:57:76:74:bf:30:66:26:dd:25:a6:
         a5:e6:5c:8f:be:53:de:c8:d0:c7:6e:8a:83:46:1f:de:cb:b2:
         0c:ab:03:84:a8:c1:96:ca:e5:ab:8c:9e:82:73:71:eb:32:2c:
         66:c3:00:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:14 2025 by rpki-client