Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f83a500b-c8af-3af3-aeef-720e7001d236.roa
File:                     f83a500b-c8af-3af3-aeef-720e7001d236.roa (raw, json)
Hash identifier:          +6VseHinzS9OyfV7Lcc9RPDhCXdSRk5aIjnFHOkQH9U=
Subject key identifier:   1E:B2:76:D9:8B:2F:BE:EB:BA:1C:01:88:C4:BC:CD:16:69:07:6F:E8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AC60DAB5D749BA4D1CC90700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f83a500b-c8af-3af3-aeef-720e7001d236.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     7922
IP address blocks:        23.27.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:da:b5:d7:49:ba:4d:1c:c9:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=61693d4f-926c-4838-9177-22721d114cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:58:79:5a:fa:25:64:ac:18:1f:87:b0:27:
                    c1:5f:c8:97:8c:03:c2:f3:2a:2f:14:21:7f:11:90:
                    58:2d:8c:10:48:8a:11:e0:e6:6b:0b:f2:d3:be:c2:
                    45:59:75:4f:cb:f4:0d:dc:1d:2a:cc:49:77:a2:e7:
                    d0:b9:f4:ec:99:24:ce:0c:dd:84:9c:40:49:69:86:
                    6c:f2:b8:ab:e2:94:de:db:55:ac:f9:4f:32:66:c1:
                    34:69:4c:05:49:36:e0:9f:c0:68:3f:91:5f:f3:28:
                    84:d9:bd:ba:36:27:80:fe:a3:20:f7:12:88:38:c8:
                    ea:27:d1:a4:d3:30:5c:66:22:48:8c:6f:90:9d:88:
                    c1:17:8c:54:ad:0f:6b:62:53:2f:be:7a:15:b3:b0:
                    58:3a:24:f7:35:b8:74:d8:4a:64:4c:5f:0f:c5:6b:
                    52:cf:d0:e6:5c:65:7f:bd:83:80:47:6f:4f:d1:bb:
                    f2:3f:87:18:55:19:21:f5:c5:0f:e5:98:a1:a4:53:
                    e7:67:65:97:34:36:4d:58:c3:39:db:d6:d3:07:ea:
                    36:0c:f8:5c:6d:7b:eb:69:98:ac:bd:ef:80:29:34:
                    5c:a8:1b:f2:6b:72:92:2a:45:88:73:0c:58:3e:a7:
                    a0:f0:d9:e0:68:7a:d7:06:cb:ec:d5:22:84:1c:ef:
                    e5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B2:76:D9:8B:2F:BE:EB:BA:1C:01:88:C4:BC:CD:16:69:07:6F:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f83a500b-c8af-3af3-aeef-720e7001d236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:dc:d4:12:ad:61:77:fa:90:a8:5a:be:49:f8:61:4c:f5:38:
         7b:d4:f9:2d:8d:5d:f0:7b:62:e2:f1:eb:48:52:34:e5:e7:05:
         8f:72:d4:00:fe:a0:c9:7e:63:fb:25:0a:f3:8f:a4:be:0d:aa:
         43:d4:d3:d5:75:6b:46:28:8c:b2:dd:50:11:e8:48:ee:55:35:
         97:e5:56:9a:55:9c:c4:de:47:c6:e1:a4:cf:37:83:78:c0:87:
         41:33:af:13:4e:df:1e:b5:26:13:c2:72:a9:11:29:45:47:9f:
         b6:c5:e6:cf:c4:ed:4f:e4:57:67:c1:4f:56:00:e2:24:b5:3e:
         a4:24:3f:d3:d3:b4:aa:ff:b8:4c:83:b1:5a:19:78:7f:28:63:
         c2:f0:3f:1c:32:1d:f9:c7:41:e2:76:83:f1:20:6d:e4:e5:48:
         e6:73:97:66:aa:57:c4:ed:12:9c:f5:78:97:52:7d:5b:f6:94:
         7f:d6:95:3f:01:f3:12:ad:b7:1d:ba:4a:c3:bf:29:9c:74:d2:
         2c:27:c7:67:a4:09:a0:99:90:61:5e:42:cd:06:c6:3f:66:37:
         81:38:d5:2a:87:d2:24:b3:59:0e:2f:9c:c2:2f:f8:96:a0:da:
         eb:eb:78:61:d6:4f:96:d7:12:12:5b:03:63:f3:f1:70:8d:6c:
         89:54:a7:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYNq110m6TRzJBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk
NjE2OTNkNGYtOTI2Yy00ODM4LTkxNzctMjI3MjFkMTE0Y2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAFYeVr6JWSsGB+HsCfBX8iXjAPC8yovFCF/
EZBYLYwQSIoR4OZrC/LTvsJFWXVPy/QN3B0qzEl3oufQufTsmSTODN2EnEBJaYZs
8rir4pTe21Ws+U8yZsE0aUwFSTbgn8BoP5Ff8yiE2b26NieA/qMg9xKIOMjqJ9Gk
0zBcZiJIjG+QnYjBF4xUrQ9rYlMvvnoVs7BYOiT3Nbh02EpkTF8PxWtSz9DmXGV/
vYOAR29P0bvyP4cYVRkh9cUP5ZihpFPnZ2WXNDZNWMM529bTB+o2DPhcbXvraZis
ve+AKTRcqBvya3KSKkWIcwxYPqeg8NngaHrXBsvs1SKEHO/lOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6ydtmLL77ruhwBiMS8zRZpB2/oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjgzYTUwMGItYzhhZi0z
YWYzLWFlZWYtNzIwZTcwMDFkMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACzc1BKtYXf6kKhavkn4YUz1OHvU+S2NXfB7YuLx60hSNOXnBY9y1AD+
oMl+Y/slCvOPpL4NqkPU09V1a0YojLLdUBHoSO5VNZflVppVnMTeR8bhpM83g3jA
h0EzrxNO3x61JhPCcqkRKUVHn7bF5s/E7U/kV2fBT1YA4iS1PqQkP9PTtKr/uEyD
sVoZeH8oY8LwPxwyHfnHQeJ2g/EgbeTlSOZzl2aqV8TtEpz1eJdSfVv2lH/WlT8B
8xKttx26SsO/KZx00iwnx2ekCaCZkGFeQs0Gxj9mN4E41SqH0iSzWQ4vnMIv+Jag
2uvreGHWT5bXEhJbA2Pz8XCNbIlUpyw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:48 2025 by rpki-client