Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0139e1e-b38c-3fe4-914e-b2be68c66ca5.roa
File:                     f0139e1e-b38c-3fe4-914e-b2be68c66ca5.roa (raw, json)
Hash identifier:          2L0+UtUdpGin9BfRb0ECTuuOrMtgOSia5bdbwpJrpGQ=
Subject key identifier:   B4:3D:BE:F2:53:82:28:3F:55:0E:F5:E5:09:54:3C:38:5C:56:61:B2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858471E705A8723A4CF32C8CB6200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0139e1e-b38c-3fe4-914e-b2be68c66ca5.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     149440
IP address blocks:        23.27.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:5a:87:23:a4:cf:32:c8:cb:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=ca000db6-8bd6-4ef3-ae0a-0437bb4dc0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:b1:49:19:ef:26:fd:4f:02:13:73:20:4e:
                    34:62:45:5d:fc:61:0c:f1:8c:5a:c0:23:ce:ef:e1:
                    d9:1f:e2:ce:bd:b5:99:bd:58:1c:6f:48:8b:df:10:
                    1b:91:90:01:09:56:b1:04:96:5a:8e:51:0f:83:a3:
                    57:f7:f2:87:81:d3:15:54:76:06:84:d4:aa:a2:49:
                    ce:91:93:42:89:61:57:8f:21:2e:a6:06:26:7d:34:
                    0f:1d:63:fc:68:ab:a9:95:0b:20:80:56:ee:a9:1a:
                    80:f2:ff:a9:89:85:7f:b1:90:c3:bf:b7:34:13:e4:
                    81:7e:c6:96:fb:22:f3:ea:bc:f8:ec:ac:80:84:ad:
                    d7:f8:e5:fd:06:0c:24:24:80:08:aa:ca:8d:b7:00:
                    fa:6d:62:83:fb:ff:54:c3:87:d1:fa:07:c9:ee:4b:
                    3c:a0:c5:50:a6:8b:cb:61:b1:73:78:4a:0c:d6:d2:
                    68:47:21:a2:1d:c3:49:9d:67:46:f3:7e:ce:a6:ed:
                    23:38:6d:3b:3f:d2:20:aa:2b:e4:f3:43:ba:03:78:
                    f0:e2:cd:3d:f6:6a:47:f0:bd:b4:50:0b:7a:96:1c:
                    95:df:8e:24:2e:ff:9f:4d:6a:98:1e:5b:4c:c7:ea:
                    c6:10:b6:53:a1:a8:de:ac:f9:b6:c8:f9:01:bf:f8:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3D:BE:F2:53:82:28:3F:55:0E:F5:E5:09:54:3C:38:5C:56:61:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0139e1e-b38c-3fe4-914e-b2be68c66ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:58:c8:b0:18:f5:6f:38:72:a2:1d:dc:d8:25:da:31:23:21:
         e1:44:f8:e3:ba:7a:30:ce:8c:3a:76:99:cb:a5:a6:e2:2a:e6:
         4d:6a:1f:05:52:c5:c4:53:28:0a:8d:97:c1:95:d6:b6:c6:56:
         eb:d1:3d:ea:9c:66:ec:16:a8:2c:95:fc:20:80:ad:6f:b9:f8:
         aa:c8:88:fa:23:52:0b:7b:69:e7:de:55:f2:1f:bd:27:0f:57:
         3c:a4:10:6b:53:4d:c4:a4:1c:6d:3c:a5:da:6e:9a:ad:b3:68:
         f7:af:b5:c2:9a:2b:28:bf:25:57:f1:ce:97:b5:a5:10:d2:4d:
         32:dc:ed:43:bd:d9:12:0a:6a:7f:bc:68:a6:24:29:48:85:00:
         07:42:1a:97:26:0c:fa:28:3b:91:3c:aa:c1:7d:d6:fc:59:82:
         66:a4:0c:d9:1e:fd:8d:ac:e9:5e:fd:1d:a3:e1:c7:37:79:ce:
         6f:c8:9c:bc:0b:d9:a4:a9:01:82:b3:f5:ec:19:0c:59:32:27:
         9b:fa:ac:c6:08:f2:8d:af:a3:50:d0:76:f1:06:69:78:ee:24:
         9b:21:4c:ee:cf:40:f7:20:83:ad:88:09:f8:36:58:a6:7c:26:
         b5:b5:88:47:1a:f5:0d:2e:c1:bd:cc:df:dd:2c:49:a4:15:6d:
         4d:32:35:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:46:06 2024 by rpki-client on console-ams.rpki-client.org