Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be19e451-8624-31d3-a026-9aa6a345baa2.roa
File:                     be19e451-8624-31d3-a026-9aa6a345baa2.roa (raw, json)
Hash identifier:          HNaD/RYT4V1kDDFEQfxeE/E5OTyhdLywAQFXAHdRTaw=
Subject key identifier:   F0:19:41:98:11:11:A6:C7:7F:9B:6A:7D:0F:1C:FB:98:11:6D:19:A8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F6392CE40F2354741DF740
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be19e451-8624-31d3-a026-9aa6a345baa2.roa
Signing time:             Fri 12 Apr 2024 17:24:42 +0000
ROA not before:           Fri 12 Apr 2024 17:24:42 +0000
ROA not after:            Thu 11 Jul 2024 17:24:42 +0000
asID:                     44477
IP address blocks:        23.27.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:39:2c:e4:0f:23:54:74:1d:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:42 2024 GMT
            Not After : Jul 11 17:24:42 2024 GMT
        Subject: CN=3aac84eb-9322-4ac3-8eab-54845528d768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:95:12:b2:08:88:76:42:e3:37:17:17:fe:c1:
                    a5:b3:84:1b:ce:89:62:76:07:f9:38:02:4e:33:2d:
                    2c:2e:56:78:ef:4c:ae:9e:ae:6d:82:d5:59:dc:b6:
                    3d:0b:59:b5:0d:c3:30:5c:c3:ee:23:7c:a5:f3:6b:
                    04:89:80:0d:6f:27:93:e2:6c:4d:83:f7:b4:1b:b4:
                    9f:10:3d:57:7c:38:75:54:cd:62:4d:bd:32:d4:56:
                    7b:45:a0:fe:99:24:61:7c:2a:21:f5:22:12:9a:64:
                    8a:7f:73:a6:86:5a:ef:3b:d6:ef:57:8b:7e:c0:f6:
                    3c:85:c6:bd:5d:01:ec:60:25:7c:0b:e8:39:38:d3:
                    15:1b:ad:a8:c9:0b:68:bf:f2:1d:13:82:87:3c:ad:
                    2f:21:89:5c:dd:b4:de:60:e1:bf:29:5b:29:35:ac:
                    63:be:dd:79:7f:c8:de:8b:bd:a8:a8:c9:ef:8d:a9:
                    11:40:8f:8e:ba:96:9e:6c:61:4b:1d:8a:0a:48:93:
                    a7:64:b9:22:6c:9c:a3:57:9a:57:20:88:9a:14:b5:
                    a6:9c:b9:70:ea:06:3c:43:98:92:5d:bb:ef:25:ca:
                    29:6e:a9:80:0b:c0:15:d7:56:63:3a:9c:c7:33:ed:
                    80:16:91:df:48:94:fe:fb:3e:1f:8d:02:5d:b7:5a:
                    e2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:19:41:98:11:11:A6:C7:7F:9B:6A:7D:0F:1C:FB:98:11:6D:19:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be19e451-8624-31d3-a026-9aa6a345baa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:56:7a:57:13:13:09:60:02:83:e8:5b:9d:ca:7d:f5:24:cd:
         9a:c2:e3:a2:24:08:04:c1:65:b6:e2:11:bf:29:18:9b:ba:00:
         0d:84:a0:ed:45:a4:b4:d4:cf:eb:cb:b7:c1:69:f8:07:f4:18:
         cf:f2:e1:b2:cc:3b:b5:c1:8c:76:f6:0d:3f:8e:8e:7a:f4:56:
         70:8d:01:bd:62:44:81:63:62:60:49:f5:de:ef:25:89:db:66:
         d9:2c:f4:8b:00:3b:ac:d5:fd:24:6c:d9:2f:93:0b:86:22:a4:
         29:03:86:53:42:f4:aa:08:9b:8e:02:d6:41:fe:cf:5e:d4:be:
         e0:19:2d:af:bd:49:27:b3:a6:cd:57:bf:73:08:90:72:e3:be:
         c0:d8:42:f4:4e:7b:58:66:da:85:79:a1:cc:fd:33:9f:5c:a2:
         68:f6:aa:48:3e:c6:cf:a6:f0:59:f7:77:9d:1a:4f:37:f6:d4:
         cb:21:71:f1:c0:9c:15:be:1a:f5:1a:f2:78:48:4f:7e:35:56:
         6b:26:aa:47:63:fa:39:cb:d7:e4:4a:2f:a0:0d:5e:07:f6:df:
         02:fb:a5:63:f1:23:98:da:f3:2a:48:73:03:aa:76:4e:cf:d8:
         a3:da:97:31:07:dc:47:69:8b:e0:77:02:2c:50:f4:30:92:b9:
         4e:21:3d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 22:03:00 2024 by rpki-client on console-fra.rpki-client.org