Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d106c9d-da57-3ede-87a0-891616fb58f5.roa
File:                     3d106c9d-da57-3ede-87a0-891616fb58f5.roa (raw, json)
Hash identifier:          0QwuZq5+D+8vFw0/v76ZQ4TFdkvUg5UI3yzFrfS8mlU=
Subject key identifier:   20:BE:06:33:64:65:55:78:6D:31:71:EC:E2:61:70:CF:13:F4:91:0A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847F584E95121DA53314879A780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d106c9d-da57-3ede-87a0-891616fb58f5.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     7018
IP address blocks:        23.27.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:e9:51:21:da:53:31:48:79:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=d34a2165-00ef-4c1c-bc81-6d2ab7950dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:51:1d:9c:23:d7:11:cd:aa:c4:6d:bd:93:
                    d1:02:d6:42:d0:c0:85:04:76:cc:89:79:fd:c5:6d:
                    7e:44:0c:57:8c:ab:1b:eb:56:6a:8b:b3:d9:df:cb:
                    49:45:5f:f2:cb:8c:d4:20:19:e9:12:64:7c:8c:87:
                    35:98:d3:2e:6e:bf:41:67:bb:16:4e:d5:58:cf:99:
                    95:54:ff:8a:c7:b8:c8:4f:05:31:28:15:9f:6f:c9:
                    38:5c:23:c9:d5:c5:b1:8e:d3:ce:4c:e8:24:61:83:
                    1e:54:72:ff:64:88:8c:ab:ab:90:1e:b2:08:0b:e0:
                    02:02:16:ab:d3:79:ce:df:67:7e:17:b2:aa:13:15:
                    66:ba:47:e0:4d:b4:91:99:74:65:ea:7d:0b:7d:23:
                    26:ef:67:5a:e8:d9:4a:ea:08:ba:f8:e7:6c:58:6c:
                    4f:49:4c:9a:4f:a5:e9:2d:33:7a:a9:5b:1a:0e:73:
                    f5:e0:bf:32:44:5c:ec:07:37:a2:43:a0:3a:8c:e2:
                    82:ad:b5:1b:17:4c:10:0a:b8:dc:48:d9:c8:c7:12:
                    58:08:0b:d8:c0:e3:30:be:97:b2:3d:c0:45:0b:ae:
                    c2:03:60:21:92:f6:37:64:26:96:8d:0d:96:38:12:
                    47:5a:e3:2a:26:50:6b:09:f9:d3:2f:a3:7f:0b:33:
                    89:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BE:06:33:64:65:55:78:6D:31:71:EC:E2:61:70:CF:13:F4:91:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d106c9d-da57-3ede-87a0-891616fb58f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b6:9c:8f:a2:96:dd:62:a2:ff:1e:62:29:25:77:1f:a5:ab:
         7f:6e:b3:05:f1:a3:b4:90:a4:d2:0b:0d:06:62:c9:0c:e2:16:
         ac:ea:41:ab:25:ae:5f:25:7f:81:6f:f2:b7:4c:8d:52:8f:57:
         90:f5:10:be:52:1b:1e:f2:8a:27:a9:43:c5:06:b1:ac:16:b7:
         65:f3:51:6a:f7:8f:af:27:84:97:91:8b:48:79:a5:b7:b0:f9:
         4e:3c:75:78:b3:ec:f2:5e:71:49:f7:46:7e:de:c0:32:fe:6d:
         30:5c:90:f1:2f:d6:89:e7:23:73:e2:73:32:d2:ce:d9:bb:f1:
         b6:47:95:1d:50:04:ea:d0:b4:8d:2d:bf:bc:d8:ab:aa:f4:19:
         ef:b6:56:05:15:66:b5:9f:a2:fd:91:58:ef:16:68:4c:5b:6c:
         a0:5c:82:72:f0:5d:21:fa:6a:96:c7:ca:5b:3e:eb:7e:1a:8b:
         d4:0a:bd:9d:7c:f7:ab:a6:47:78:ce:fd:96:e2:41:26:1f:85:
         58:5a:ae:81:72:1d:47:09:e9:7d:61:d6:e1:5c:51:b7:c8:eb:
         c3:28:10:cf:2f:48:bb:e3:89:6a:5c:fb:ad:94:ad:b2:9a:0c:
         f6:b8:bd:5b:2d:3e:77:d8:f7:46:0a:9f:62:33:a0:14:c1:d3:
         39:bf:2c:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf1hOlRIdpTMUh5p4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MTEyMjAyMDA0MFoXDTI1MDIyMDAyMDA0MFowLzEtMCsGA1UEAxMk
ZDM0YTIxNjUtMDBlZi00YzFjLWJjODEtNmQyYWI3OTUwZGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1JRHZwj1xHNqsRtvZPRAtZC0MCFBHbMiXn9
xW1+RAxXjKsb61Zqi7PZ38tJRV/yy4zUIBnpEmR8jIc1mNMubr9BZ7sWTtVYz5mV
VP+Kx7jITwUxKBWfb8k4XCPJ1cWxjtPOTOgkYYMeVHL/ZIiMq6uQHrIIC+ACAhar
03nO32d+F7KqExVmukfgTbSRmXRl6n0LfSMm72da6NlK6gi6+OdsWGxPSUyaT6Xp
LTN6qVsaDnP14L8yRFzsBzeiQ6A6jOKCrbUbF0wQCrjcSNnIxxJYCAvYwOMwvpey
PcBFC67CA2AhkvY3ZCaWjQ2WOBJHWuMqJlBrCfnTL6N/CzOJLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCC+BjNkZVV4bTFx7OJhcM8T9JEKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2QxMDZjOWQtZGE1Ny0z
ZWRlLTg3YTAtODkxNjE2ZmI1OGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxspMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHe2nI+ilt1iov8eYikldx+lq39uswXxo7SQpNILDQZiyQziFqzqQasl
rl8lf4Fv8rdMjVKPV5D1EL5SGx7yiiepQ8UGsawWt2XzUWr3j68nhJeRi0h5pbew
+U48dXiz7PJecUn3Rn7ewDL+bTBckPEv1onnI3PiczLSztm78bZHlR1QBOrQtI0t
v7zYq6r0Ge+2VgUVZrWfov2RWO8WaExbbKBcgnLwXSH6apbHyls+634ai9QKvZ18
96umR3jO/ZbiQSYfhVharoFyHUcJ6X1h1uFcUbfI68MoEM8vSLvjiWpc+62UrbKa
DPa4vVstPnfY90YKn2IzoBTB0zm/LLU=
-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:42 2024 by rpki-client on console-fra.rpki-client.org