Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab0a3a9f-7d49-3593-a98c-5b4145964c0a.roa
File:                     ab0a3a9f-7d49-3593-a98c-5b4145964c0a.roa (raw, json)
Hash identifier:          e+6ORazmEX5IgSN8S4V284JlkE02VVVjTgjLIO6iJIY=
Subject key identifier:   97:96:73:AE:CD:F5:8C:0C:BD:43:36:BC:02:42:F6:29:0F:A4:0B:26
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849E7BA8AE14FFEB5654D3E3E80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab0a3a9f-7d49-3593-a98c-5b4145964c0a.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     149440
IP address blocks:        23.27.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:8a:e1:4f:fe:b5:65:4d:3e:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=4611cabf-f7b4-4f7e-b093-9381518fa26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:15:5f:58:28:2c:59:93:cc:d9:fd:0d:61:24:
                    fd:3f:93:d9:61:79:78:23:d0:67:01:84:e3:1c:0b:
                    28:32:de:8b:3a:bf:07:1c:9a:8b:b5:46:be:ae:39:
                    56:18:8e:a6:29:da:dc:7d:34:84:b6:25:aa:8d:c7:
                    ae:5c:82:27:04:e7:74:93:a5:fc:e0:f0:c2:89:7c:
                    53:cb:28:16:fb:bc:d8:af:08:35:ae:d4:6b:8e:f1:
                    da:e1:ea:7e:c2:22:44:26:fc:5f:25:66:43:14:38:
                    d0:92:55:4f:31:30:07:98:0f:db:69:20:81:d3:bc:
                    80:6a:0c:b0:c3:98:05:f9:ea:dc:d5:75:3f:23:cf:
                    6a:1f:30:b0:65:0d:56:c5:9e:a9:f0:9e:13:66:65:
                    5b:bb:fe:ef:bd:a8:32:fb:d3:03:6c:8f:5c:65:fe:
                    d7:c5:58:a7:ae:7f:17:ad:3a:b0:48:db:45:05:d7:
                    a8:26:fe:2a:2a:c2:6e:39:9d:24:8f:17:16:a5:22:
                    de:33:1d:86:5f:c8:f2:79:66:c0:05:56:17:a7:00:
                    c3:f7:26:37:b0:0f:d6:db:49:7c:d0:40:c3:39:44:
                    6b:0f:25:f2:d7:d5:a9:00:c2:03:0a:45:97:d8:09:
                    4b:74:29:60:af:fa:eb:f8:b2:59:8d:b1:08:4e:fb:
                    ce:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:96:73:AE:CD:F5:8C:0C:BD:43:36:BC:02:42:F6:29:0F:A4:0B:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab0a3a9f-7d49-3593-a98c-5b4145964c0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:5e:c3:8e:35:61:ba:73:30:aa:99:70:9a:32:7c:8d:7a:35:
         be:6a:cc:0e:4e:dc:9b:07:07:13:1d:ad:34:9d:1a:af:2b:9f:
         ba:8b:4d:7f:0c:49:d7:0f:b7:49:d4:55:11:24:ff:a0:b6:2b:
         95:95:f3:e6:36:2f:89:ac:a2:aa:85:60:01:f6:db:0f:30:bd:
         d7:c6:17:69:7c:53:c2:a0:3b:4a:3e:b2:e1:3e:e6:ee:38:c3:
         2b:32:18:15:1b:8b:4c:9c:df:cd:2c:7b:a1:94:b6:30:d1:cf:
         b0:81:b1:0f:22:13:91:ee:83:11:89:78:91:ac:53:b4:38:f9:
         27:bd:1e:6a:58:e7:e2:38:03:c7:08:79:93:39:4b:a3:a5:df:
         ec:f0:7c:28:89:7f:2c:5e:c7:dd:3a:c4:3d:d5:8b:e7:78:2c:
         ae:48:e3:ed:bd:51:ec:b7:66:e5:f5:e5:0b:2e:69:17:d7:e1:
         e3:da:cb:7a:47:3d:04:ea:55:94:1b:24:8a:e4:74:7a:68:b8:
         e4:6f:ae:dc:df:0b:46:c1:21:8e:f0:61:f0:99:1c:4c:3f:23:
         8e:eb:10:39:e0:c7:2f:5e:ba:85:24:5e:ef:4a:95:d0:6e:84:
         9c:2d:54:c3:ed:4a:46:7b:fb:0a:ad:2b:b7:cb:d0:e2:e1:72:
         a3:a9:d1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:07:56 2025 by rpki-client