Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/008d14f2-105f-358a-a4ab-8c96620ed45e.roa
File:                     008d14f2-105f-358a-a4ab-8c96620ed45e.roa (raw, json)
Hash identifier:          rhwmvbNt9fSeocaFfCgLdF5FuRq4qIeyXId6HMDXJ2k=
Subject key identifier:   C4:58:20:2C:E1:15:6E:9E:F1:50:CA:9B:8C:34:07:99:37:AA:41:76
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B758CAA66F7C61FFD50E32980
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/008d14f2-105f-358a-a4ab-8c96620ed45e.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     7018
IP address blocks:        23.27.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:aa:66:f7:c6:1f:fd:50:e3:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=fc344a7d-df7d-413a-935b-858257365d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a7:84:51:ec:3c:6b:ab:c8:67:c2:98:74:16:
                    03:c0:98:c6:b6:aa:1f:27:15:73:67:e2:3f:1b:b1:
                    84:66:5d:07:9f:11:8b:08:bc:ea:9e:0b:aa:99:59:
                    ea:17:74:9a:05:41:ce:ee:fe:04:23:25:9f:89:b3:
                    5f:a1:81:e7:cb:49:2a:3c:34:71:1a:79:d0:d3:ec:
                    02:8b:52:98:f4:7f:ff:a4:52:4c:97:98:06:5b:2f:
                    6a:e3:9e:41:67:46:38:64:dd:d5:89:30:12:0a:b8:
                    87:41:cd:69:a4:42:cd:80:22:5e:92:6b:43:c2:34:
                    a3:2e:d5:07:d4:d9:bb:1b:45:0c:1a:8b:84:49:63:
                    6b:83:51:dd:73:07:2d:75:ad:28:d0:e4:c1:89:a5:
                    19:f9:28:44:57:10:bf:21:9c:a9:dc:98:63:a8:c3:
                    e3:2d:30:21:dc:ff:0c:11:70:03:ca:2a:a7:a6:ce:
                    6c:c2:b6:81:47:2b:f6:52:ca:8d:0c:af:22:e4:59:
                    fc:88:ad:4e:9d:db:fd:15:1b:77:69:72:47:6d:b8:
                    72:63:c4:6f:b8:9c:0f:99:e7:6e:d5:e4:36:59:39:
                    62:cc:49:91:2f:2d:4b:8e:16:66:d5:c6:81:b8:1d:
                    f2:76:93:e4:a6:48:ed:5b:e8:02:a4:bd:e0:93:27:
                    39:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:58:20:2C:E1:15:6E:9E:F1:50:CA:9B:8C:34:07:99:37:AA:41:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/008d14f2-105f-358a-a4ab-8c96620ed45e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:35:e6:8e:01:13:43:54:ee:6f:b6:5d:c0:1b:3e:6e:9c:2c:
         ed:72:f9:b0:0b:cc:ae:8b:5d:82:21:9e:b5:09:d5:5e:e3:94:
         62:52:c9:13:d3:50:1a:e8:8f:9a:38:67:eb:9f:18:be:db:3d:
         75:75:54:6f:3a:1d:5a:fc:fe:51:f3:a9:31:8f:54:7a:a6:44:
         ac:ea:4a:bd:2b:44:7d:73:1d:9b:0f:47:db:b0:88:c4:ed:2b:
         83:07:7a:1a:fa:6c:9c:8a:d9:e4:9f:1e:4d:ee:0c:10:3c:b6:
         ff:8d:98:4d:43:bd:6c:09:1a:c7:84:87:17:bf:9b:8c:82:09:
         1f:8a:94:e1:97:6d:a3:80:ae:e8:4c:43:c7:82:47:4e:fe:33:
         58:d7:db:62:1d:92:0d:33:2f:63:98:83:5d:b8:5d:73:5d:4d:
         27:1b:dc:d9:70:94:25:c5:85:5d:c3:6d:e3:69:9e:1a:2b:29:
         e2:e7:01:b7:ee:7b:1c:c7:f5:e1:d2:04:d1:90:50:8d:88:1e:
         1e:5e:9c:21:fd:7e:1b:fd:62:d5:f3:be:1b:67:84:07:8d:e8:
         cf:c9:d6:c7:ce:15:8e:d5:14:2d:87:5a:d4:0b:eb:22:ce:e1:
         00:5a:e6:0d:d3:26:77:61:dd:c3:0b:76:19:66:3d:78:d4:f1:
         25:1f:b1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:44:25 2025 by rpki-client