Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4b3a1ff-45e7-3e3e-b434-58adbd38aea6.roa
File:                     b4b3a1ff-45e7-3e3e-b434-58adbd38aea6.roa (raw, json)
Hash identifier:          McJEqeOgoce2QP3FymtpXgwO6fiAnm5lctAd0NQwkRU=
Subject key identifier:   14:54:DF:B9:E9:86:2A:05:90:B7:3D:14:FF:14:5C:B9:14:9D:6D:B7
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858498B99D5EEBDE085E798423740
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4b3a1ff-45e7-3e3e-b434-58adbd38aea6.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     18530
IP address blocks:        23.27.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:d5:ee:bd:e0:85:e7:98:42:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=bf28a4ec-6f06-4475-b696-d31ca78e0cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7a:f7:ba:75:57:c7:29:f5:ca:60:20:2d:04:
                    73:f0:96:22:cd:f6:30:80:04:ff:4b:00:d5:b0:8c:
                    ef:3d:e4:68:f3:88:05:7c:0c:88:ca:fa:f8:22:9d:
                    a2:75:1a:f4:73:2a:30:ec:38:8f:10:61:20:cc:4c:
                    c6:6e:86:5d:6a:50:e4:53:e5:55:81:3b:c4:ec:1c:
                    8d:69:09:47:1d:5e:4c:f5:ac:ed:b2:81:d4:fb:33:
                    64:04:74:37:90:38:3c:13:f4:5f:c0:57:ad:b9:12:
                    9c:3a:87:fc:81:0a:bf:82:9b:46:c6:e8:c1:63:18:
                    74:06:b6:63:aa:52:28:26:ab:65:67:27:9f:bf:a7:
                    e9:6e:8c:fe:b1:b3:2c:c4:a0:7f:20:b1:64:08:bc:
                    ca:b6:fd:e8:97:ea:73:c0:d1:92:bc:9c:3a:00:65:
                    3d:f2:b1:fe:44:10:12:c1:b6:2d:94:2f:33:97:40:
                    1a:73:2b:55:f9:5f:09:db:ca:68:7f:41:0a:f4:55:
                    ea:57:ee:0b:02:ab:b8:92:18:5e:53:f7:8a:ab:3f:
                    03:c0:1c:31:8b:40:0d:e0:51:e0:7a:9a:ac:0d:49:
                    26:7e:7e:77:46:e6:30:aa:8f:af:94:c8:b5:e2:63:
                    21:e4:ef:18:39:3a:71:3e:87:f9:ab:95:25:13:66:
                    70:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:54:DF:B9:E9:86:2A:05:90:B7:3D:14:FF:14:5C:B9:14:9D:6D:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4b3a1ff-45e7-3e3e-b434-58adbd38aea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:79:15:2f:9d:4c:02:6e:dd:a1:2d:e0:bb:69:80:f3:1f:47:
         fa:48:4b:82:eb:d9:4c:56:85:29:9d:ab:7c:0d:38:e7:f3:72:
         50:67:12:19:c1:df:dd:39:67:fd:28:af:a6:ec:0e:c4:bb:84:
         c2:05:91:c9:e8:0b:5f:3a:c1:13:48:c4:ab:52:5c:d3:1d:cf:
         e6:ab:29:17:19:ba:b3:c4:1a:73:28:9b:92:5e:61:93:96:14:
         10:3d:8b:cb:e5:64:8b:15:5a:2e:c2:cb:13:2f:00:80:45:10:
         0d:4b:77:61:c9:ef:47:36:e7:a9:df:a7:70:31:81:0b:5b:f4:
         28:3f:59:31:27:0d:93:88:e4:c6:6f:2c:85:55:69:fc:e0:14:
         13:46:3d:ee:0f:4b:22:9a:b9:f6:a3:8c:cd:09:26:0e:89:26:
         f7:7e:41:6e:85:25:5e:ae:9f:70:b9:45:c0:f2:c7:ed:77:85:
         2a:49:d4:07:e1:56:1d:27:b3:8b:ac:18:8f:78:24:99:ad:70:
         f2:48:7f:80:a4:48:21:ed:eb:99:e3:f5:eb:32:9c:9f:98:9b:
         fe:7d:69:95:64:c7:04:93:66:c8:2b:f3:ec:74:ab:c0:8b:4c:
         5a:02:58:fe:c6:3a:a3:68:e1:ff:2f:0f:86:d3:2d:1c:f4:6c:
         a8:bd:65:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:34:48 2025 by rpki-client