Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/236a91f8-b3e1-3a79-a4f7-78c8a4a4c40b.roa
File:                     236a91f8-b3e1-3a79-a4f7-78c8a4a4c40b.roa (raw, json)
Hash identifier:          kfvFqraoGb2syxy/pHkJxHuZ5+6VLTqOdPizFTRMTgE=
Subject key identifier:   01:A1:8E:CA:8D:37:47:06:B2:31:F5:A7:19:D1:10:DE:FD:48:60:66
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847A66CA31D260724F6E8C7E380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/236a91f8-b3e1-3a79-a4f7-78c8a4a4c40b.roa
Signing time:             Thu 24 Oct 2024 18:03:02 +0000
ROA not before:           Thu 24 Oct 2024 18:03:02 +0000
ROA not after:            Wed 22 Jan 2025 19:03:02 +0000
asID:                     401152
IP address blocks:        23.27.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:6c:a3:1d:26:07:24:f6:e8:c7:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 24 18:03:02 2024 GMT
            Not After : Jan 22 19:03:02 2025 GMT
        Subject: CN=e27f3384-a813-4159-9385-a816f6b7f3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:40:b2:d7:7a:4a:b2:e9:55:0f:db:60:d2:
                    9b:25:38:9f:76:9b:86:ec:44:ac:1d:02:0d:5e:e0:
                    4f:e5:77:b5:55:d4:40:dd:5a:26:e7:21:30:b1:b4:
                    79:db:c1:33:ce:9f:47:84:f4:4d:f9:4e:c8:30:fd:
                    7b:2e:00:77:17:9e:fd:81:da:53:18:2d:3b:bf:cf:
                    01:82:84:03:a4:2b:e0:be:f6:e5:df:23:be:1c:2c:
                    cd:fd:fb:3d:c9:04:c8:7d:a5:c8:08:bb:da:48:8c:
                    f3:43:ba:af:b9:68:3a:e0:b0:99:31:1a:dd:b2:60:
                    8e:ce:b0:1c:4e:4e:85:59:3a:75:da:03:e3:f3:df:
                    b7:31:84:db:9c:a0:c3:55:af:cb:ce:09:72:e3:52:
                    36:4a:a5:a6:b4:57:e4:b3:9b:76:1c:06:87:b4:e4:
                    47:61:24:95:6d:43:d4:5b:33:6c:32:5a:8b:ba:cd:
                    1d:bb:64:52:86:15:2a:f8:e6:23:17:71:d3:7c:62:
                    8a:0e:c9:b0:89:ca:23:52:4d:ab:56:c2:72:aa:2f:
                    b5:c6:bf:b0:cb:51:92:61:f3:7a:34:91:55:f4:a2:
                    0d:12:f9:cf:e5:2c:78:ca:53:af:23:01:7c:85:85:
                    05:fd:43:b7:1e:33:ec:57:be:00:f2:b4:24:c6:a9:
                    2f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A1:8E:CA:8D:37:47:06:B2:31:F5:A7:19:D1:10:DE:FD:48:60:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/236a91f8-b3e1-3a79-a4f7-78c8a4a4c40b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:3a:25:f3:32:cb:03:87:2f:6e:58:66:86:c8:7b:33:32:87:
         d3:6a:8f:f2:42:78:d7:e5:31:b2:83:a3:76:01:03:7f:d4:30:
         d7:c9:77:ca:3f:80:29:c5:f9:09:b9:dd:6b:ba:7a:ea:a3:48:
         1d:cf:2f:3a:80:ee:3c:d7:cf:d7:a2:70:44:db:49:22:be:0c:
         d3:d4:f3:09:ce:cf:2b:7f:35:c2:67:ea:a3:31:5a:4e:50:00:
         77:97:60:b9:6b:ab:a2:ef:57:a5:4c:de:2e:1c:39:79:b3:54:
         1a:81:f8:d7:57:9b:cd:fd:ef:41:d0:16:7e:97:60:66:31:11:
         0a:c2:54:c0:a7:da:0a:ee:d3:b8:5a:2c:10:d9:6e:06:43:4d:
         05:56:d5:e5:94:04:fd:46:a8:d1:14:d0:d3:9f:90:65:16:53:
         0e:b7:da:4d:78:e7:2a:70:13:52:3b:a9:90:0d:85:50:3a:d8:
         33:ae:f0:8c:35:33:a8:8c:8a:99:c7:64:73:4b:00:a1:c0:9d:
         b6:47:57:b7:79:d0:13:ba:b4:4f:ff:9c:f2:14:ed:84:92:04:
         8f:d3:37:40:80:a6:95:fb:05:e1:67:e8:ef:2a:3a:7d:0a:c9:
         d9:da:f5:c1:7c:04:36:d2:8e:66:ee:f0:12:75:1f:da:e2:be:
         fd:24:eb:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEembKMdJgck9ujH44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MTAyNDE4MDMwMloXDTI1MDEyMjE5MDMwMlowLzEtMCsGA1UEAxMk
ZTI3ZjMzODQtYTgxMy00MTU5LTkzODUtYTgxNmY2YjdmM2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtdAstd6SrLpVQ/bYNKbJTifdpuG7ESsHQIN
XuBP5Xe1VdRA3Vom5yEwsbR528Ezzp9HhPRN+U7IMP17LgB3F579gdpTGC07v88B
goQDpCvgvvbl3yO+HCzN/fs9yQTIfaXICLvaSIzzQ7qvuWg64LCZMRrdsmCOzrAc
Tk6FWTp12gPj89+3MYTbnKDDVa/Lzgly41I2SqWmtFfks5t2HAaHtORHYSSVbUPU
WzNsMlqLus0du2RShhUq+OYjF3HTfGKKDsmwicojUk2rVsJyqi+1xr+wy1GSYfN6
NJFV9KINEvnP5Sx4ylOvIwF8hYUF/UO3HjPsV74A8rQkxqkvjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAGhjsqNN0cGsjH1pxnREN79SGBmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjM2YTkxZjgtYjNlMS0z
YTc5LWE0ZjctNzhjOGE0YTRjNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKE6JfMyywOHL25YZobIezMyh9Nqj/JCeNflMbKDo3YBA3/UMNfJd8o/
gCnF+Qm53Wu6euqjSB3PLzqA7jzXz9eicETbSSK+DNPU8wnOzyt/NcJn6qMxWk5Q
AHeXYLlrq6LvV6VM3i4cOXmzVBqB+NdXm83970HQFn6XYGYxEQrCVMCn2gru07ha
LBDZbgZDTQVW1eWUBP1GqNEU0NOfkGUWUw632k145ypwE1I7qZANhVA62DOu8Iw1
M6iMipnHZHNLAKHAnbZHV7d50BO6tE//nPIU7YSSBI/TN0CAppX7BeFn6O8qOn0K
ydna9cF8BDbSjmbu8BJ1H9rivv0k628=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:30 2024 by rpki-client on console-ams.rpki-client.org