Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/695db403-d072-35a1-a6bb-01def876ca77.roa
File:                     695db403-d072-35a1-a6bb-01def876ca77.roa (raw, json)
Hash identifier:          UrezrR/RvpVhXKe0QlgwxYBUd8cuzWfXxNQqdg3Nk60=
Subject key identifier:   47:FD:A7:18:8F:87:43:51:76:AC:F8:FB:F5:19:8E:3C:A4:1F:E7:05
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847D834BFBB60913D2BAC0AF300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/695db403-d072-35a1-a6bb-01def876ca77.roa
Signing time:             Mon 11 Nov 2024 14:00:39 +0000
ROA not before:           Mon 11 Nov 2024 14:00:39 +0000
ROA not after:            Sun 09 Feb 2025 14:00:39 +0000
asID:                     18530
IP address blocks:        23.27.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:34:bf:bb:60:91:3d:2b:ac:0a:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 11 14:00:39 2024 GMT
            Not After : Feb  9 14:00:39 2025 GMT
        Subject: CN=ed7600ea-6c0c-4209-a6d6-e6bfd2f8aacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:76:35:78:3f:ee:4e:d5:16:bd:78:4c:df:
                    42:4c:ff:5f:28:85:7e:41:d9:9b:06:45:64:74:f0:
                    77:5a:be:6c:14:2b:1b:d8:5e:a6:68:a6:ee:a7:74:
                    4b:c3:64:04:4d:fc:7c:0b:32:7a:a8:21:39:a5:2a:
                    ab:05:8e:75:a3:3c:10:df:c5:de:db:3b:39:8c:23:
                    06:08:c4:eb:a3:a3:4c:98:3d:38:62:06:a5:80:41:
                    c9:8a:18:3d:a2:ae:3b:16:25:02:b3:00:b4:04:40:
                    b2:49:b3:ef:6f:c7:90:19:78:a8:e7:e8:be:1b:15:
                    3a:43:ad:0e:cb:52:37:39:7c:17:a4:ca:be:cc:da:
                    41:48:ab:f7:6f:bf:dc:18:0a:a8:d0:e2:c4:88:1f:
                    ca:71:1d:3d:65:ec:d3:8d:5b:c0:0b:a5:d3:be:44:
                    3c:b7:2a:7f:d1:da:4f:e6:6b:a5:1d:36:12:37:8e:
                    62:98:01:86:63:c9:af:77:89:13:17:f1:17:de:6e:
                    a8:fb:51:87:76:8c:f6:aa:51:6d:e7:04:df:14:e3:
                    64:09:87:42:a6:04:7b:e3:2a:94:ae:a6:33:d4:78:
                    6e:b9:0f:eb:3d:53:32:c1:f2:0e:c7:e9:02:58:fa:
                    34:85:1f:18:82:a0:af:97:a2:a5:29:f1:54:a7:f2:
                    9b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FD:A7:18:8F:87:43:51:76:AC:F8:FB:F5:19:8E:3C:A4:1F:E7:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/695db403-d072-35a1-a6bb-01def876ca77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:8c:c7:2d:01:47:b7:ff:e2:62:a5:90:9d:c6:f0:22:8d:87:
         1a:1d:87:09:ce:ba:7f:92:78:a8:fb:70:17:1f:ae:e2:71:61:
         49:ff:48:69:0e:a1:d9:bb:78:a8:dd:09:50:17:5a:c3:55:56:
         6b:e0:c2:0a:e1:b1:eb:45:dc:85:b1:a2:66:82:56:9d:20:51:
         15:17:f0:c0:fe:5b:63:ba:ef:fd:c6:61:63:d7:98:a6:b6:59:
         b6:4d:08:72:73:b3:2d:3c:00:b0:2e:38:89:48:84:3a:a2:40:
         97:40:b8:79:36:6c:fe:c3:0a:16:14:69:f9:db:1b:58:98:43:
         1c:73:07:bf:65:ab:fe:7c:2f:dc:0e:0d:2d:e5:02:2d:0e:6f:
         63:b6:68:b2:34:ad:9c:9d:fe:4d:22:a6:19:e5:23:55:9d:97:
         7c:a6:dd:21:8c:cb:8e:98:a3:47:ba:4c:31:21:3e:78:b7:0e:
         81:3a:03:d7:e9:03:47:d8:1c:96:fc:1d:60:4b:e2:af:ea:f1:
         8c:df:00:7a:a1:9c:0a:9b:06:fe:c9:71:5c:96:02:2e:e2:05:
         5f:dc:a3:05:5d:91:6c:d9:19:64:32:63:85:0e:0f:d7:b5:9c:
         b0:78:21:c4:a1:07:17:3f:0d:b7:e0:b1:4b:db:cd:77:90:95:
         4f:7e:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:31 2024 by rpki-client on console-ams.rpki-client.org