Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/83d2ca4d-07ff-3c6f-8485-1ab98d786a73.roa
File:                     83d2ca4d-07ff-3c6f-8485-1ab98d786a73.roa (raw, json)
Hash identifier:          yPQFi174hExtVtvGEZytCFekhS5FBBzRBTdTgTEdyY0=
Subject key identifier:   CE:00:3A:0E:3E:77:4E:1B:79:15:32:AC:66:B4:AD:3B:86:08:49:92
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848143CDB5BD53E974E4D90EF40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/83d2ca4d-07ff-3c6f-8485-1ab98d786a73.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     149440
IP address blocks:        23.27.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3c:db:5b:d5:3e:97:4e:4d:90:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=03b8ab98-106a-49a6-afff-4f783776020d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:63:96:18:70:8e:93:20:87:e0:05:0a:2c:
                    6b:3e:29:0e:35:de:52:56:98:69:24:03:72:12:ab:
                    27:46:cd:42:e7:9e:59:51:08:a0:c8:1d:40:95:42:
                    0f:55:65:6a:70:56:92:13:d2:7d:c7:e5:38:b5:b5:
                    08:37:f7:b7:a7:9e:a1:52:38:3e:2b:2f:5a:d4:55:
                    e4:15:56:71:b9:ff:cd:d3:6e:b9:df:e4:a3:15:b1:
                    5d:08:27:73:21:1e:2d:ec:71:38:53:6d:7c:83:1e:
                    e6:84:96:72:44:53:0f:f8:a6:a1:13:9f:da:97:81:
                    07:17:8d:08:11:e5:45:a6:f0:5a:ae:7d:34:a3:3d:
                    3d:62:d9:cd:55:cb:bd:e6:0a:f5:49:89:e8:0f:5e:
                    c1:19:41:87:53:23:8a:6d:f6:3b:9d:df:49:2a:67:
                    e7:fd:a6:3c:b4:d9:ae:33:00:4b:3b:84:4a:30:f8:
                    28:ba:e9:9b:0d:f7:95:99:70:99:b3:f5:fe:32:0a:
                    2b:40:f9:ad:04:50:2a:76:a0:6e:fa:a4:35:4d:71:
                    37:1b:86:10:ec:71:cb:2d:f1:ce:7b:4f:d0:bd:b3:
                    3b:f3:48:93:65:1f:7b:88:f4:78:e8:7e:07:b2:ee:
                    e3:00:9e:0b:a0:68:84:c6:22:f1:bb:e1:3a:89:5f:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:00:3A:0E:3E:77:4E:1B:79:15:32:AC:66:B4:AD:3B:86:08:49:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/83d2ca4d-07ff-3c6f-8485-1ab98d786a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:4a:f6:8e:34:ba:1f:ec:48:0e:42:5d:d7:25:94:c0:78:8b:
         d5:b6:b6:1a:b4:0f:99:40:5b:0c:6b:74:a2:a3:e2:2d:d2:38:
         c6:1e:f1:7d:5f:34:77:80:c5:98:c6:2b:e7:ed:da:c8:0d:1e:
         76:4f:a1:b6:46:5a:8a:a4:e3:7a:7f:42:5c:e9:e3:76:13:2f:
         23:33:57:7c:0c:07:ef:41:30:35:d6:71:e6:78:d4:df:e9:75:
         e7:b0:1d:04:46:db:60:24:f2:e0:9b:f5:68:8e:9d:f8:a3:64:
         e6:8d:30:62:19:f4:d9:b9:4d:f4:02:02:8e:dd:c7:24:1a:1b:
         99:99:e6:09:25:1d:07:4e:fb:30:a2:b5:8a:13:0b:b7:6e:b8:
         5f:9a:7b:ff:20:a8:4a:f0:bf:b6:58:7e:2f:ab:c4:bf:30:b0:
         f3:f1:f4:0b:bb:44:38:66:4c:95:7c:2c:8a:98:8e:84:de:c4:
         11:97:93:6c:a8:e0:95:4e:5f:26:f3:3b:10:14:78:97:3b:9b:
         c8:ca:44:99:c5:11:3a:ba:e4:22:b8:c7:40:44:9d:0d:8c:42:
         44:9f:76:c0:c7:a8:99:8d:3c:f0:be:82:a7:e5:c4:ab:39:a4:
         0b:4b:63:f1:71:a9:78:eb:a3:d6:92:69:45:da:af:e1:8a:0d:
         84:da:cd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:26 2025 by rpki-client