Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5cfe6ca7-c846-36b0-9b0a-2a9256822ee5.roa
File:                     5cfe6ca7-c846-36b0-9b0a-2a9256822ee5.roa (raw, json)
Hash identifier:          thJDIjBLU1OBX4uoCTrkEFdbcqvDcNyLa8wBL2dou04=
Subject key identifier:   1C:14:4C:51:43:86:68:1D:73:F2:28:00:EC:0E:D7:60:96:84:DE:FA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849363F83FCF95CD9A8600F2060
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5cfe6ca7-c846-36b0-9b0a-2a9256822ee5.roa
Signing time:             Sun 16 Mar 2025 23:15:27 +0000
ROA not before:           Sun 16 Mar 2025 23:15:27 +0000
ROA not after:            Sat 14 Jun 2025 23:15:27 +0000
asID:                     401152
IP address blocks:        23.27.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:36:3f:83:fc:f9:5c:d9:a8:60:0f:20:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 16 23:15:27 2025 GMT
            Not After : Jun 14 23:15:27 2025 GMT
        Subject: CN=2b216f57-99eb-498f-9972-9497395d8b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:59:01:c1:c4:a0:85:ac:97:36:81:0d:75:7a:
                    7a:03:43:04:b7:63:b1:88:7d:a0:77:f5:ba:f2:0a:
                    d5:0e:b4:a9:88:53:0c:71:3a:16:f2:05:4f:cb:d0:
                    26:f5:99:56:c1:d3:29:d6:33:68:d3:44:32:1e:46:
                    9e:6c:28:bf:9d:38:62:f1:b9:33:dc:86:dd:2a:ea:
                    ee:0a:f9:81:f1:1e:73:63:9f:f4:f6:56:56:6e:2f:
                    85:32:d7:5b:8d:6b:af:29:e6:53:81:4b:0e:6d:74:
                    49:95:c5:43:10:7d:23:dc:f4:c3:b0:36:ac:0a:37:
                    a4:5d:49:ac:ae:f8:73:28:58:cc:81:12:5d:d8:15:
                    e6:e3:9e:b2:90:99:e3:e4:36:50:7f:3e:ed:6b:0c:
                    5f:04:49:33:7f:7b:fa:cc:76:9d:50:65:6d:93:5a:
                    13:3e:10:86:64:43:cd:9a:a8:c1:0c:fd:14:64:98:
                    c8:6d:99:64:e4:ce:3a:e0:af:81:a7:f3:c2:d6:8a:
                    02:43:e5:47:85:50:d8:0a:c9:4d:11:a7:2f:f2:d1:
                    45:23:5f:ba:57:9a:1f:bf:98:b6:1f:04:c1:ac:05:
                    6d:24:f7:31:f9:f1:a5:d2:40:02:a0:aa:e5:1d:bd:
                    78:3e:da:3b:8b:dd:5f:b2:e0:e5:38:d8:a3:bd:c1:
                    78:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:14:4C:51:43:86:68:1D:73:F2:28:00:EC:0E:D7:60:96:84:DE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5cfe6ca7-c846-36b0-9b0a-2a9256822ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:c8:a2:66:a9:68:d0:4b:dd:74:f8:4a:31:80:88:ba:0c:cd:
         d7:ff:ac:34:97:81:d8:25:c0:2e:31:ec:b7:4e:28:67:b6:e3:
         ea:59:4a:c3:bf:5a:24:34:13:2a:c6:03:a8:43:bd:fe:3a:e1:
         c5:93:63:84:5c:11:7a:9f:54:f8:02:15:45:8b:ce:41:e7:58:
         aa:65:6b:d3:5a:3e:cb:d6:b0:5e:74:d8:e5:cb:b1:93:00:78:
         0f:68:e3:c6:e1:1e:eb:4f:e1:30:56:19:e7:67:3c:b0:31:63:
         02:d0:51:3d:ff:f9:47:8e:e9:a4:93:87:bc:10:1f:ce:8b:cd:
         5a:68:0f:be:3c:c1:b5:e4:10:4b:61:0a:45:38:aa:27:07:ea:
         8b:e2:95:80:3a:8f:a0:39:6e:19:34:fd:08:5c:c4:fb:95:9b:
         24:b6:da:4e:6b:f7:97:2d:d9:cc:e4:38:3b:7f:83:7c:f0:31:
         87:20:b4:85:9a:fd:90:de:d2:b8:45:87:c8:d1:63:98:6d:ae:
         9e:64:b9:73:71:01:5b:75:87:55:c7:2d:a5:9f:24:fa:4a:18:
         63:97:05:b5:bb:c9:68:df:54:54:d2:ae:dd:a1:8f:13:3a:8d:
         6d:77:b6:3d:de:ae:70:70:d1:4f:d8:68:13:a6:bd:0d:45:4c:
         37:e6:50:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:21 2025 by rpki-client