Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0d4f8807-73c5-3391-a283-955619081431.roa
File:                     0d4f8807-73c5-3391-a283-955619081431.roa (raw, json)
Hash identifier:          uJEzeLLNvTI5iCGME6vuNePYNq0qWvypj5bB2dkPrRE=
Subject key identifier:   30:E5:91:7B:FE:2C:31:4A:C2:88:F4:86:6E:63:F6:6C:07:3C:97:91
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584996C4B314F15E7D166544F780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0d4f8807-73c5-3391-a283-955619081431.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     18530
IP address blocks:        23.27.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:b3:14:f1:5e:7d:16:65:44:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=755ca294-a554-4585-bd44-0b83b09ac9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a2:c0:3b:db:df:52:5f:0b:19:ef:9e:58:cf:
                    06:92:29:fd:43:80:b9:79:a8:17:f1:6e:c8:83:8c:
                    0b:2c:cc:44:36:44:b6:ef:f7:a4:84:88:12:5e:3f:
                    38:2e:11:db:15:02:d9:3c:64:5e:b0:80:a9:1e:39:
                    6b:02:4d:24:92:9a:45:1c:93:67:48:e3:f0:0c:e1:
                    6f:84:43:53:68:b2:b5:ed:1f:6f:dc:aa:0f:c9:3a:
                    11:b6:58:a9:73:ab:7b:af:b4:b7:32:70:31:e2:23:
                    c4:8e:fd:ca:9d:d8:79:f9:89:f2:93:eb:f5:2a:65:
                    13:7f:d5:7b:77:53:dd:ff:07:a7:c2:cf:35:61:04:
                    de:83:c6:5d:bf:b8:d3:0e:3c:cb:f5:c5:b4:51:df:
                    90:45:da:74:34:8a:34:3b:b4:a2:78:ff:29:04:02:
                    2c:7e:e7:d2:07:5c:80:a2:b0:5f:71:9a:27:bd:e5:
                    d6:8e:10:e4:fd:1c:2c:fb:da:72:9d:b3:8d:37:e6:
                    0f:d4:c2:ec:13:bd:03:f7:7c:f2:e2:3c:55:aa:5d:
                    d4:29:15:68:5e:f4:c4:0b:17:06:93:77:8e:cb:08:
                    be:93:08:bf:00:df:77:7a:1b:80:1f:2a:ef:a2:e3:
                    d3:4c:99:59:89:51:f7:f8:1f:f1:ea:47:77:87:12:
                    2a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E5:91:7B:FE:2C:31:4A:C2:88:F4:86:6E:63:F6:6C:07:3C:97:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0d4f8807-73c5-3391-a283-955619081431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:dd:a0:33:1d:c8:b9:70:38:1b:91:29:96:50:1f:63:48:2d:
         f3:af:36:45:e3:6c:c7:48:0d:07:71:82:c4:f6:8e:36:2d:ec:
         99:15:f1:d6:f9:97:34:09:b4:71:ae:6d:3e:85:d2:59:4a:bc:
         36:3c:c7:0e:b6:5a:11:a5:05:96:05:c4:2c:a5:2f:92:45:8c:
         da:5f:7f:e9:7c:13:89:3d:91:de:a1:82:38:4c:20:3d:7f:5f:
         50:31:58:33:ae:a6:3b:8a:f9:44:50:2b:4f:c6:7e:ea:e0:da:
         b8:14:18:aa:9c:d6:1a:20:0a:1f:43:fe:b8:cb:0a:a5:7e:e6:
         1b:d2:b5:76:56:22:47:67:a5:e4:9a:a5:c9:0a:e5:0b:78:4c:
         1f:9f:29:95:5d:0a:f8:ac:70:6a:ba:69:01:f9:cc:ab:39:bc:
         b2:e9:34:d2:55:ad:1b:87:16:71:60:d5:01:8b:a1:5d:2a:61:
         a0:e7:5f:7b:44:d0:32:87:54:df:75:03:30:10:59:c1:51:58:
         ff:33:86:18:04:fa:65:f4:42:3b:d6:3d:4d:41:dd:5a:27:bd:
         b2:0c:57:87:72:b2:96:6b:74:64:d9:a3:f0:b9:46:ce:f7:c5:
         1b:6f:32:86:cf:7c:15:af:4b:af:9a:1a:a6:7b:69:87:7e:00:
         15:d7:69:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:07:48 2025 by rpki-client