Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9814ee00-ab30-3e1d-a66e-faaa91e5b0c8.roa
File:                     9814ee00-ab30-3e1d-a66e-faaa91e5b0c8.roa (raw, json)
Hash identifier:          T+nL48Sq+a1oF5dx8h7APbnhsXrAVRLIc5TQtUExOA8=
Subject key identifier:   76:74:21:80:47:91:E1:CB:2B:A1:03:FC:DA:27:3A:76:CB:07:11:4C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848DEA13266916ECEB8B73A4090
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9814ee00-ab30-3e1d-a66e-faaa91e5b0c8.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     149440
IP address blocks:        23.27.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:32:66:91:6e:ce:b8:b7:3a:40:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=c78e9502-161c-42f6-9e33-af498f91675d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:36:90:dd:31:35:b8:28:40:19:59:0b:b6:
                    d7:06:83:c9:1c:19:47:bf:98:45:95:a0:7f:ef:9f:
                    be:82:a4:cf:cc:b4:58:6b:69:1c:6b:54:2b:b1:d8:
                    35:54:2e:6d:fd:63:1b:32:d4:6a:3f:56:67:bb:dd:
                    dc:a3:96:f6:a8:f2:12:98:dc:85:5c:36:b1:f0:be:
                    3c:44:50:aa:00:d4:63:9e:79:91:a1:b9:20:ed:86:
                    ca:af:4c:a5:b0:f9:69:f8:b0:fe:34:7e:7c:9c:8b:
                    7a:77:5d:9c:f7:11:95:01:8c:2c:d3:ef:c4:1c:53:
                    f3:c5:e8:86:6c:57:d7:a1:30:35:d8:93:0b:14:02:
                    fb:65:dc:fb:84:15:34:9e:aa:72:d4:26:e7:e6:52:
                    fd:20:05:96:cf:4f:0c:7c:84:bf:db:87:01:32:cc:
                    e6:bd:5a:ee:de:44:c9:67:30:c5:10:b4:ba:4d:90:
                    68:32:c9:9f:2f:65:54:97:4d:11:2d:76:ec:b7:f1:
                    5e:5f:ea:85:68:8a:aa:1d:bb:a8:87:f7:af:19:d7:
                    b1:08:65:eb:d4:61:65:ce:64:30:7c:f2:52:80:83:
                    69:ef:ff:ea:69:80:66:45:e1:70:30:26:9d:a0:83:
                    bf:e5:d7:81:02:d5:4b:2b:0a:32:93:4d:66:51:aa:
                    ed:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:74:21:80:47:91:E1:CB:2B:A1:03:FC:DA:27:3A:76:CB:07:11:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9814ee00-ab30-3e1d-a66e-faaa91e5b0c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:cc:47:fe:4e:06:cf:08:4d:21:9f:ac:18:de:1d:96:7d:df:
         62:c5:d0:ca:b2:92:38:94:d1:30:89:53:55:c2:b2:38:0d:2b:
         fc:f5:7a:35:f1:ff:1b:d9:7a:6a:39:7f:88:82:48:58:9d:56:
         73:37:83:60:35:42:fc:cf:eb:65:36:49:b6:43:ba:0b:7f:fe:
         a1:0a:d2:bf:bd:fc:7a:95:35:eb:ed:c9:52:ed:e7:1d:ec:7a:
         d8:f1:82:52:1e:4d:a6:8b:f8:d4:17:cd:bf:a7:f6:ce:06:5b:
         0c:eb:e8:95:45:fc:0d:3f:fd:01:65:07:35:50:96:2a:54:71:
         ac:39:25:40:97:88:18:7c:36:f0:15:f9:a3:bb:e4:8f:3c:d3:
         0c:3d:8f:36:cc:2e:04:fe:1e:8f:b4:62:ea:2d:84:69:92:d5:
         7e:81:86:d1:4d:1a:d2:6d:39:3a:e1:0d:c0:63:9c:3b:7a:5c:
         50:af:67:86:e7:5e:94:e2:57:29:07:8d:56:78:2e:e3:83:c9:
         da:d0:45:b5:1b:24:a0:10:4a:a0:9d:a1:fb:b8:40:59:17:2d:
         f5:7b:a0:e8:52:42:18:a6:a9:c0:b2:88:c3:b9:c0:0d:f5:87:
         e6:ba:bf:ab:4d:87:45:e1:2e:5a:6a:d0:7a:66:79:84:7b:7c:
         92:d9:98:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:27 2025 by rpki-client