Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce588329-f2d6-3b41-a36d-73c9039a31e7.roa
File:                     ce588329-f2d6-3b41-a36d-73c9039a31e7.roa (raw, json)
Hash identifier:          lZ7OcSLDQgn2WI+nS5XhSAn5swvxvevYtEGEfBL680o=
Subject key identifier:   ED:23:2D:68:78:A4:72:2F:E4:E0:B3:08:BC:51:04:53:9A:ED:9F:E9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847D4049CF822DC190CEFCC8EE8
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce588329-f2d6-3b41-a36d-73c9039a31e7.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     209854
IP address blocks:        23.27.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:9c:f8:22:dc:19:0c:ef:cc:8e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=59612701-bc80-498c-ab44-b949db22bd9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:08:df:8a:cf:60:76:6d:6d:5d:13:53:20:7b:
                    65:1e:1d:d6:48:1a:89:08:7c:4c:30:07:d8:dc:c4:
                    f7:7e:06:e4:04:54:27:a7:7e:80:5e:84:41:fd:cd:
                    d9:b1:b8:18:0f:35:2e:6e:31:34:87:3b:ea:ee:d7:
                    a3:11:6a:c6:e5:59:85:d1:8b:3a:27:ee:58:81:7c:
                    1c:b5:8b:94:26:cb:02:3b:8b:f3:60:9c:c8:60:39:
                    af:16:40:ea:16:97:cd:d8:71:8d:f6:77:15:9b:a3:
                    a7:f2:fa:55:84:89:28:2d:30:38:f3:62:18:ff:5e:
                    27:ce:31:27:f9:6c:4a:f7:e8:25:95:9b:05:9c:4a:
                    35:1e:35:b6:89:19:43:8e:93:49:08:12:44:51:62:
                    30:9a:a8:6f:35:25:5b:b7:29:62:85:76:04:b6:49:
                    45:f1:ec:a7:30:c9:b8:2e:0f:f3:7c:f3:14:c6:0b:
                    41:6c:cf:1b:2d:c1:16:6c:45:7c:f4:54:78:b2:ae:
                    2d:4f:f4:ac:46:ce:75:4c:6d:7b:2e:30:fb:05:65:
                    bf:52:3b:85:a2:b4:0c:d8:4f:cd:04:56:1a:4e:44:
                    9e:47:f0:c1:91:db:da:5b:1c:c0:d9:94:15:3d:46:
                    81:69:c3:7b:5f:d1:0f:e6:53:0f:b6:53:3f:7f:06:
                    da:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:23:2D:68:78:A4:72:2F:E4:E0:B3:08:BC:51:04:53:9A:ED:9F:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce588329-f2d6-3b41-a36d-73c9039a31e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b0:15:86:68:14:b2:66:73:0e:14:cd:f2:b6:31:ae:12:1c:
         8e:e1:64:ba:03:24:32:d5:61:25:18:bf:a9:b0:9e:2a:d2:7d:
         01:51:68:f6:f2:8a:68:fa:c7:bc:00:8d:3c:39:0d:b4:d8:a7:
         9b:eb:4d:f9:0a:f5:cd:f3:ec:bc:11:0e:e8:ac:78:98:44:4f:
         a7:e3:30:7d:41:92:9b:a2:f6:af:85:4e:cc:9a:f8:8a:36:18:
         cc:68:5c:34:40:07:be:82:e7:f4:61:f0:32:e4:63:2d:04:55:
         72:47:57:9c:99:ae:72:6a:08:5c:b8:76:7d:d3:36:3d:44:d5:
         fe:f2:82:4c:d8:fd:4c:47:e7:11:12:c3:03:84:00:10:0a:2f:
         2f:81:80:dd:f7:51:d0:0c:72:42:c0:42:aa:52:90:9d:89:38:
         53:5f:9f:f0:6f:28:18:f9:d2:01:e0:f1:d0:d8:f4:10:92:85:
         c8:fd:b0:e5:e5:34:7b:24:1b:fb:14:4f:c4:21:06:f3:95:65:
         c6:3e:59:09:9c:9c:73:23:08:22:4d:f1:a8:8a:61:01:4a:53:
         76:ed:46:ad:53:a1:50:42:77:e4:da:05:73:fd:b2:4b:b7:0c:
         9a:94:db:73:c6:47:14:35:2b:f8:80:8a:cb:a6:16:0a:0f:19:
         4f:b2:48:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:38 2024 by rpki-client on console-ams.rpki-client.org