Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b949b94f-dbc8-3243-b929-72e91e2e1f43.roa
File:                     b949b94f-dbc8-3243-b929-72e91e2e1f43.roa (raw, json)
Hash identifier:          NMPBr46EJ4fjOWAQOii5FQ0rlGaF37pkCW23MzTZ5Qs=
Subject key identifier:   A4:36:72:8D:2E:9F:0C:22:43:F6:72:C0:1D:2F:A9:7A:A1:69:54:25
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848EF614D61CAD4DA9CA9AB2900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b949b94f-dbc8-3243-b929-72e91e2e1f43.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     15083
IP address blocks:        23.27.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:4d:61:ca:d4:da:9c:a9:ab:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=7a1a0ab1-f79e-4fef-9435-6e2d2b28b2d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:3e:c0:e8:85:9b:7a:ce:55:21:95:14:32:
                    b0:a0:4c:27:f1:79:00:5a:0d:cc:52:87:c4:48:d2:
                    58:5e:c7:fe:00:c8:41:4a:23:87:fd:c8:3e:7e:56:
                    14:ad:e7:9d:0e:f9:82:31:f7:a3:a7:60:7b:2e:a9:
                    90:be:ec:f2:12:76:8c:0e:1b:c3:76:14:15:f3:95:
                    3f:f3:f2:a3:fa:3b:9b:7c:5d:95:f0:f7:23:32:5a:
                    84:b3:d4:79:25:84:52:20:fd:d3:29:3d:c3:8c:b6:
                    08:92:cb:0b:52:cf:04:41:4b:5e:6e:60:bf:bf:6d:
                    f4:2c:23:14:bf:c9:10:e0:15:cf:42:98:52:60:76:
                    fd:72:bb:b9:f5:7b:3a:2e:6a:4f:ff:85:6d:c1:89:
                    46:bd:fc:0a:d9:b4:6a:a9:72:4b:69:cc:ba:68:c9:
                    91:01:10:32:69:94:7a:90:33:85:cb:98:82:c6:6b:
                    c5:7a:e5:7d:12:f0:15:f9:64:d8:a0:83:d5:74:15:
                    7a:21:9f:85:d3:ed:1d:88:c9:c0:45:dc:06:29:ef:
                    30:17:37:c7:64:13:6c:8d:9c:eb:8f:2d:c1:51:8c:
                    ac:a0:92:8f:d2:1e:3d:29:2d:9b:1c:4b:de:1a:b3:
                    3e:31:4e:54:f6:d6:75:47:93:ec:d6:1b:a3:94:d6:
                    23:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:36:72:8D:2E:9F:0C:22:43:F6:72:C0:1D:2F:A9:7A:A1:69:54:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b949b94f-dbc8-3243-b929-72e91e2e1f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:5f:d8:22:f7:ee:2d:7f:b4:5c:fc:3b:3a:ab:48:4a:13:3d:
         41:79:8b:cb:3d:8e:92:77:7a:d4:51:72:6c:b1:c2:41:ce:01:
         11:f4:01:f7:78:f8:2d:0c:68:94:87:7a:82:49:79:09:88:d8:
         74:ef:93:af:76:34:a7:69:f4:51:d1:b5:9e:80:ac:40:11:67:
         3a:b2:b0:9d:a9:7d:70:3c:39:0b:42:c0:46:8f:fb:d5:28:8a:
         39:1e:49:51:a0:66:b6:ab:56:93:b6:79:e9:aa:ec:3b:2e:21:
         0b:75:73:c7:70:3e:dc:1c:4a:a0:07:62:68:89:0c:23:8b:69:
         ae:0e:16:de:c2:e0:50:06:f0:eb:27:ab:25:83:bf:2e:3c:7b:
         79:67:1c:13:09:9e:7e:e4:b5:8c:54:d3:13:7d:ca:69:2d:47:
         f2:77:97:62:2e:82:9b:97:64:df:72:07:84:19:2b:2b:5e:b0:
         0e:37:08:9e:90:5e:4a:42:e6:cd:f1:86:59:de:b2:1c:d6:83:
         0f:8d:a1:8a:ab:0d:88:5e:9e:ba:c2:02:f5:c4:9d:89:45:5a:
         e3:88:f7:ca:9b:be:5d:55:fe:3e:e0:7f:c4:3e:03:2a:09:24:
         fe:f5:0b:a3:0b:1b:05:67:77:0d:9f:53:05:c9:69:8b:09:c7:
         37:7c:05:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYU1hytTanKmrKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
N2ExYTBhYjEtZjc5ZS00ZmVmLTk0MzUtNmUyZDJiMjhiMmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmc+wOiFm3rOVSGVFDKwoEwn8XkAWg3MUofE
SNJYXsf+AMhBSiOH/cg+flYUreedDvmCMfejp2B7LqmQvuzyEnaMDhvDdhQV85U/
8/Kj+jubfF2V8PcjMlqEs9R5JYRSIP3TKT3DjLYIkssLUs8EQUtebmC/v230LCMU
v8kQ4BXPQphSYHb9cru59Xs6LmpP/4VtwYlGvfwK2bRqqXJLacy6aMmRARAyaZR6
kDOFy5iCxmvFeuV9EvAV+WTYoIPVdBV6IZ+F0+0diMnARdwGKe8wFzfHZBNsjZzr
jy3BUYysoJKP0h49KS2bHEveGrM+MU5U9tZ1R5Ps1hujlNYjnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKQ2co0unwwiQ/ZywB0vqXqhaVQlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjk0OWI5NGYtZGJjOC0z
MjQzLWI5MjktNzJlOTFlMmUxZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJxf2CL37i1/tFz8OzqrSEoTPUF5i8s9jpJ3etRRcmyxwkHOARH0Afd4
+C0MaJSHeoJJeQmI2HTvk692NKdp9FHRtZ6ArEARZzqysJ2pfXA8OQtCwEaP+9Uo
ijkeSVGgZrarVpO2eemq7DsuIQt1c8dwPtwcSqAHYmiJDCOLaa4OFt7C4FAG8Osn
qyWDvy48e3lnHBMJnn7ktYxU0xN9ymktR/J3l2IugpuXZN9yB4QZKytesA43CJ6Q
XkpC5s3xhlneshzWgw+NoYqrDYhenrrCAvXEnYlFWuOI98qbvl1V/j7gf8Q+AyoJ
JP71C6MLGwVndw2fUwXJaYsJxzd8BVU=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:24:32 2025 by rpki-client