Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d8bdaa8c-3b57-323f-aec6-d16ca9b9be95.roa
File:                     d8bdaa8c-3b57-323f-aec6-d16ca9b9be95.roa (raw, json)
Hash identifier:          YUzWax4kBHroaBZ31wLxXmkSGPp67+ylfA8AIj3UAE4=
Subject key identifier:   9B:5B:C3:68:09:AF:12:D9:2E:B6:37:F2:A5:43:9A:F5:26:1E:27:ED
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858498E64A0BFD0E79A3CAD106A40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d8bdaa8c-3b57-323f-aec6-d16ca9b9be95.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     18779
IP address blocks:        23.27.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:a0:bf:d0:e7:9a:3c:ad:10:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=fe495ad1-3ef8-46bf-81e8-bd9ef32afc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:50:e7:02:e7:68:bd:16:58:6f:c6:8b:00:
                    c2:43:86:92:8e:96:d3:65:be:d3:f8:ec:1f:ff:c0:
                    5e:88:3b:3b:2b:30:0a:da:ba:03:f8:79:b9:bb:fe:
                    2f:dc:cd:eb:e2:a3:4d:0e:f3:af:5e:d5:e4:78:5c:
                    89:f0:4e:bd:f6:b4:ad:21:01:79:d5:1c:8c:15:10:
                    69:65:ea:7c:90:a4:ef:c1:03:6a:54:40:80:28:ed:
                    9f:1e:c1:9d:60:19:0e:f6:6d:a3:c0:db:70:22:15:
                    47:d5:a0:75:9d:49:da:55:8f:14:c1:75:41:ea:8b:
                    c4:ab:36:f9:5c:5d:61:63:75:e8:a9:6b:eb:90:6a:
                    f6:3a:47:26:22:68:f3:4c:b0:6c:74:85:96:8e:1f:
                    1a:f4:ba:2a:da:bc:ab:4b:87:2a:15:f9:01:d7:dd:
                    d0:33:56:37:68:31:8e:91:02:79:2b:85:95:b1:39:
                    68:78:ec:c8:0b:40:fc:ce:21:12:27:cf:5f:3d:98:
                    8e:b7:76:64:f6:c4:e0:71:83:9d:60:c4:85:65:42:
                    6e:bc:b2:70:1e:14:3d:98:db:16:a8:bf:74:e3:b6:
                    67:ff:c1:35:8e:0f:43:7c:d7:56:5f:48:96:46:a3:
                    dc:3f:8f:ec:5c:24:1d:eb:78:49:79:f9:46:d6:bb:
                    b9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5B:C3:68:09:AF:12:D9:2E:B6:37:F2:A5:43:9A:F5:26:1E:27:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d8bdaa8c-3b57-323f-aec6-d16ca9b9be95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:95:58:89:1b:84:08:98:11:3a:5a:c3:3f:c2:c1:f7:62:96:
         6f:63:3b:94:54:65:0e:87:8a:d0:a3:09:32:9a:83:f7:78:43:
         70:1f:c3:43:9c:0e:88:a7:23:ac:7e:85:e1:50:e4:c5:bf:e6:
         19:c4:7b:a5:2d:7a:ea:15:94:ae:64:c8:2c:00:bb:34:d5:19:
         b0:70:e8:d9:b5:18:84:94:2e:c9:49:46:3c:9b:cc:bb:91:91:
         b8:b3:5c:d7:9f:39:5e:af:10:65:07:ce:9c:9f:a4:a7:85:a2:
         df:b9:15:f1:1a:93:4c:3e:94:94:60:bb:bc:1c:2c:f8:24:4a:
         dc:26:7a:b7:07:b9:76:2e:10:c5:b4:ec:31:3e:d6:9e:d4:09:
         05:85:5d:b6:73:23:b5:64:29:43:3e:b5:7a:4f:df:1d:48:db:
         d4:4d:b5:31:d0:8e:e7:7b:4c:df:13:4b:a9:91:62:13:96:52:
         07:a5:3f:9c:05:ad:6a:c9:4c:d0:2b:b1:c2:24:95:54:c5:28:
         b3:25:85:b4:01:ed:97:f1:f6:5e:c6:af:93:53:90:3e:7a:ed:
         e3:c8:48:32:82:9a:82:b4:b5:86:23:a6:3e:df:f3:c7:80:67:
         24:09:f4:8f:92:5c:ba:16:a7:43:4e:e6:7d:f0:4d:82:55:80:
         bd:25:17:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:57:35 2025 by rpki-client