Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/261d37f7-edda-3d13-a6f5-9e60980c84f1.roa
File:                     261d37f7-edda-3d13-a6f5-9e60980c84f1.roa (raw, json)
Hash identifier:          6GrOeM519m0iYOmFvTddQko+Vy2k2Ec0qYKOEQ7XPfw=
Subject key identifier:   A0:B9:1E:91:E7:90:EF:2A:EC:9A:45:61:D3:44:28:EA:EB:28:4F:9E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848B35B727A0898F5C649E88600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/261d37f7-edda-3d13-a6f5-9e60980c84f1.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     209854
IP address blocks:        23.27.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:72:7a:08:98:f5:c6:49:e8:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=90772288-3ea9-4e46-8ee2-a65a0e4b70b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:26:1b:76:84:7f:8a:81:5f:d9:3e:18:27:36:
                    59:b4:f4:ad:07:68:d9:bf:bf:d5:78:aa:6f:7b:d8:
                    e2:8a:80:d5:2a:95:bf:a5:64:a1:52:11:c4:82:ea:
                    51:dc:3e:bd:0f:b7:14:08:47:64:05:83:72:9d:85:
                    db:dd:ca:c1:fe:6d:07:42:84:83:cc:f2:0c:e3:d5:
                    56:e2:31:1e:eb:e4:b6:a7:03:7c:6c:65:75:b7:fb:
                    d1:66:a9:42:50:66:d1:08:ff:16:19:82:73:48:a7:
                    cb:53:35:77:7c:8e:bf:65:06:b7:9f:40:1f:2f:38:
                    24:19:b0:b5:ec:22:e3:39:47:57:c1:bb:b7:c4:1a:
                    c0:b9:ac:b6:6c:7d:1f:6e:90:bc:db:cb:87:b2:0c:
                    e3:58:59:7b:8c:a9:b7:34:82:bb:9e:06:fd:eb:8a:
                    a9:e7:2a:85:75:a0:47:0b:97:9b:2b:32:ae:d1:72:
                    99:f6:ae:ac:65:b4:e3:6d:7d:56:22:a5:83:f9:ab:
                    0b:a3:2a:17:19:94:c9:1c:b6:1c:0d:ca:54:5c:85:
                    7b:e3:90:98:1d:9b:be:21:c2:9a:5f:21:bd:c3:da:
                    e2:68:4f:d8:25:73:17:20:16:a8:21:89:42:0b:7d:
                    27:61:b5:1e:5b:90:8d:14:71:97:4b:6c:ed:3e:c0:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B9:1E:91:E7:90:EF:2A:EC:9A:45:61:D3:44:28:EA:EB:28:4F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/261d37f7-edda-3d13-a6f5-9e60980c84f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:c3:7d:d9:b2:1b:21:bd:ec:0e:cd:0d:5c:43:a7:b5:ca:4d:
         24:6d:7a:da:38:7f:06:a7:06:ab:e9:48:80:14:3c:5f:23:aa:
         a5:58:fa:f5:0b:5f:ff:4c:bb:4c:dc:9a:c8:f6:4f:34:88:56:
         a6:21:42:23:3a:9c:49:9f:ec:08:25:7d:dc:3e:90:fd:59:b5:
         05:a7:f4:1f:31:c7:e9:c2:18:44:94:0a:af:62:2e:19:0a:b8:
         7a:0f:a2:24:4a:c9:d2:c6:80:1d:c1:a5:89:06:e1:50:8d:a6:
         84:1d:3a:69:9a:90:83:5e:2e:77:9a:f7:0d:b5:48:f8:69:80:
         8f:02:d1:98:c6:16:d1:14:34:f6:c8:0a:bf:25:98:7c:b4:47:
         62:d6:2b:f2:f3:f3:44:8f:a0:fa:50:05:ed:27:c3:15:31:59:
         0c:a3:73:51:db:c5:0e:dd:7f:96:cf:63:c3:9c:7b:1c:d7:bd:
         c4:04:87:71:05:c7:e1:4b:65:49:5f:1f:ca:fd:e9:b5:ce:d4:
         c8:3a:ab:8c:20:ba:e6:eb:d4:b6:ee:90:d8:79:97:eb:b5:32:
         6d:87:86:33:1b:bb:c2:59:63:a1:19:89:70:a3:e9:11:f9:3e:
         41:7b:ee:f5:45:f8:c7:64:da:fa:e1:36:f9:46:cc:7b:b7:a1:
         f6:44:0c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:10 2025 by rpki-client