Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a0e91bd4-5ccd-3e6c-9e45-de72750fcd7b.roa
File:                     a0e91bd4-5ccd-3e6c-9e45-de72750fcd7b.roa (raw, json)
Hash identifier:          b/T/P9voQ9r1KGMcPGmsyDG2k8Xv1zC1CWI3ZepV9Q0=
Subject key identifier:   73:F8:61:F1:15:05:25:4C:70:5E:39:BB:E6:06:BB:1A:76:4B:F0:F9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847EFEF93194357E3B91474EC40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a0e91bd4-5ccd-3e6c-9e45-de72750fcd7b.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     44477
IP address blocks:        23.27.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:93:19:43:57:e3:b9:14:74:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=1731a56d-fde9-406a-bb06-ec763af53c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ff:bb:21:92:a6:21:82:f4:d0:fa:1d:e7:3c:
                    31:3e:2b:fa:02:8e:87:4e:e1:27:d5:6f:5b:fa:13:
                    4c:ff:96:d0:f8:64:d7:ed:c9:92:23:03:9b:eb:16:
                    9a:bb:2f:5a:19:b5:b8:1f:e4:ef:95:07:a4:27:d2:
                    c4:de:a5:14:9e:84:a2:9d:1a:9c:c5:d3:f6:0d:84:
                    aa:79:b6:28:37:ae:cc:74:30:ce:6c:75:ee:72:d3:
                    b7:5f:05:55:4d:96:15:b9:79:15:02:09:f7:12:79:
                    56:bf:eb:92:82:5f:a0:84:9c:f2:57:29:5d:dd:3b:
                    9d:98:df:6c:cc:de:72:b4:d4:48:7e:4b:36:22:73:
                    21:87:5e:17:2f:bf:6b:34:02:1c:8b:a6:b1:2c:85:
                    7c:bc:7f:97:99:a1:af:76:33:3f:03:a3:a0:7c:03:
                    e5:d5:e7:51:ff:85:e5:68:5c:24:67:cc:14:a0:ed:
                    a2:0a:c8:2c:5d:c2:98:a8:89:23:8f:af:df:05:c5:
                    c0:4f:83:b9:d9:a4:92:51:da:b3:b7:39:a6:fb:5a:
                    15:57:ad:d4:39:3c:cc:b2:27:24:0d:82:9b:b8:29:
                    18:ee:8f:f3:44:41:b1:0c:e6:ad:97:7e:26:41:62:
                    c9:82:55:f0:c5:f4:cc:af:98:03:97:62:eb:b4:4c:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F8:61:F1:15:05:25:4C:70:5E:39:BB:E6:06:BB:1A:76:4B:F0:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a0e91bd4-5ccd-3e6c-9e45-de72750fcd7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:a3:b3:4d:53:e5:f1:25:99:06:cd:d1:d5:38:08:e6:50:4e:
         bc:d1:b2:09:a4:8e:8d:3b:66:5a:44:20:29:ec:6f:cd:1c:f6:
         33:c6:61:38:77:ab:53:55:e1:81:ab:19:fb:32:24:98:13:58:
         4b:49:07:d6:a3:a8:44:42:18:56:b5:3f:06:d0:67:37:4e:dc:
         f9:0d:61:4d:b8:c6:30:33:f0:d7:7b:5e:5c:9c:7f:c5:fe:f2:
         ba:85:d1:24:16:ab:d0:ba:d5:d1:18:b4:12:ab:75:bf:13:80:
         8a:f3:11:7e:6b:05:66:9b:21:bf:8d:66:b9:80:c0:d2:2b:52:
         7b:c0:f1:3a:dd:8c:29:f9:41:2c:ae:cb:4a:54:d5:29:1d:89:
         90:7c:f4:b6:f7:c5:4e:cd:04:9a:cd:09:33:64:49:3e:10:8d:
         b6:dc:cd:a5:3d:ad:a1:38:8e:f1:0a:13:a9:ef:29:5f:ab:ef:
         95:4a:15:d0:ff:3b:9d:08:d3:23:2e:67:1d:38:2e:de:1c:17:
         f4:93:3f:b2:5b:0d:d7:22:47:a5:a4:68:d3:75:df:7a:87:6b:
         7f:26:fa:27:cc:b9:e7:29:26:48:5e:f4:57:b6:0c:79:b0:e1:
         31:b7:f6:8d:1e:4a:46:4a:9a:fd:f1:06:ca:4d:41:e5:90:15:
         10:10:59:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:56 2024 by rpki-client on console-fra.rpki-client.org