Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7674138c-061e-3986-bca1-df081595e16e.roa
File:                     7674138c-061e-3986-bca1-df081595e16e.roa (raw, json)
Hash identifier:          ZGtdrocDT2xQvN1BgJHShUv2Fz7Ku0c1RPaWM/ma5bI=
Subject key identifier:   A2:86:67:F3:E3:09:9E:24:49:08:9E:36:5D:70:07:3A:91:33:36:48
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848B78B861BE3CB39D21A5D3600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7674138c-061e-3986-bca1-df081595e16e.roa
Signing time:             Thu 30 Jan 2025 14:00:51 +0000
ROA not before:           Thu 30 Jan 2025 14:00:51 +0000
ROA not after:            Wed 30 Apr 2025 13:00:51 +0000
asID:                     18530
IP address blocks:        23.27.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:8b:86:1b:e3:cb:39:d2:1a:5d:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 30 14:00:51 2025 GMT
            Not After : Apr 30 13:00:51 2025 GMT
        Subject: CN=bf7e41af-130d-4505-b5d0-f0a5b1c27f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:6b:7f:33:1f:83:eb:03:ea:f7:84:ac:8c:
                    53:06:8f:b4:64:57:a4:52:26:25:d9:29:fe:56:58:
                    21:e8:5b:c0:26:61:99:05:f2:77:8e:5e:0b:be:e7:
                    e4:5d:cc:92:52:8d:02:9c:8d:50:32:da:dd:da:8b:
                    70:0f:78:d6:71:44:62:29:75:8b:66:ac:e9:7c:95:
                    53:b9:06:54:36:8b:eb:88:18:19:3f:97:b2:6e:0c:
                    8d:ff:56:44:29:d3:b4:72:d2:00:4a:69:65:ee:5c:
                    f4:9a:89:f5:ad:f2:36:35:c9:ab:2b:89:1a:5d:8b:
                    93:d6:59:e3:52:18:3e:c0:b7:f6:15:60:64:ad:0d:
                    96:62:4e:33:77:c0:ca:c6:f2:95:a1:e7:8c:77:60:
                    bd:d7:18:e0:b3:1e:ef:07:96:a3:61:2c:9c:33:26:
                    d3:67:09:8e:78:d3:79:57:f5:09:65:51:ea:5b:07:
                    db:17:2c:61:37:e0:85:1c:1c:92:10:14:aa:5b:36:
                    1f:34:92:51:dd:2f:60:b7:7d:90:f0:f8:74:9f:c0:
                    a4:27:5b:86:1f:57:b3:1c:be:a8:cf:5b:bf:ad:72:
                    c9:a0:28:3b:39:06:2d:4a:4a:ab:59:af:32:66:24:
                    32:06:f1:16:c0:3d:51:76:67:fa:f7:af:d4:9f:a6:
                    2d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:86:67:F3:E3:09:9E:24:49:08:9E:36:5D:70:07:3A:91:33:36:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7674138c-061e-3986-bca1-df081595e16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:99:ef:c6:71:d2:f8:73:f0:6a:88:90:25:be:b2:af:6f:fe:
         e2:e3:d6:7d:73:4d:7f:27:5b:f8:f4:c5:09:67:12:e5:cf:b4:
         45:9d:df:d7:8a:7c:f0:fb:6b:59:25:88:73:a1:ee:5c:b2:51:
         f4:47:80:dd:c6:de:bb:5b:76:ab:bd:97:41:d5:ff:cd:22:1d:
         98:ee:3c:d2:15:87:5c:df:d6:29:0a:d5:2b:40:4e:b6:82:2c:
         ff:4c:21:e4:72:45:4b:d0:7c:8e:d3:47:76:66:a6:c8:e1:48:
         d2:c8:c5:82:5d:e1:0d:49:ac:5b:83:29:64:d0:e6:88:c4:9b:
         16:54:25:76:ac:84:d6:aa:e4:a4:40:41:9c:d3:96:d9:0b:89:
         51:70:40:07:0e:67:7a:41:c1:45:3a:50:91:22:56:28:fc:24:
         31:ca:dd:df:e1:ae:34:f9:a5:2e:a2:c6:77:44:d4:ca:5e:6a:
         d5:bd:b1:0d:e9:7d:1b:ff:06:6e:b3:57:a1:ba:cb:a1:2e:1f:
         d3:d3:39:58:64:07:c0:24:3e:9d:a1:96:f1:77:23:7b:80:1f:
         59:4b:d6:6b:15:99:47:d9:4f:11:b2:e1:e5:0d:8f:53:44:2a:
         0d:03:dc:c3:c9:2b:00:de:12:e6:ee:f0:ae:bb:63:c6:25:57:
         12:c7:90:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:51:00 2025 by rpki-client