Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/87a8cd7e-cc1e-3c5d-9aa4-5583c6b02ff9.roa
File:                     87a8cd7e-cc1e-3c5d-9aa4-5583c6b02ff9.roa (raw, json)
Hash identifier:          fFWrijJLm84prQOzryAVlVN9IaAHtraEe/LBybI3UhE=
Subject key identifier:   30:60:94:34:21:74:0D:D7:0A:03:6E:3A:4A:A2:6F:F6:24:56:A0:68
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584996C4B2F0177AFE36A8A03500
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/87a8cd7e-cc1e-3c5d-9aa4-5583c6b02ff9.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     20473
IP address blocks:        23.27.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:b2:f0:17:7a:fe:36:a8:a0:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=fd6e30c5-afd5-49a7-a576-c165d8955c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:25:cd:d0:7a:de:91:c1:81:82:b1:f2:48:
                    7b:9b:ad:d8:5b:35:c9:02:08:82:83:d7:d2:e8:c2:
                    b6:50:15:47:60:69:f7:97:44:30:76:02:f6:d8:d3:
                    15:e2:96:99:d6:02:96:48:c7:8c:6e:15:a2:31:6e:
                    f8:7f:f8:63:3e:fb:18:d6:ab:7c:8c:69:8b:3f:81:
                    b9:7d:18:7c:d5:29:35:60:97:64:ec:dc:bb:c3:6f:
                    de:e2:d5:88:6b:e0:60:75:10:b7:ea:bb:6f:34:d4:
                    b4:86:d3:b3:a6:70:48:b1:30:7e:50:47:a6:63:1e:
                    36:bf:58:b2:ff:33:a9:00:da:f2:0c:9a:7b:85:c3:
                    f4:81:77:20:2e:1f:ea:44:75:71:8f:98:b3:f4:e1:
                    c6:5e:f1:f1:ef:1e:24:ef:f3:ef:1f:af:b5:d2:71:
                    5c:d6:9f:73:38:18:ed:85:d8:46:52:0f:fc:4d:ea:
                    68:aa:25:8f:b7:2a:66:2c:c9:9e:e0:8d:78:bb:01:
                    ea:22:42:07:d6:0d:64:dc:9e:14:95:95:78:88:af:
                    0b:0b:ec:c3:d5:f7:86:b0:7c:91:79:2b:d3:52:aa:
                    af:f4:49:cf:c4:7c:d5:37:51:79:a4:61:0f:08:05:
                    5d:f1:a0:a3:b4:5e:fd:e3:9e:10:53:65:84:70:b8:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:60:94:34:21:74:0D:D7:0A:03:6E:3A:4A:A2:6F:F6:24:56:A0:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/87a8cd7e-cc1e-3c5d-9aa4-5583c6b02ff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ba:24:75:e9:70:f1:a3:23:a9:20:d8:55:19:46:d0:08:66:
         10:78:c5:1c:a3:c4:04:18:83:d3:17:5a:d4:3c:37:67:c9:a0:
         d4:08:16:07:0c:44:2f:a0:df:0c:f6:77:5b:1a:f9:b8:15:dc:
         f9:63:19:2c:ba:00:30:22:08:dc:9f:44:15:1e:0e:09:a9:80:
         e3:61:df:fa:c9:8e:d2:45:15:17:73:62:4c:c5:be:c5:0b:3b:
         7b:b5:8a:dd:ea:b0:e8:8d:e8:b7:97:5f:f2:d2:c9:39:96:92:
         b3:ad:67:9f:56:b4:28:21:2f:05:88:88:b6:69:50:95:21:1e:
         bb:f0:6a:28:27:92:a6:01:fe:2f:2d:79:ed:61:79:0c:08:3d:
         47:42:01:28:b9:44:88:5b:d4:49:29:e7:79:c7:51:4d:ef:3f:
         c6:06:1a:c9:47:dd:a4:f5:06:b0:c5:38:0c:2a:82:05:7a:48:
         32:1e:31:9f:d8:41:d9:4d:3c:c0:89:6c:d7:56:aa:2e:55:64:
         30:24:4f:93:90:22:12:a7:a5:31:e8:2a:95:c5:7b:d7:dc:a1:
         f7:67:3b:9d:ed:85:cb:23:94:a7:71:ba:ca:e8:15:54:55:b1:
         69:5e:92:28:19:95:0d:ef:b2:8f:06:b9:0e:3b:58:37:8b:64:
         d2:eb:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:20:46 2025 by rpki-client