Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e069977-ed29-3476-9b3c-8324f84b7c33.roa
File:                     3e069977-ed29-3476-9b3c-8324f84b7c33.roa (raw, json)
Hash identifier:          cR6ItHN6UBadMGeQUcv8bGQzCNrEgVrCeeGuuSbQ6hk=
Subject key identifier:   AF:FE:42:FD:32:83:45:D5:B0:DD:E7:04:E3:B3:78:12:74:7A:31:76
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848B78B8C37E15F6D1102871500
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e069977-ed29-3476-9b3c-8324f84b7c33.roa
Signing time:             Thu 30 Jan 2025 14:00:51 +0000
ROA not before:           Thu 30 Jan 2025 14:00:51 +0000
ROA not after:            Wed 30 Apr 2025 13:00:51 +0000
asID:                     26375
IP address blocks:        23.27.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:8b:8c:37:e1:5f:6d:11:02:87:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 30 14:00:51 2025 GMT
            Not After : Apr 30 13:00:51 2025 GMT
        Subject: CN=e9873fb1-065a-46a0-842f-a07cd5b0812e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b0:7e:07:6b:a7:57:a6:e8:98:09:b2:f8:f8:
                    de:4b:d0:24:6f:eb:4a:b9:13:50:1f:44:b3:20:5a:
                    42:08:57:c8:33:71:b5:36:4e:56:53:e5:c8:f1:ea:
                    40:f3:f2:be:4b:de:bf:d8:27:85:e8:67:49:c8:85:
                    aa:4b:8f:78:3e:96:20:da:1c:ff:14:45:82:5a:39:
                    b2:58:18:87:cb:78:b8:8f:51:4b:52:73:ef:50:0d:
                    3e:a6:ae:59:e4:e6:bd:6e:93:81:a3:c6:13:1e:db:
                    5f:be:56:05:ab:2f:6c:de:55:68:d7:1a:82:97:f0:
                    1e:92:27:ab:66:35:0a:9c:1e:88:67:0a:70:0f:ad:
                    e0:6b:20:e7:22:8a:31:ab:e9:d9:dc:9c:e4:0c:3d:
                    44:56:1e:97:55:f4:f5:8b:ee:1f:33:5b:a2:0b:ab:
                    24:05:3c:b6:cb:40:6c:e0:1f:75:f8:9f:c8:9f:70:
                    d3:92:98:30:2a:e8:61:ee:10:f7:15:cf:6d:e9:8c:
                    b2:ae:b8:63:35:21:d4:f8:16:2e:c0:d5:5f:87:86:
                    7f:f4:e4:b9:4a:b3:62:87:96:2e:0d:25:98:8e:2e:
                    7b:31:0f:1e:f5:5d:dd:db:cb:24:21:70:84:db:14:
                    37:2d:c3:f4:f3:46:e8:c9:94:48:bf:00:65:e9:e9:
                    1b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FE:42:FD:32:83:45:D5:B0:DD:E7:04:E3:B3:78:12:74:7A:31:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e069977-ed29-3476-9b3c-8324f84b7c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:b6:b9:ec:90:3a:c3:b9:4d:26:f3:4d:da:68:71:b3:1c:51:
         e3:39:93:df:c9:0a:b2:17:e8:47:b1:ac:e2:a5:88:be:a9:6c:
         5d:15:2a:41:d2:6d:0f:33:35:89:8a:dd:21:c5:4a:0c:57:68:
         58:bd:f2:65:02:6c:70:49:b1:33:5f:e8:d5:07:99:68:af:93:
         0d:e4:8b:cc:61:d7:9c:5e:11:c0:15:2e:41:8f:80:d0:a9:b7:
         17:9e:0c:8b:83:88:f1:9a:d4:46:b9:d4:9b:fa:21:50:c4:b5:
         f2:94:ec:5f:dd:3a:34:b0:34:cd:74:24:c4:24:9a:3a:7c:7d:
         00:db:3b:5a:0c:96:69:46:a9:ae:6d:81:82:e6:9a:89:6a:c0:
         3e:a4:76:d1:f3:30:bf:b9:e6:83:34:70:8d:af:32:da:28:a4:
         de:a0:df:5c:94:f3:f0:36:93:82:c8:59:46:99:4d:12:d3:45:
         2f:04:25:17:a7:89:17:05:89:e2:f6:55:bf:d1:e6:bb:3e:f2:
         6d:0b:61:d4:0a:5a:ca:69:99:e3:15:48:ae:dc:84:72:ec:8d:
         3e:a3:22:f2:6f:8e:92:e7:f5:05:b8:a8:3e:8e:3a:04:54:de:
         52:ab:c6:cc:4d:9e:8e:62:c3:8a:7b:8c:47:c7:85:e1:d2:0b:
         fd:48:5b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:11 2025 by rpki-client