Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/10058fe0-b450-3544-ac31-82a22d473ba8.roa
File:                     10058fe0-b450-3544-ac31-82a22d473ba8.roa (raw, json)
Hash identifier:          FDf1BhrR3Mm2EqKfvhtCGXX8tUJBLcffnZq5fQ6tLbU=
Subject key identifier:   F9:7E:E9:A3:B4:FA:81:97:79:24:2C:D6:E8:41:6E:13:84:F4:AE:33
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849ABB4B4B5AC6585C734029800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/10058fe0-b450-3544-ac31-82a22d473ba8.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     399823
IP address blocks:        23.27.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:b4:b5:ac:65:85:c7:34:02:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=6de8fa5f-e262-4e2b-9922-003dd0731233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1c:c0:0d:44:f4:cc:03:41:e6:46:12:03:2a:
                    c4:41:93:0a:3f:7a:41:eb:0c:7b:e0:7a:bc:cd:01:
                    a0:5a:3f:b9:8b:ba:02:de:b0:ed:b5:4e:b6:2c:f6:
                    4b:60:cf:3b:61:03:10:4b:0f:f6:b8:a5:c4:65:a3:
                    3b:00:20:70:c7:bb:43:4c:a0:fa:2a:b3:3e:15:89:
                    0d:f4:f8:66:77:e0:82:9d:0b:05:3a:79:97:ec:d5:
                    4d:e2:1b:ae:1a:ba:db:d4:2f:57:66:c3:33:08:88:
                    b4:e6:54:72:5c:76:d2:aa:e1:dd:ff:e7:5a:a1:3f:
                    4e:57:ac:0f:bb:05:f4:bd:3a:6c:06:05:eb:14:23:
                    b0:a0:a8:c9:96:ad:f9:e6:66:33:0e:d8:49:1f:8b:
                    29:90:b0:9e:f1:98:21:6b:6f:55:ac:4d:7c:b4:0d:
                    f8:72:36:e9:b5:63:65:3f:9d:e4:4f:e7:8f:4b:1b:
                    34:51:db:f8:bc:39:9e:b2:e1:a3:cd:c0:39:e7:ab:
                    57:dc:5c:16:ab:0f:94:73:b5:a3:4f:18:a0:c6:35:
                    52:56:8d:24:20:be:d3:8a:cf:91:fa:66:f0:c2:c3:
                    49:7f:0e:ad:6e:f2:b6:d2:44:a4:45:70:3a:46:1b:
                    7f:66:69:88:c9:9e:fe:4f:30:2f:99:db:87:06:ba:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7E:E9:A3:B4:FA:81:97:79:24:2C:D6:E8:41:6E:13:84:F4:AE:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/10058fe0-b450-3544-ac31-82a22d473ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:20:9b:b7:8e:62:89:1f:8a:f5:0b:fa:f1:32:45:75:9e:1b:
         97:da:92:76:31:7f:02:df:29:5d:19:f7:53:f8:91:0c:e0:bc:
         3b:41:91:49:7d:fe:53:9e:1e:c1:49:2b:a0:ad:17:ca:f2:7f:
         cc:26:b6:3a:09:3a:2f:4c:12:db:2c:f0:9d:24:e5:8c:b1:49:
         20:e0:d6:2e:b4:08:54:6e:c3:4d:e6:eb:b4:08:b4:af:02:b7:
         57:d7:31:e4:d5:63:49:fe:f4:ba:6f:09:1e:1e:09:c9:a8:1b:
         17:fd:1f:d0:dd:84:0a:0d:15:8f:ce:13:09:f2:dc:42:52:99:
         88:31:e1:37:9f:51:4d:64:b2:84:07:ca:9c:c8:81:2c:1b:92:
         56:95:b9:c2:0f:35:56:e1:ac:b3:34:60:d9:78:5f:c4:8a:40:
         72:b1:d9:28:a5:39:ef:58:9a:a7:3a:cf:3e:35:a4:25:67:b7:
         23:32:e8:90:7e:33:92:50:89:6a:e3:72:a2:db:d9:46:2a:48:
         47:88:f9:9f:47:13:48:bb:61:fa:f6:79:41:1c:ff:fb:67:64:
         6e:ca:f4:02:69:ca:7a:e5:0a:d2:0d:bc:95:9a:e3:f7:13:7a:
         89:85:01:95:8e:fd:34:e9:5e:4e:cb:e2:9d:b8:1c:7c:3b:78:
         35:a9:ea:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:33:50 2025 by rpki-client