Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3315b27d-d870-3a73-9c13-fa9ea44196d0.roa
File:                     3315b27d-d870-3a73-9c13-fa9ea44196d0.roa (raw, json)
Hash identifier:          xrqVQ85wCbtenQShjW/LKdsveuLX7EAUixpMxPMudto=
Subject key identifier:   0F:EF:A9:8C:B7:6F:FC:BC:58:23:81:97:1F:5D:B6:D8:67:C3:A5:71
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849B6684DA200F2A9965B15AA90
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3315b27d-d870-3a73-9c13-fa9ea44196d0.roa
Signing time:             Thu 01 May 2025 21:01:06 +0000
ROA not before:           Thu 01 May 2025 21:01:06 +0000
ROA not after:            Wed 30 Jul 2025 21:01:06 +0000
asID:                     401152
IP address blocks:        23.27.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:68:4d:a2:00:f2:a9:96:5b:15:aa:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May  1 21:01:06 2025 GMT
            Not After : Jul 30 21:01:06 2025 GMT
        Subject: CN=a1e39156-9d56-4fe7-8b70-df02f9c0243c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:de:50:0d:2d:47:47:58:c1:de:19:d7:0c:68:
                    51:93:75:92:38:40:76:3a:77:06:1e:4d:6d:ce:96:
                    99:11:8f:e6:7d:dd:6e:aa:c0:a3:08:5a:6e:0b:01:
                    fc:ca:fc:43:09:ed:a8:82:48:7e:20:ce:1f:af:0c:
                    31:b3:75:c9:9a:22:53:28:c2:0b:ec:7b:a8:b8:f9:
                    88:71:08:81:8e:72:e1:58:95:5d:07:f5:94:26:25:
                    77:18:b1:e7:c4:0f:1f:94:00:5d:2c:40:00:5e:e1:
                    64:98:eb:2c:d9:06:ca:08:74:df:41:a0:c2:aa:cb:
                    0e:d1:c7:fc:e2:b5:f5:87:51:e3:e4:0e:93:49:2e:
                    55:e6:ef:45:7d:57:51:86:69:58:04:08:b6:76:26:
                    56:a8:06:c6:b0:c2:a6:eb:c3:d8:f1:5a:53:6e:7e:
                    38:61:4b:50:8e:15:46:55:bc:4c:00:9e:84:ea:d4:
                    f1:01:45:fc:16:7f:b9:81:11:bc:b7:73:52:78:4c:
                    33:c9:a6:9a:92:c6:97:4a:9f:ee:af:60:a7:ea:4a:
                    8e:bb:c5:14:e5:30:6f:d1:14:59:2b:85:1a:ea:fa:
                    26:b8:bf:80:2d:6c:95:39:bb:8f:47:e1:41:2e:8e:
                    8d:db:4e:20:db:f7:97:96:b9:a4:be:21:4c:6d:ed:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EF:A9:8C:B7:6F:FC:BC:58:23:81:97:1F:5D:B6:D8:67:C3:A5:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3315b27d-d870-3a73-9c13-fa9ea44196d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a2:20:4f:9d:c1:9a:fc:6b:a3:69:10:5f:cc:c4:0a:45:18:
         64:96:fa:55:c6:04:33:73:20:f0:81:0a:1c:f7:fb:3f:6c:e9:
         1b:19:87:32:a6:12:3a:77:4c:3e:a9:ff:99:f4:60:29:eb:2a:
         d7:4e:9e:f9:ce:a3:92:b7:17:76:b9:33:02:83:a2:64:a1:65:
         fb:de:aa:24:46:ee:9b:23:32:e0:f3:64:4f:58:52:9d:27:b6:
         ea:f0:37:e6:ae:6f:7d:d2:62:28:f6:af:7d:2c:8e:80:ad:da:
         5f:f8:66:8b:8d:e4:fe:08:8a:c9:53:90:34:90:9b:90:e3:c6:
         76:e6:39:ee:79:14:4d:6e:31:9b:51:b5:73:1f:8d:f7:dc:29:
         2b:0e:a8:ab:d3:20:a0:44:f9:32:8f:71:23:c2:41:17:81:d7:
         1c:8a:24:63:ae:df:89:96:90:6e:d7:6a:fc:ac:f7:a8:9e:31:
         b9:7d:40:37:04:f2:2d:84:91:c5:04:7a:c7:e6:f7:86:e3:8a:
         ea:68:ae:15:8f:50:09:67:69:90:4d:3a:e1:93:1a:3c:31:fb:
         64:1d:9e:33:26:f0:27:3d:08:1c:c6:df:9b:88:9f:9d:05:8d:
         a5:a4:e1:08:ee:11:12:bd:e8:29:bf:33:7f:69:93:63:f5:6c:
         8b:53:d6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:54:18 2025 by rpki-client