Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a54be4a-4aec-3d04-8d38-bf312e991b1b.roa
File:                     3a54be4a-4aec-3d04-8d38-bf312e991b1b.roa (raw, json)
Hash identifier:          2HAr4iNLDl6JgOKl2/EVRsEz3SBQoSIQNfkwrHgehTQ=
Subject key identifier:   F8:28:61:CC:4E:CA:B1:93:1B:02:4E:7A:0C:8D:DF:3E:47:4C:8D:B8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847D4049D45AE9B1F05C99DBA00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a54be4a-4aec-3d04-8d38-bf312e991b1b.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     209854
IP address blocks:        23.27.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:9d:45:ae:9b:1f:05:c9:9d:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=c7348882-b870-477a-9f7b-e98fd90cbbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:15:d5:62:05:13:e9:63:eb:f1:79:16:a8:f7:
                    ea:d3:01:fa:1b:e0:89:2b:8f:26:ed:87:02:5f:2e:
                    d9:31:60:21:70:ce:e5:b7:00:0f:b0:f1:b6:59:99:
                    96:e0:51:b5:86:48:e2:61:0e:03:20:31:2d:3f:be:
                    fe:1e:ee:4b:09:53:7d:86:ac:f2:04:a7:c9:82:8d:
                    83:e1:81:99:22:81:6a:da:87:20:8b:54:ba:b4:9f:
                    05:dd:d0:c6:3c:44:f9:b2:26:11:7e:a3:f1:87:f2:
                    8a:15:e3:98:e4:52:9a:5f:32:c4:96:9e:01:7e:da:
                    6e:b9:1d:97:e0:2f:80:44:ca:6e:5e:2f:7e:43:7a:
                    14:12:91:0c:69:3f:3b:16:fd:98:0d:10:f5:94:d3:
                    9f:c9:e1:81:79:b1:e2:2b:b0:8b:15:4d:94:72:75:
                    cb:6a:9c:4e:3c:57:9f:30:1b:3a:fb:08:6d:b8:88:
                    6b:95:ac:50:2c:d3:af:04:07:55:58:d0:88:1a:7e:
                    22:c1:90:55:fb:69:cb:0a:f9:7f:dc:10:a3:dc:bd:
                    08:19:c8:b7:6d:76:a3:98:14:57:90:40:a5:10:ed:
                    f7:d5:1a:1b:0b:3d:d4:c7:67:70:75:5c:30:80:68:
                    e2:1e:27:ce:3c:0c:8f:8c:54:22:5c:4d:29:35:16:
                    e5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:28:61:CC:4E:CA:B1:93:1B:02:4E:7A:0C:8D:DF:3E:47:4C:8D:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a54be4a-4aec-3d04-8d38-bf312e991b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:a4:ce:06:31:15:c6:d4:7c:e3:00:42:6e:1f:5f:d4:11:d2:
         29:97:39:8e:44:12:47:5e:b5:91:18:42:24:20:93:ce:73:f4:
         01:a5:bc:2e:0a:ad:17:31:ff:ed:74:0a:cb:77:79:3b:34:91:
         85:8a:bc:62:e4:0c:d6:b5:8b:51:2f:f9:f4:b7:a1:55:91:be:
         29:ac:b8:de:b0:3b:04:9f:7a:9a:e2:30:b5:fa:b2:e7:71:0c:
         f1:7e:6b:4a:97:c9:84:86:5f:80:9c:1d:a4:07:25:63:4b:d4:
         d3:63:3d:1b:e3:66:8d:01:6f:1c:a4:4b:e8:d2:d4:eb:42:b1:
         d7:e6:f5:9b:b7:6c:6f:b8:56:cd:ff:71:f9:61:da:67:e2:6f:
         f6:20:b7:65:08:29:df:4f:2e:c3:53:5a:1e:5f:f9:1b:ea:87:
         dd:0a:34:92:11:8e:22:0f:85:6e:fd:2e:72:a9:ee:68:db:c8:
         7f:a6:8a:96:fe:56:63:9d:3e:1d:27:b8:d2:b7:d0:bd:c3:ec:
         00:46:66:b5:b3:0c:5e:95:80:d6:78:ac:44:11:02:94:fc:c6:
         73:a8:89:6e:a2:d2:a1:1b:f9:05:73:71:93:98:e2:68:59:72:
         64:4b:08:41:03:88:d1:be:51:20:3e:18:10:ac:22:df:ca:8d:
         73:3b:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:30 2024 by rpki-client on console-ams.rpki-client.org