Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ec36661c-ece1-3d7a-85e9-23880a949811.roa
File:                     ec36661c-ece1-3d7a-85e9-23880a949811.roa (raw, json)
Hash identifier:          gySB0K/l7HHqfbwgBkYypkMAuLK+0tSMF41DZR/FmpA=
Subject key identifier:   C7:0B:A0:3A:00:E1:DA:9A:4B:92:AA:86:23:47:BA:80:5D:DE:56:47
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849BDDA3A0C8B6E3B5EA0873340
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ec36661c-ece1-3d7a-85e9-23880a949811.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     149440
IP address blocks:        23.27.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:3a:0c:8b:6e:3b:5e:a0:87:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=b64c2943-387e-4e4c-b1a8-1f5df3fc28ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:70:95:1a:17:4b:49:85:b3:15:c0:ec:f7:80:
                    46:79:06:bf:77:3d:ad:df:cb:52:13:e4:60:61:15:
                    5f:5c:b5:bb:55:e4:23:79:2a:c4:b8:ef:a6:48:05:
                    35:3d:86:c3:92:5a:97:ac:0d:23:e5:e2:9c:75:2e:
                    98:19:42:96:e1:92:cb:25:c2:d5:cb:2e:93:76:06:
                    e4:ed:a6:45:fd:75:93:02:1c:11:11:4f:79:25:b2:
                    47:77:82:71:1a:61:e3:19:2e:5d:bf:b2:cb:a8:32:
                    72:72:e3:3a:c3:8b:8a:81:45:96:24:15:64:6c:8c:
                    ac:f2:b3:49:f1:47:72:d4:a9:69:89:cd:91:b0:e4:
                    78:50:72:1d:a6:ef:ee:0c:47:c8:12:48:56:18:4e:
                    eb:81:a6:cd:7d:74:d4:58:e2:ab:5f:ba:28:18:14:
                    dd:15:4f:51:99:06:22:b5:64:15:8e:b2:cd:18:9e:
                    7c:80:9b:93:64:d7:3b:3d:86:76:0d:93:32:7d:95:
                    9c:81:07:7a:82:0c:19:67:27:c5:13:e8:c2:18:c9:
                    64:c9:93:8d:c8:46:e8:01:5b:2a:e4:fd:38:e4:a9:
                    c8:43:52:f8:e7:d5:8e:b2:96:bd:e9:d1:65:1f:13:
                    df:19:eb:3e:84:60:98:33:d5:8d:bc:d4:24:85:b6:
                    42:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0B:A0:3A:00:E1:DA:9A:4B:92:AA:86:23:47:BA:80:5D:DE:56:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ec36661c-ece1-3d7a-85e9-23880a949811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:56:16:1b:e3:4b:a0:b7:4e:92:b0:ae:dd:e1:c1:0a:44:cc:
         25:57:65:c8:8a:03:20:1f:c5:80:f5:cb:b0:a1:d3:dc:f0:fc:
         bc:13:77:7e:32:1b:ae:a7:2e:49:91:15:f0:a2:4b:ea:e3:e6:
         7e:6f:24:86:2e:31:e8:68:7a:6a:a3:6b:63:84:3b:b1:dd:cb:
         d8:a7:93:c2:dd:cc:9a:1f:4a:fa:1d:c5:70:c5:35:a3:5c:3f:
         1e:b1:12:9c:48:2b:30:04:32:70:88:bc:01:aa:c9:29:96:c2:
         d3:e4:59:9a:d8:d5:1f:71:3c:94:68:9f:56:77:cf:dc:18:bd:
         73:74:44:23:c2:3c:28:c7:4b:b1:9c:56:f1:e9:31:c0:74:d1:
         88:6e:9a:4c:59:e3:47:08:77:09:c6:8f:33:05:ce:c8:87:a4:
         a8:4d:e3:b1:02:14:72:ce:16:ca:9c:fe:cb:c9:10:22:c3:7f:
         32:3b:f7:51:6f:9b:40:4e:7d:2c:92:59:c4:e9:d6:8e:89:8c:
         6c:ea:3b:94:8d:24:56:31:24:31:13:3c:fd:56:98:a2:cf:df:
         ea:e7:8c:17:22:5a:c0:3a:26:b6:77:11:db:41:3e:7c:d2:66:
         10:10:da:3c:f9:54:74:1c:a5:ae:55:36:f4:62:07:df:26:a6:
         e4:63:fc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:01:42 2025 by rpki-client