Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9fe9f0ba-a10f-34a8-906e-0c52cc197e0d.roa
File:                     9fe9f0ba-a10f-34a8-906e-0c52cc197e0d.roa (raw, json)
Hash identifier:          oU2xK9Yqjpc/NbAJouPYuQmT5mvx24cURsOM901q8NA=
Subject key identifier:   FA:81:E8:3E:FB:AD:3D:AE:E5:4C:62:5B:15:67:7C:6F:9C:7B:73:27
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847A66CA35A69337051A5ADC640
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9fe9f0ba-a10f-34a8-906e-0c52cc197e0d.roa
Signing time:             Thu 24 Oct 2024 18:03:02 +0000
ROA not before:           Thu 24 Oct 2024 18:03:02 +0000
ROA not after:            Wed 22 Jan 2025 19:03:02 +0000
asID:                     401152
IP address blocks:        23.27.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:6c:a3:5a:69:33:70:51:a5:ad:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 24 18:03:02 2024 GMT
            Not After : Jan 22 19:03:02 2025 GMT
        Subject: CN=f12c3b0c-9e19-4742-bed8-aa45e2134019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:38:ef:74:29:1e:55:ea:0a:89:82:80:b2:
                    32:e1:5a:cc:82:01:fa:21:e1:d0:2e:b0:7c:ed:66:
                    09:82:91:79:7b:f6:ef:0c:95:d6:c1:97:5d:2b:a7:
                    e5:ab:0a:a9:27:19:cb:8f:1c:31:1f:fd:85:e9:8f:
                    c3:1d:ba:12:2d:8b:ea:be:e3:56:9f:48:d2:ce:5b:
                    0e:98:84:7e:04:0a:24:4c:cd:77:eb:9d:ab:cb:04:
                    7b:34:92:b4:ee:27:43:3c:39:cd:69:4f:ab:7a:6c:
                    50:ab:10:27:62:e6:b0:99:22:12:e4:b0:d8:b8:27:
                    00:64:0e:a7:38:4f:28:19:4f:48:7e:56:9f:17:74:
                    88:6f:a5:20:ee:61:7c:37:00:27:67:21:16:64:9c:
                    3c:9f:83:b8:a8:0f:56:74:f7:48:f4:78:55:16:8e:
                    27:16:16:96:c2:14:51:c0:4a:78:3d:00:4a:67:39:
                    9e:dc:5f:16:82:b2:76:ca:d3:29:f1:1e:0e:26:bd:
                    20:84:40:91:89:be:9b:7b:05:3b:4f:7f:00:67:65:
                    7e:03:60:5e:e5:f9:d5:d5:5f:4e:5b:13:58:5c:0e:
                    29:8f:89:78:4d:0f:26:be:74:4d:0e:85:ac:43:33:
                    6c:0f:2d:fe:ae:e6:25:3c:7a:78:e3:26:4c:51:2d:
                    f0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:81:E8:3E:FB:AD:3D:AE:E5:4C:62:5B:15:67:7C:6F:9C:7B:73:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9fe9f0ba-a10f-34a8-906e-0c52cc197e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:43:29:64:e4:1e:e8:5c:d1:ab:55:cd:72:6b:6d:89:12:cb:
         a5:42:6f:7b:f8:f1:2f:6a:c4:15:c3:63:00:63:35:b4:39:33:
         53:4d:ce:c5:4c:f2:68:68:b6:5e:3a:3b:3e:c0:cd:9e:4c:82:
         ca:f7:0d:f9:da:90:46:85:99:e4:bb:e1:0c:bc:9b:1b:37:56:
         03:b4:da:f2:2a:37:d7:7e:d5:3b:9a:9c:20:c4:d2:bc:8e:fe:
         57:db:ca:c5:b3:86:21:0b:eb:17:b3:fd:be:6b:4d:b0:ad:4d:
         a9:49:2b:e9:02:17:30:d6:78:04:22:af:cd:72:af:85:a1:77:
         c6:77:be:cd:e0:3e:02:25:a5:ea:53:6f:30:89:95:1b:c8:cc:
         44:6f:d0:99:c0:04:d3:88:f2:40:17:80:c8:ff:6a:62:52:dc:
         35:df:ca:bd:3f:cc:81:8d:d6:b1:02:48:a9:b5:f1:6e:dd:e7:
         d6:f6:c2:39:ab:a4:0d:3c:89:0e:67:80:ef:b4:fa:be:44:c8:
         7d:f3:74:9f:ad:95:f3:af:ed:e3:80:4a:63:0d:2f:0b:78:44:
         31:3a:db:53:ae:71:4e:69:0e:37:1c:9c:ca:56:f0:fc:88:1d:
         3f:06:c6:04:1a:e1:30:f4:fa:28:27:ae:08:63:3e:b7:89:05:
         3f:48:e0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:32 2024 by rpki-client on console-ams.rpki-client.org