Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/522a063a-4db5-3fce-b6c8-b147d68cbdda.roa
File:                     522a063a-4db5-3fce-b6c8-b147d68cbdda.roa (raw, json)
Hash identifier:          kC9Xjha0t58emzMrHni6EZaw4ubZ/x3f+8mYyPGoRR0=
Subject key identifier:   4E:54:D7:E9:A0:18:50:1C:08:FD:14:A7:AC:5C:6D:D6:35:E4:F3:9B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847E4C4AA7DC269749863F21120
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/522a063a-4db5-3fce-b6c8-b147d68cbdda.roa
Signing time:             Sat 16 Nov 2024 02:00:28 +0000
ROA not before:           Sat 16 Nov 2024 02:00:28 +0000
ROA not after:            Fri 14 Feb 2025 02:00:28 +0000
asID:                     400402
IP address blocks:        23.27.96.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e4:c4:aa:7d:c2:69:74:98:63:f2:11:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 16 02:00:28 2024 GMT
            Not After : Feb 14 02:00:28 2025 GMT
        Subject: CN=f8b40240-c2d3-480f-8cfb-8d22750d669b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:30:1e:4f:18:22:b0:4f:36:d1:33:d7:06:4b:
                    3f:33:db:4c:c7:09:e9:31:da:50:66:e0:22:0c:44:
                    9b:aa:75:5a:33:29:e3:5a:d3:67:7d:63:76:1e:b3:
                    5a:51:0a:f4:8c:4f:68:f3:bb:37:9a:35:0a:ee:7e:
                    fa:4a:4f:b8:ee:ab:7b:b4:31:bf:82:70:c3:64:9f:
                    fc:b6:06:13:9b:8e:bd:b7:27:50:fd:cf:d3:92:a7:
                    1d:2a:1a:5e:e9:ea:d6:e7:70:cf:e1:a9:ac:37:52:
                    ad:77:ff:ad:87:3b:c2:12:01:d7:d6:e2:ec:f5:96:
                    51:3d:f5:25:1b:28:a9:7a:32:6d:8a:0e:24:29:35:
                    16:0f:7d:9f:5f:bd:47:4e:8f:34:13:f8:8d:85:0c:
                    8e:6d:46:b4:cd:43:01:df:c0:11:58:3e:2b:2f:4d:
                    6e:69:17:40:e6:5f:90:97:b9:3f:a6:c2:c9:fd:3e:
                    d0:57:c6:30:59:ee:18:ae:b2:53:cc:8a:18:82:fb:
                    97:af:71:8e:d4:43:30:da:de:e3:98:95:9b:36:8d:
                    e2:88:12:33:cf:f9:1b:50:8f:d1:54:ab:a2:b8:5a:
                    ce:3f:33:68:f0:fa:eb:e9:f5:6c:a1:7d:64:e9:f7:
                    5e:ee:8f:06:22:1c:a0:e6:2d:c0:d2:a2:06:25:bf:
                    6b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:54:D7:E9:A0:18:50:1C:08:FD:14:A7:AC:5C:6D:D6:35:E4:F3:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/522a063a-4db5-3fce-b6c8-b147d68cbdda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:60:a7:49:ae:39:5a:4e:e7:df:66:a8:cc:0b:1a:6a:33:94:
         1d:ee:c3:d3:c8:91:ec:e9:01:0b:a8:7c:f3:b4:29:ec:ad:99:
         2e:97:1a:1e:ff:0c:af:0a:7d:ec:03:c0:2d:71:05:37:86:bf:
         41:5f:0b:77:1a:9d:02:29:f1:df:61:13:3c:02:fd:2c:50:af:
         58:d3:77:3d:dd:24:76:5c:19:f7:02:e0:d1:e9:65:c4:f2:b4:
         cb:ad:ab:fb:ab:1f:d5:f1:fa:15:64:8b:85:19:e9:1d:58:80:
         ad:9b:76:76:22:2d:5b:d7:ca:84:2c:03:56:87:d7:6d:0f:7f:
         3d:a5:ec:41:e4:a3:c5:86:3e:3b:de:3e:d8:8c:96:cb:c6:ef:
         3e:71:a0:41:e5:a5:6a:f8:ff:93:81:40:c7:62:1e:65:b4:f7:
         bb:65:50:53:33:10:16:f7:08:f3:c2:94:77:7f:91:a2:7a:5b:
         1c:ce:88:57:84:1d:b5:77:85:da:da:34:55:41:6c:63:e6:64:
         b0:34:cb:fe:05:47:1b:7e:12:2f:d4:51:6e:a5:13:5e:75:3a:
         8c:4d:67:c9:1c:23:26:9f:98:8d:b2:a6:a0:fe:31:b8:b2:8a:
         43:3c:8a:18:22:eb:b2:3e:88:3e:e5:1f:0b:a5:dd:72:4d:3b:
         a4:40:24:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:54 2024 by rpki-client on console-fra.rpki-client.org