Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fbc076b0-c17c-344f-b46b-5fd27670d07a.roa
File:                     fbc076b0-c17c-344f-b46b-5fd27670d07a.roa (raw, json)
Hash identifier:          pV/gu7cGNmku1cJcvB5m62npv0PojxjBQXnypc9Ex4s=
Subject key identifier:   EA:E6:DF:94:67:23:5A:44:08:F4:A9:46:3C:7D:DB:FF:71:39:4E:53
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584858A03C338D3F35F739EF7C80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fbc076b0-c17c-344f-b46b-5fd27670d07a.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     5650
IP address blocks:        23.27.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:3c:33:8d:3f:35:f7:39:ef:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=b0c12ead-07d9-4c0b-bf26-79da5ebf46cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:35:52:20:a2:bb:ef:fa:65:7e:0a:28:a7:
                    e3:00:2b:fd:13:bb:f3:5d:57:4d:e2:99:51:e9:31:
                    fe:ad:55:56:41:f3:12:26:59:74:e1:67:f9:3b:17:
                    7d:be:33:54:e3:d9:f9:0b:bd:76:e7:aa:f7:11:f9:
                    26:0f:9d:a8:c7:b3:5f:48:a2:b9:3a:9e:04:d9:3d:
                    92:42:84:80:70:50:62:ff:89:01:61:7b:33:e5:a1:
                    0f:ca:32:fe:3e:48:80:18:53:f1:f5:e5:46:d5:4c:
                    b6:50:18:c0:d3:e7:7f:35:bd:61:fb:38:91:27:b4:
                    c1:65:5e:25:3f:df:8f:de:5c:e7:e8:6f:77:da:f1:
                    6c:3b:b8:b4:7c:8f:42:92:64:09:c8:d5:96:7d:ec:
                    1c:20:d7:6b:ea:b8:3d:fd:b9:82:ca:55:ad:fc:cb:
                    a5:24:53:08:80:60:31:dd:58:5a:98:a3:6b:98:ff:
                    87:7b:f2:37:94:7c:b9:00:90:56:a8:d3:2a:2e:cc:
                    e4:56:33:49:1f:25:db:09:c8:e2:84:ab:a5:24:d3:
                    07:93:53:62:1d:74:36:fe:b0:72:4f:2a:4d:8f:08:
                    64:d5:94:d4:da:b4:c7:51:a7:b1:29:fb:41:29:f5:
                    04:12:be:da:eb:88:fd:4c:3e:5f:df:25:48:dc:a5:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E6:DF:94:67:23:5A:44:08:F4:A9:46:3C:7D:DB:FF:71:39:4E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fbc076b0-c17c-344f-b46b-5fd27670d07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:7a:2b:01:e4:6b:1f:02:a0:3c:da:9c:94:b9:ec:2b:fe:e4:
         71:58:56:30:a0:c5:98:7f:9d:e8:99:6f:95:4c:7f:cf:f8:f6:
         6d:cc:da:48:fd:04:be:92:92:c8:3f:e7:f4:25:52:f5:5d:54:
         31:a7:30:6c:cd:c5:5b:2c:17:d8:0d:ed:db:20:df:fe:e2:a7:
         35:86:8c:0e:52:41:ba:13:4b:a6:c0:2a:ab:26:5e:60:ce:d3:
         e8:a7:44:16:2d:c3:ad:79:dd:00:93:c0:a8:0f:d6:5f:e9:e6:
         d6:fb:9f:86:0f:1c:e0:84:18:4b:2c:74:cc:d6:a7:2c:ab:d4:
         d4:41:cf:47:db:86:e3:2a:32:b4:3b:ed:c8:9c:fb:56:7b:f0:
         8c:b6:1c:38:54:32:0d:67:cb:eb:32:d9:5f:88:42:38:2a:5a:
         fe:e5:cb:33:fb:c7:47:9b:2f:14:31:49:6d:0a:64:d3:7c:a1:
         5a:c9:32:03:07:41:0c:57:d4:74:e5:f6:ee:47:11:be:ab:f4:
         60:93:17:1f:56:4e:b7:83:2d:d7:5b:35:37:d7:61:a4:44:5a:
         aa:c5:98:de:42:1c:3f:49:c3:91:54:a4:5e:b8:d1:b7:f2:d3:
         ff:86:58:3b:7c:4f:11:f3:42:93:17:1f:a1:50:18:73:83:ac:
         82:01:2b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:04:37 2025 by rpki-client