Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dbcc893a-b8ea-303e-8fdd-6e2099d67c7f.roa
File:                     dbcc893a-b8ea-303e-8fdd-6e2099d67c7f.roa (raw, json)
Hash identifier:          A7cDYo0FJ1wKPbEoJJWoUWcUqDsjsVsWIREfso5njzQ=
Subject key identifier:   A0:16:F1:70:30:90:B0:DD:B6:B9:DF:38:5A:F8:0E:5C:7D:03:41:12
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858498E64A0E764A68D2C289177C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dbcc893a-b8ea-303e-8fdd-6e2099d67c7f.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     18779
IP address blocks:        23.27.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:a0:e7:64:a6:8d:2c:28:91:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=d940ee65-e9c6-4459-89c9-9ed20b3b1de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8b:a8:2c:41:a9:dd:3d:75:c8:fa:ca:6e:fc:
                    1f:70:70:68:0b:75:05:c1:a0:fe:65:26:bc:ff:7f:
                    1c:8e:7d:21:10:7f:a8:ff:9c:e1:9e:84:40:b4:a0:
                    ae:a4:cc:49:88:ad:90:54:36:3d:d7:0d:5e:c3:fe:
                    94:f8:e3:1a:5a:4d:53:eb:5d:94:f9:1f:5a:d1:7a:
                    9b:36:d6:f4:40:76:c2:99:af:57:9c:15:50:bf:65:
                    08:d9:a8:d9:e6:7c:45:6b:38:33:4c:03:18:a5:ae:
                    06:ce:ff:ca:91:70:a6:7b:10:6b:42:cd:ce:54:cb:
                    31:c4:c5:98:34:42:0a:78:20:69:76:7c:4b:c2:12:
                    04:b4:24:11:d7:23:c5:ac:12:d9:52:09:39:7e:fd:
                    8d:4f:a1:fa:c3:7e:05:5b:0f:6d:d2:bf:37:75:9b:
                    89:01:1e:53:ae:0c:d1:27:66:97:88:e1:fc:3a:da:
                    a6:8a:ee:50:25:f8:b6:dc:af:7b:ce:c5:8c:e4:5b:
                    5f:1d:a7:93:cb:7a:56:91:84:2c:a9:16:b8:62:bf:
                    9a:3b:6e:2e:6d:0f:23:8d:f3:40:10:e2:ce:07:7a:
                    18:c9:6f:a1:ab:dd:d4:3a:9b:64:8a:35:5e:a6:bd:
                    44:f7:e1:2e:30:4b:9c:84:f4:1c:66:20:65:44:3f:
                    1a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:16:F1:70:30:90:B0:DD:B6:B9:DF:38:5A:F8:0E:5C:7D:03:41:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dbcc893a-b8ea-303e-8fdd-6e2099d67c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:16:7d:f6:05:c8:eb:1f:f2:9d:c2:5c:38:50:0c:f3:73:2b:
         2c:f1:ae:17:5c:cc:dd:0c:84:9f:5d:70:d2:87:d0:42:99:2b:
         d4:bd:73:44:39:1a:e7:17:b9:f7:23:d6:33:ae:69:58:bf:cf:
         9a:e3:73:68:b8:b7:7a:af:12:74:c3:23:d6:d3:3f:32:c2:a6:
         39:d7:dc:d2:92:3d:15:70:ce:eb:7c:3b:57:38:44:d9:8c:7d:
         eb:2f:30:b3:25:55:b0:02:cb:40:83:27:b6:a9:86:4d:b0:51:
         33:80:d5:45:5e:76:39:4d:a2:e3:31:40:2f:04:4d:39:2d:f3:
         36:9a:43:b8:61:d4:02:5d:73:ec:75:7b:64:e5:51:dc:75:52:
         14:83:2b:30:d3:ac:6d:17:d1:53:68:c2:ca:c7:f9:54:fa:fc:
         22:a5:28:58:31:f8:df:60:12:d7:63:9e:ad:f2:a4:56:55:38:
         aa:89:03:3c:4b:62:d6:01:33:ba:39:c5:57:fc:d6:3a:99:52:
         ba:c0:75:0b:94:d9:22:f5:9d:8c:d2:71:0d:bc:da:71:f2:e1:
         8f:40:19:29:99:1d:b5:9d:d5:19:20:24:82:69:06:3b:4a:c3:
         79:84:d3:25:a2:a8:62:79:26:a6:a5:2f:29:b9:f6:8d:07:ba:
         23:36:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:20:29 2025 by rpki-client