Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8bef8efe-ff21-30b8-9828-8cf2b38a9f83.roa
File:                     8bef8efe-ff21-30b8-9828-8cf2b38a9f83.roa (raw, json)
Hash identifier:          Yin8I4/+yKa283Zg2oMsz3sGnCjjfHM9EcDn++POEuY=
Subject key identifier:   5D:90:D9:A4:28:1D:E8:11:59:79:78:2C:C4:34:22:C3:95:92:45:3A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847D4049DEC1926052B02C69B00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8bef8efe-ff21-30b8-9828-8cf2b38a9f83.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     209854
IP address blocks:        23.27.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:9d:ec:19:26:05:2b:02:c6:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=c1e2f4bb-3777-4e7f-bc98-57cacbb52180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:f2:bc:f5:21:cc:75:dd:14:79:42:3e:2b:
                    d7:d1:65:65:13:df:44:6c:32:43:7f:33:53:ea:7c:
                    7e:e8:d3:43:7f:fb:0a:8b:3c:f2:9f:8d:a3:09:12:
                    75:ca:6c:fd:3d:cc:29:f2:45:a7:83:e0:e4:93:27:
                    53:85:f0:a0:3e:17:a8:23:16:02:8b:a6:40:e0:61:
                    ae:31:ce:4a:a1:ca:69:9b:e3:b3:88:85:46:0e:2e:
                    85:a5:d5:21:5f:6c:ed:de:f8:1f:ac:da:81:6b:b5:
                    5d:78:40:d1:74:9f:15:8d:41:de:49:8a:46:ad:13:
                    8d:38:87:7a:7a:de:0d:63:18:a2:e9:06:71:44:16:
                    61:53:62:98:38:c3:17:43:c6:4c:b2:36:57:75:33:
                    0a:38:07:01:e2:ce:1a:2c:fa:34:2b:d5:91:64:f4:
                    90:b6:3b:97:5c:ec:99:9e:66:ba:4c:ed:53:94:f5:
                    26:80:aa:3d:5d:fa:f4:d3:23:78:23:b2:10:a1:00:
                    5a:89:fa:fe:8f:6d:8f:2b:8b:61:8c:92:b4:70:33:
                    d9:4a:a4:d6:71:23:87:f0:a3:09:b4:0f:94:90:4b:
                    f1:dc:51:b9:be:36:b1:a1:4a:bb:19:59:f8:c4:de:
                    32:59:f3:e6:1f:74:30:03:8f:81:61:c4:54:85:cb:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:90:D9:A4:28:1D:E8:11:59:79:78:2C:C4:34:22:C3:95:92:45:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8bef8efe-ff21-30b8-9828-8cf2b38a9f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:42:6d:bb:d0:4c:61:01:d7:06:56:ae:6a:be:a0:dc:57:d3:
         f1:f8:2b:6c:c1:7b:36:7e:87:68:a8:5e:1d:b3:83:c6:88:2f:
         20:6a:80:48:ad:7e:ed:62:c8:db:5f:0a:48:0f:0e:3b:57:67:
         3a:ff:b8:32:8d:92:a6:b2:37:bd:1b:49:74:a4:91:c7:45:f4:
         42:75:d8:5b:a9:f5:5b:20:5a:b6:1a:fb:8d:84:53:53:20:c6:
         90:0a:eb:1a:23:ed:c3:11:bd:72:4c:cc:1a:e7:dd:5b:fa:2b:
         54:1f:35:6f:35:01:38:16:b0:74:84:a7:03:c4:b1:d5:6f:0e:
         94:ff:6f:fb:16:10:a3:f6:2a:02:a7:f2:a8:c5:fe:0e:78:c3:
         09:65:3e:09:41:af:ce:1b:8f:f2:9d:6c:58:54:12:be:a4:24:
         93:ed:4a:d0:19:5a:f0:d8:ca:b3:8d:84:80:37:8e:2a:9d:e0:
         1f:ef:46:b0:16:26:d2:7c:f1:e9:a7:db:2c:fe:21:93:1f:62:
         0d:bd:7c:7f:90:d3:d3:a5:28:c7:73:65:97:f2:82:73:68:ac:
         21:c5:2a:96:d6:5d:5d:ff:25:df:26:27:fc:f4:49:fa:d2:bc:
         ff:b6:70:94:53:f4:ec:d2:41:b2:fe:a5:af:e8:ba:b1:71:2b:
         37:9e:e4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:32 2024 by rpki-client on console-ams.rpki-client.org