Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d6e01858-2e0a-3346-ae08-fab5ea93085e.roa
File:                     d6e01858-2e0a-3346-ae08-fab5ea93085e.roa (raw, json)
Hash identifier:          DwVHqjT0G3+fQOwtaMs3mZx0GDs1Xptngg3+2ablZUg=
Subject key identifier:   DF:F8:18:B3:87:4E:8E:F6:AD:DD:CC:8E:DD:68:0A:67:5E:74:D6:D4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AC60DF800CD2FCCD39915F20
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d6e01858-2e0a-3346-ae08-fab5ea93085e.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     11404
IP address blocks:        23.27.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:df:80:0c:d2:fc:cd:39:91:5f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=806748bf-cc5e-4e70-888e-e9ee1e70eb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:86:24:d5:42:84:04:03:12:e9:86:a4:4b:53:
                    79:4c:aa:b1:9c:37:87:06:80:da:4c:65:5d:7d:4c:
                    a6:c3:17:dd:90:46:c6:30:80:84:ea:6d:cc:6d:8c:
                    35:b6:f6:a8:7d:5b:43:97:8d:1b:2b:87:b2:75:ce:
                    c7:02:45:53:d3:54:47:49:7b:64:50:0d:bf:e5:4c:
                    4c:44:c3:f8:e1:b0:3a:b2:42:65:3c:6a:66:fb:6e:
                    c4:35:41:f9:56:58:13:e3:26:71:91:29:e8:4f:8a:
                    fb:46:57:20:cf:26:6a:dd:d1:f2:03:86:a3:d5:37:
                    52:1a:bf:fd:52:0d:96:50:f2:30:80:a3:eb:dd:65:
                    d6:f4:aa:b1:12:b9:7c:14:81:ff:bc:7a:17:57:52:
                    09:10:a1:31:f6:4b:53:b0:e0:bf:df:46:99:83:5f:
                    b8:9f:7f:2d:ab:76:2f:d3:c4:e6:79:06:c2:b7:25:
                    d8:fc:1f:4b:9a:7f:2c:d0:63:8b:a5:10:ad:27:d7:
                    96:14:5c:75:a8:e3:e2:f8:c8:cc:63:60:df:63:2f:
                    a5:1b:4f:03:29:80:16:64:78:d0:41:64:3c:ec:e8:
                    48:fd:82:4b:05:12:89:c0:e7:86:47:83:77:1a:46:
                    5c:5b:e4:55:c1:55:69:45:b7:23:44:0b:e8:23:78:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F8:18:B3:87:4E:8E:F6:AD:DD:CC:8E:DD:68:0A:67:5E:74:D6:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d6e01858-2e0a-3346-ae08-fab5ea93085e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:20:7b:d6:06:ef:d0:df:49:8d:68:7a:76:00:84:e5:26:2f:
         aa:b5:21:12:a6:e0:21:ef:15:27:00:f2:9f:b2:1b:81:8d:45:
         f4:01:97:be:05:38:20:a0:38:81:15:37:18:eb:fa:7f:b8:8d:
         c8:87:fa:ab:5d:f9:e0:80:16:1b:b0:22:9b:bc:66:34:e0:de:
         4c:12:b7:ac:95:04:ce:4c:35:04:cf:9a:39:2d:44:b2:ae:49:
         6b:36:8d:40:6e:1e:2c:16:41:25:bf:11:f1:47:6b:a1:27:a8:
         e1:a8:68:0a:a6:94:ae:4d:d4:f7:5e:d1:82:08:df:b7:d3:f1:
         25:5b:46:74:32:24:be:1a:9f:2a:87:ef:87:2d:42:d0:28:98:
         07:45:12:47:70:ac:d6:38:4e:9a:9f:50:c5:85:46:f3:05:39:
         c4:e8:12:91:2a:42:d2:17:03:d3:2a:66:d7:91:57:f4:92:e5:
         42:07:14:2e:4b:fe:83:93:18:e5:53:6a:1b:74:b2:32:b8:c6:
         97:1e:24:e8:a1:d9:8e:59:a4:dc:1c:c7:4b:af:2e:be:18:12:
         8a:ff:b0:16:ea:50:37:8d:38:cc:d4:46:b5:19:15:d3:47:f1:
         60:13:39:8e:9d:fb:77:5b:2e:0d:06:f4:9e:ff:e7:44:d1:74:
         b4:3d:78:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:20 2025 by rpki-client