Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/912e6cbd-06cd-39c2-8814-53eb816ddbdc.roa
File:                     912e6cbd-06cd-39c2-8814-53eb816ddbdc.roa (raw, json)
Hash identifier:          rFCLIlXyiyYAx9nGQssDPK0Td2SmrFAN9xQwngbNRn8=
Subject key identifier:   3A:3C:5A:80:55:48:94:CD:26:FE:C8:D4:33:74:D3:39:D1:E0:B5:16
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848B8F0D9844E71E377F9104C80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/912e6cbd-06cd-39c2-8814-53eb816ddbdc.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     209854
IP address blocks:        23.27.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:d9:84:4e:71:e3:77:f9:10:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=58263fef-b84d-4511-b57a-f95a6c64527d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7e:92:35:14:13:7b:16:03:06:40:89:fc:d4:
                    67:cd:0c:2f:f9:27:b9:78:41:19:f7:0b:47:32:1b:
                    64:cc:ac:46:3c:49:7b:54:d9:78:0f:20:15:74:5b:
                    e6:02:9b:5b:80:81:52:22:3c:35:c0:5f:a0:8e:1b:
                    d9:6c:b4:49:65:40:0f:9e:ac:df:1d:12:dc:11:4a:
                    d8:4b:b0:8f:ca:3c:78:6c:8c:ec:bf:02:f3:36:6b:
                    16:2d:81:20:d0:53:da:aa:21:fa:9c:60:ba:11:34:
                    83:7c:2a:57:14:f8:fe:75:63:f5:99:fa:2f:94:53:
                    2b:91:28:e9:7a:02:62:03:82:18:6e:bf:04:16:9e:
                    25:95:59:85:06:cc:17:57:e5:5c:1e:35:e8:a2:86:
                    3b:c5:fc:d3:77:5b:97:a3:11:e7:f3:e9:c3:9d:3e:
                    1c:9b:22:b5:08:a5:cd:df:92:e2:2f:ee:c2:fe:cc:
                    be:c2:c0:81:94:e2:e2:f9:b9:fb:1d:e0:5b:0c:ab:
                    4b:03:52:e5:9c:c4:3e:09:67:96:ca:4c:4e:3b:71:
                    31:4f:07:19:2b:7f:1b:08:bf:30:15:f8:bd:18:c2:
                    8a:0d:c7:c4:6e:ba:9c:4d:d4:3b:2c:04:77:53:3d:
                    27:e5:86:9c:b4:32:03:62:bd:db:00:c0:29:47:88:
                    91:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3C:5A:80:55:48:94:CD:26:FE:C8:D4:33:74:D3:39:D1:E0:B5:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/912e6cbd-06cd-39c2-8814-53eb816ddbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:21:81:e2:3b:b4:b2:99:1e:85:03:3e:cf:fa:2e:d6:16:29:
         e5:f1:07:f1:34:80:ef:d3:ad:4c:24:aa:96:71:95:7a:02:82:
         da:02:11:1d:99:ed:4f:14:8e:2e:1d:da:f8:6a:cb:f8:a8:ed:
         06:1f:1c:f9:d5:04:a0:6d:fd:b9:9f:0c:19:91:b2:47:7d:b8:
         7c:5f:26:c5:ac:61:2c:3b:07:ab:6d:27:03:3b:0d:06:da:46:
         0a:72:eb:06:22:f6:f9:84:ab:6c:66:c1:cc:01:ad:44:1e:c6:
         d7:85:c7:c0:1c:0b:6b:19:60:63:f6:42:d3:d4:9f:aa:b2:46:
         18:4a:00:0a:af:67:f9:f9:c2:c6:77:26:6e:2d:25:e3:99:a9:
         37:ea:44:ff:12:ae:22:6c:d8:6f:4c:79:d4:ae:c8:4e:ab:4b:
         38:d2:d9:df:57:8d:38:93:04:a9:88:37:84:96:e8:84:9c:0c:
         69:b0:c6:bd:6c:00:22:3c:6b:a9:5f:aa:6d:c2:69:be:ed:e8:
         25:8c:5d:cb:25:41:66:f3:93:61:c6:7e:2a:15:52:d5:d2:98:
         f0:92:4a:8a:4c:a1:9d:08:67:af:5b:c5:d5:65:35:4e:a1:ee:
         99:31:11:9a:bc:15:04:00:4e:a9:1c:b3:f6:7e:53:63:99:36:
         40:f2:f1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:56 2025 by rpki-client