Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a511b0cd-1ddd-3fd4-9431-ebdbc6cd9bf2.roa
File:                     a511b0cd-1ddd-3fd4-9431-ebdbc6cd9bf2.roa (raw, json)
Hash identifier:          9v4f/1afhYO29ff7KpXFpWaRIPWLDsdx9CMsHw+Hsro=
Subject key identifier:   8D:8A:71:91:5F:DA:50:88:77:79:76:FA:24:3C:AD:C1:43:48:A6:6B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F64235827D55CC5DDB7A00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a511b0cd-1ddd-3fd4-9431-ebdbc6cd9bf2.roa
Signing time:             Fri 12 Apr 2024 17:24:46 +0000
ROA not before:           Fri 12 Apr 2024 17:24:46 +0000
ROA not after:            Thu 11 Jul 2024 17:24:46 +0000
asID:                     209854
IP address blocks:        23.27.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:42:35:82:7d:55:cc:5d:db:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:46 2024 GMT
            Not After : Jul 11 17:24:46 2024 GMT
        Subject: CN=a6f6b6b5-90d7-4e23-886d-8c76ee8b3a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e0:ab:e2:38:16:b4:9b:0b:5e:0d:20:92:88:
                    b3:3b:88:24:64:4f:c7:41:9f:1f:96:20:e1:72:c6:
                    5c:5c:8f:b4:8d:51:22:06:d2:ec:46:be:81:4d:78:
                    27:48:fa:30:35:4b:b6:7d:85:82:87:20:f6:61:10:
                    15:1a:dc:ac:fe:5c:4f:3e:f9:92:ea:48:ab:44:bc:
                    9f:53:c3:05:09:a3:ca:c7:d1:75:e9:a0:d6:4b:40:
                    f0:85:3b:48:99:66:33:56:6d:c9:73:cf:7a:29:91:
                    9a:7e:a8:5d:4c:cf:5b:f6:5d:d6:2e:d0:4f:d8:a2:
                    1a:5c:6e:98:74:95:2d:08:ff:50:20:f1:4a:d7:6c:
                    8b:eb:a9:c1:98:fa:0b:33:83:bb:43:a3:c8:a1:4c:
                    c8:f9:a2:1d:c7:ed:69:e4:af:cd:71:63:84:b5:4b:
                    d1:8c:52:c7:b7:ad:7f:46:f6:3f:0d:32:7c:c2:78:
                    ce:0a:ea:97:f5:75:34:c6:b7:8d:f8:b5:06:7e:e9:
                    2d:2f:e3:9b:a5:70:b1:80:a9:16:c7:00:e7:c7:76:
                    03:95:7c:60:e3:36:5f:c0:0f:b9:b3:5d:2a:8d:79:
                    17:44:a5:39:5a:f9:de:38:57:a4:f0:7a:fc:5f:e1:
                    de:e0:4e:af:d0:54:ed:71:c1:cb:22:bc:41:c0:31:
                    77:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8A:71:91:5F:DA:50:88:77:79:76:FA:24:3C:AD:C1:43:48:A6:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a511b0cd-1ddd-3fd4-9431-ebdbc6cd9bf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b4:c3:ab:64:a6:29:6d:df:ea:ce:f5:59:d7:03:e2:6d:19:
         32:df:d6:87:a0:8b:8c:c7:5b:89:65:4b:1a:c2:90:3b:14:0a:
         17:1e:47:90:3e:f5:18:45:e1:23:c5:e1:18:40:66:4e:11:bc:
         c0:04:e0:30:00:2d:75:a6:29:55:95:af:69:3e:8d:27:8f:a6:
         9e:c0:8f:1c:ee:73:5c:a8:8f:d1:e9:ce:48:86:ee:02:29:b9:
         41:7f:e0:49:ac:96:4c:7e:f1:c2:29:2f:59:fb:a4:b4:b2:59:
         4f:38:36:f9:f1:9d:b9:e4:c1:be:03:7e:b2:53:4a:53:19:16:
         36:04:02:d8:57:3d:95:c8:1a:c9:99:fd:e2:d3:71:8f:f1:53:
         d8:e5:8f:85:a9:9a:44:22:0b:36:1d:b6:2e:2c:99:75:92:85:
         9f:f8:09:c2:ae:49:e4:e8:fb:ad:d7:c9:1b:64:c9:05:1b:e7:
         91:90:9d:ab:f8:f2:18:19:cc:ac:36:a0:e2:0f:95:f9:a1:19:
         c4:5c:28:13:dd:d5:2b:4b:1c:8c:dc:06:4e:6b:e0:05:99:39:
         ca:78:06:7c:a8:d1:ad:b5:b4:b8:d8:37:a0:c1:4c:a5:97:39:
         d2:ca:73:5d:cc:f7:0b:a3:be:e0:a1:e2:ad:5f:be:05:66:fb:
         57:c0:d3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:25:50 2024 by rpki-client on console-fra.rpki-client.org