Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8e91c45b-1bba-3f1c-b339-d484394803d1.roa
File:                     8e91c45b-1bba-3f1c-b339-d484394803d1.roa (raw, json)
Hash identifier:          z22PSvig00KiIbemV86bW4xGBZbnNQEU4ZQDo4VUPLw=
Subject key identifier:   DA:42:4E:75:8C:20:D6:E2:91:9F:B3:6D:C0:C2:5B:55:5E:E6:3C:F3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849B6684DB9531C4A7912ADB4C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8e91c45b-1bba-3f1c-b339-d484394803d1.roa
Signing time:             Thu 01 May 2025 21:01:06 +0000
ROA not before:           Thu 01 May 2025 21:01:06 +0000
ROA not after:            Wed 30 Jul 2025 21:01:06 +0000
asID:                     401152
IP address blocks:        23.27.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:68:4d:b9:53:1c:4a:79:12:ad:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May  1 21:01:06 2025 GMT
            Not After : Jul 30 21:01:06 2025 GMT
        Subject: CN=9d0ec8fe-ceb1-4b14-b043-e9cc356befdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:64:4d:fd:cc:b1:70:5c:22:c7:fa:c9:5c:4c:
                    ee:8e:97:c9:63:49:0a:08:f3:8b:b1:c9:80:85:74:
                    29:c0:5a:b9:7e:8e:7d:a9:af:7b:5c:51:64:ad:9a:
                    fb:d0:10:39:7d:f0:b5:f9:da:b7:6b:70:c2:17:1a:
                    ed:56:37:39:04:c7:a1:d8:e4:9a:35:40:79:04:58:
                    5f:7a:93:9e:08:dc:9e:eb:e5:d9:9b:d3:df:00:b1:
                    96:29:f7:df:93:72:72:a0:fd:fa:f8:4c:85:0c:b2:
                    3b:9b:d7:d6:0a:29:fe:a4:7c:75:89:00:66:43:83:
                    23:79:9e:ab:c4:14:e5:a8:5f:e0:29:cf:2c:b1:f4:
                    e7:90:7c:12:99:6f:0a:4b:cd:8a:18:8d:8f:b9:f3:
                    03:f8:08:6a:e8:11:72:67:ba:14:7e:db:34:fc:6f:
                    bb:aa:bc:07:c6:11:58:5f:b7:1e:71:af:bf:f4:99:
                    72:05:2f:b7:91:9f:c6:02:61:15:a9:de:6c:90:2a:
                    55:69:64:f3:43:c9:8a:0e:3d:9c:cb:c3:d3:4d:e0:
                    f4:e9:85:b6:7a:18:56:7e:fa:47:38:78:54:c2:ff:
                    45:63:46:76:1f:d9:93:4b:9b:64:03:9d:29:42:ba:
                    f3:51:f3:de:fe:b2:5a:7e:b3:6c:33:b4:5e:03:97:
                    29:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:42:4E:75:8C:20:D6:E2:91:9F:B3:6D:C0:C2:5B:55:5E:E6:3C:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8e91c45b-1bba-3f1c-b339-d484394803d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d7:23:6d:6a:2f:4e:3d:40:01:f8:78:4e:ac:53:af:fe:9e:
         07:3b:00:e2:dd:8d:83:bd:a9:9b:77:93:85:7a:6d:47:b1:b8:
         ae:4b:e6:21:e7:ce:18:5d:a9:92:2a:b4:51:b2:0a:84:48:a8:
         0c:cb:17:5a:c3:9d:35:05:f3:81:33:f4:0e:e2:20:62:ee:68:
         8b:f8:95:79:01:45:8f:77:36:ee:81:db:e6:fd:4a:87:e7:79:
         b8:ef:43:69:30:a5:e9:4c:81:6a:50:de:08:93:9a:6f:26:81:
         08:26:49:1c:15:af:dd:66:a6:99:e0:ea:b6:63:67:bc:0c:f0:
         3d:98:83:27:cd:60:2f:4b:72:fe:9d:d5:42:67:51:60:b9:61:
         80:0a:1b:9a:09:81:7b:e0:e6:aa:a8:9e:0b:8e:7a:89:07:da:
         d8:43:44:02:43:8b:0d:de:c1:48:72:89:6e:19:74:3f:1e:df:
         3b:18:fc:8a:86:fd:5c:91:39:43:b4:8a:b3:c5:06:35:a3:8d:
         1f:d6:68:71:20:cd:fb:c9:e4:2f:0e:be:cd:39:82:98:ea:24:
         05:e9:47:5b:44:f2:73:6d:17:1a:82:e0:32:d7:02:d0:78:23:
         7c:18:56:ec:bb:af:4a:ca:c7:76:b2:77:61:4f:a2:04:95:36:
         5a:88:69:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:12:55 2025 by rpki-client