Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e069977-ed29-3476-9b3c-8324f84b7c33.roa
File:                     3e069977-ed29-3476-9b3c-8324f84b7c33.roa (raw, json)
Hash identifier:          xd0s+kxmyls6URS6SVKBh3Yr1+hQXyC8zUpo30PgcBI=
Subject key identifier:   F7:4F:80:D5:5C:F4:3E:33:BE:67:A2:88:DB:DC:0F:E0:40:88:A5:D0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847D834BF88F60CE763342DC800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e069977-ed29-3476-9b3c-8324f84b7c33.roa
Signing time:             Mon 11 Nov 2024 14:00:39 +0000
ROA not before:           Mon 11 Nov 2024 14:00:39 +0000
ROA not after:            Sun 09 Feb 2025 14:00:39 +0000
asID:                     26375
IP address blocks:        23.27.166.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:34:bf:88:f6:0c:e7:63:34:2d:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 11 14:00:39 2024 GMT
            Not After : Feb  9 14:00:39 2025 GMT
        Subject: CN=c87d93e1-1dec-4edc-8781-7635b72252a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c4:9a:13:e5:00:54:da:a3:11:45:0b:ad:ea:
                    22:9f:67:66:48:e5:d9:3c:a6:78:5f:5c:aa:14:46:
                    97:73:1f:2c:f7:8c:f9:30:82:3d:87:bc:23:fb:52:
                    ed:c1:30:ab:06:b5:6e:b5:9f:6f:cc:fd:20:43:4c:
                    9c:10:d6:f6:1e:17:16:31:9d:d1:4c:fe:b9:a7:17:
                    3b:e9:99:ec:97:60:eb:7f:dd:f0:ff:ce:c4:d9:cd:
                    18:ba:7f:cb:73:da:64:b6:69:c0:66:77:02:88:18:
                    73:d2:3f:70:3e:fe:a9:0a:85:bc:31:11:17:ac:50:
                    51:f4:d4:dd:77:2f:41:09:fd:91:0d:66:f6:e8:c3:
                    72:f5:75:8e:57:04:9c:5d:67:a6:d9:db:c3:9c:03:
                    38:92:65:eb:2a:0e:88:49:83:67:5f:1d:0f:13:e3:
                    24:dd:b8:3a:26:01:cf:4e:a8:e5:c1:75:b1:e5:5e:
                    98:ae:82:6d:41:eb:84:7b:eb:53:b6:26:ff:60:e8:
                    48:f4:8f:ea:68:aa:4f:48:df:87:33:7d:72:a8:74:
                    ba:b7:1e:9b:c4:8f:2f:d8:33:dd:e2:6b:b0:af:db:
                    9e:e8:a6:b2:b2:56:82:2e:09:d7:ee:b4:ab:17:3a:
                    b1:7a:6e:53:cb:03:d8:9c:de:27:55:e3:0e:87:6a:
                    76:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4F:80:D5:5C:F4:3E:33:BE:67:A2:88:DB:DC:0F:E0:40:88:A5:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e069977-ed29-3476-9b3c-8324f84b7c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:25:92:f4:5e:f8:11:84:2a:4d:9d:9b:e1:c2:e0:cb:02:22:
         d2:73:68:59:cc:b0:5a:ce:18:d3:41:17:3a:f7:66:77:29:b1:
         26:99:df:f2:6e:64:86:74:68:bf:73:24:6a:6c:f2:16:bd:84:
         a7:4c:60:7f:7f:33:cd:b7:f0:bd:e6:79:b1:53:dc:b5:b8:bc:
         50:69:24:0c:08:87:af:ec:89:52:14:7d:d1:e4:c9:c3:81:22:
         38:56:66:ac:49:97:b8:8b:6c:1e:42:bb:b8:8e:35:4a:4c:44:
         86:41:be:e7:97:f7:df:20:20:7c:f6:35:74:2d:79:6c:01:54:
         b1:2c:81:23:d5:20:72:e4:41:6a:34:35:ba:9e:e6:ec:eb:88:
         c1:a5:6d:94:a0:c6:5b:83:ed:c8:9e:f7:0a:9f:97:5f:62:ad:
         01:d1:f3:5d:8d:d4:e4:7e:26:37:71:46:7d:cf:b6:7b:74:1d:
         d2:4f:21:6d:38:38:39:d6:08:dd:18:63:e7:90:16:56:65:38:
         a9:28:42:5b:69:f1:2d:c0:e6:95:5f:f9:2d:a4:3a:9d:98:76:
         f5:69:4a:61:9a:1a:14:21:ef:62:1b:f9:3f:68:bb:67:a1:2d:
         18:3a:d6:cb:d3:8a:d9:9e:24:b8:f6:39:4a:9d:e8:35:5b:5f:
         49:92:a6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:30 2024 by rpki-client on console-ams.rpki-client.org