Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d106c9d-da57-3ede-87a0-891616fb58f5.roa
File:                     3d106c9d-da57-3ede-87a0-891616fb58f5.roa (raw, json)
Hash identifier:          qMpCgBRNdL4pQ1mRUn2bO4oVugnEOTMazi/HUGRk8/k=
Subject key identifier:   60:D7:40:C6:D5:F1:95:23:C2:8F:FA:25:87:4B:D3:B8:28:1C:83:D8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848D64119E202EA62F424CB7D80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d106c9d-da57-3ede-87a0-891616fb58f5.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        23.27.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:19:e2:02:ea:62:f4:24:cb:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=3272b005-f0bc-4fd5-aa3d-881ed2a31dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:a8:ae:5d:00:2a:8c:51:27:d2:9f:8e:05:
                    31:01:76:05:a4:c4:33:6f:c6:6e:22:12:69:17:8e:
                    08:f8:ad:92:4a:f7:be:67:d7:a5:1a:68:d3:2f:82:
                    34:90:5e:d6:1f:c3:45:56:aa:fb:c9:ee:e3:63:fa:
                    67:47:ea:18:fc:45:00:04:c5:33:c6:1b:14:44:68:
                    72:b7:49:0a:34:c8:5b:95:e4:4c:8e:e9:a7:1f:53:
                    8b:e0:4c:0f:bc:ac:9c:c9:6d:13:73:e7:8c:5c:63:
                    f8:27:79:3b:66:3c:a6:7a:22:5a:ce:51:e6:37:6e:
                    d6:b7:e6:f3:4d:e9:3b:dc:17:f3:d6:f4:0d:57:a9:
                    93:e6:be:bd:12:d6:09:28:0d:eb:77:13:a1:59:40:
                    3f:21:f8:ce:b8:ee:9e:f2:07:7a:e4:ee:6b:c5:11:
                    ca:1f:9a:65:ae:18:1b:d7:2a:23:1e:db:28:6a:67:
                    b8:fc:8b:9f:7c:c4:a1:72:f4:27:cb:14:6b:3e:49:
                    eb:1e:59:57:a7:5f:cd:ee:33:01:01:6b:cd:4e:dc:
                    94:43:9d:a2:32:7d:ed:94:ac:d3:8d:af:e9:9b:43:
                    63:a5:3c:56:a2:0f:23:ec:8f:28:38:fe:5f:3b:61:
                    2a:c4:b6:ca:97:a8:27:c2:0e:6c:0f:c6:03:f1:be:
                    5a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D7:40:C6:D5:F1:95:23:C2:8F:FA:25:87:4B:D3:B8:28:1C:83:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d106c9d-da57-3ede-87a0-891616fb58f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:66:5a:cb:b7:2b:6d:b5:4c:72:c7:cb:37:b4:bf:13:26:6e:
         bc:7e:d7:4a:b4:7e:71:40:57:71:47:1a:06:d6:6f:09:05:a4:
         b2:df:44:70:3d:d2:32:61:0e:45:93:c3:3e:60:64:42:92:59:
         0f:0f:92:5f:d6:21:ba:20:a2:8a:cd:79:09:b6:24:02:b0:97:
         80:63:f5:f7:07:41:e1:d1:db:af:e4:d9:7b:6a:ca:97:aa:7a:
         66:b5:41:bc:73:db:d1:0f:74:f5:ba:24:53:81:0f:07:c3:4c:
         69:a6:2c:67:b4:31:83:2c:1f:bf:91:c9:e7:d6:3e:70:3b:d4:
         31:6b:00:51:13:c7:cf:08:00:30:4d:5b:a0:27:4a:16:ab:c6:
         67:2c:95:67:3e:23:e7:02:5a:54:37:e0:77:48:02:cd:ab:e8:
         75:f9:1a:95:a0:6f:cc:2d:f9:db:11:a5:98:6e:92:1b:61:2f:
         a3:5d:95:5e:8d:e3:17:ea:a7:e1:1f:1f:ae:66:0a:9d:3f:6f:
         d6:a2:6f:c0:2e:ab:f8:03:87:50:4d:6c:fc:93:20:7c:12:44:
         ca:a9:63:8e:1c:36:88:73:b9:0d:eb:86:d0:cf:9b:47:56:6a:
         fa:43:89:b5:0e:9e:7a:8c:2b:5a:76:ed:d5:ab:43:07:e2:01:
         6e:cb:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:57 2025 by rpki-client