Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/01513606-9e26-3ff7-b3e0-232267b757e9.roa
File:                     01513606-9e26-3ff7-b3e0-232267b757e9.roa (raw, json)
Hash identifier:          mzfbZaLCFtZ0lyMlHibLE5Xr4xAIPB0QAUixGGjIKck=
Subject key identifier:   CC:B7:E1:C6:4B:41:66:53:98:8F:99:5D:3D:EF:A4:8A:38:7B:F6:1B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B5E48A8F0760E2480EE760480
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/01513606-9e26-3ff7-b3e0-232267b757e9.roa
Signing time:             Tue 30 Sep 2025 17:00:05 +0000
ROA not before:           Tue 30 Sep 2025 17:00:05 +0000
ROA not after:            Mon 29 Dec 2025 18:00:05 +0000
asID:                     7029
IP address blocks:        23.27.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5e:48:a8:f0:76:0e:24:80:ee:76:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 30 17:00:05 2025 GMT
            Not After : Dec 29 18:00:05 2025 GMT
        Subject: CN=9b034ef6-2e6d-4c7a-a0e9-c34730718c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0a:94:0c:e5:34:37:e7:6c:1b:2a:a2:f3:e3:
                    94:09:db:c8:27:f0:17:ef:67:55:03:b1:a5:34:7f:
                    7b:d6:20:77:d0:4d:26:2b:8b:55:fd:a6:2d:41:f8:
                    79:51:10:35:7e:af:5d:c2:86:69:08:70:76:44:9f:
                    ad:ab:f4:c6:bf:63:16:1e:a4:93:ef:ec:f0:36:ab:
                    59:15:fc:9b:c3:4c:2e:5b:33:3b:66:65:84:36:34:
                    7f:49:07:83:f1:cd:96:cf:ab:39:ee:6d:53:a1:92:
                    18:82:3c:48:6c:15:63:59:85:45:9a:28:c7:c4:d5:
                    09:68:7e:ac:4e:85:dd:93:d4:ee:0b:83:b0:fd:f6:
                    39:67:5f:f2:94:cc:50:8e:6e:8b:b1:1e:e0:f4:f7:
                    1c:77:32:48:04:2e:0f:e0:03:65:8f:dd:8f:f1:90:
                    51:db:1b:eb:3d:8b:5d:8b:f0:d2:66:34:2d:d1:11:
                    c2:72:8a:eb:55:09:e0:55:84:4f:5c:cf:6b:3d:2d:
                    4a:aa:c8:00:1e:47:ec:30:0c:04:51:48:b0:dd:1c:
                    2e:51:01:56:7b:9c:93:50:dd:bc:5f:4a:2a:99:b4:
                    51:07:8f:8d:5a:e8:f0:82:78:14:f2:7a:45:80:ee:
                    17:0c:8e:4e:68:9a:39:82:5a:26:8f:95:c3:b1:52:
                    2e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B7:E1:C6:4B:41:66:53:98:8F:99:5D:3D:EF:A4:8A:38:7B:F6:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/01513606-9e26-3ff7-b3e0-232267b757e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:1d:84:57:09:b2:a8:b5:ce:0e:8b:78:29:be:6f:20:41:ef:
         9e:bc:67:dd:69:c4:46:5f:d5:dc:c8:e9:21:fd:cb:8f:f6:80:
         1a:cb:66:13:61:4b:a8:60:f1:34:80:11:3d:6d:bd:57:50:25:
         f6:90:af:0a:ef:ba:90:47:78:d9:e0:3a:bc:c3:b0:36:6e:9e:
         0d:1c:7f:63:b9:27:1b:27:0e:0f:c3:cf:5a:90:8d:52:cb:9d:
         74:56:38:5a:43:1e:63:38:ad:8e:b4:9d:69:8a:4b:7e:7c:d1:
         96:27:8a:d8:79:b1:c9:05:0a:15:5a:12:fe:4b:21:94:91:13:
         cf:83:e6:c9:b0:15:6d:9c:8c:b1:b8:69:63:4c:41:58:60:de:
         b1:59:33:3d:11:e2:5a:92:5b:33:dd:d8:bb:93:4d:0c:29:33:
         63:ee:69:e2:bb:c4:08:17:ac:79:ab:a8:67:a9:c3:57:79:13:
         bd:3a:fb:6b:25:e4:8c:33:5d:86:69:86:0d:f8:b6:50:38:bc:
         d3:ec:76:99:0b:5f:87:a3:06:8e:4b:05:96:9f:cb:91:84:46:
         77:09:d4:47:04:55:ca:0f:48:38:b1:34:8c:8a:ea:bf:35:a0:
         08:00:5f:3b:eb:86:6b:67:a8:91:81:cf:66:e2:3a:24:60:ca:
         04:ef:a6:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEteSKjwdg4kgO52BIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDkzMDE3MDAwNVoXDTI1MTIyOTE4MDAwNVowLzEtMCsGA1UEAxMk
OWIwMzRlZjYtMmU2ZC00YzdhLWEwZTktYzM0NzMwNzE4YzUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggqUDOU0N+dsGyqi8+OUCdvIJ/AX72dVA7Gl
NH971iB30E0mK4tV/aYtQfh5URA1fq9dwoZpCHB2RJ+tq/TGv2MWHqST7+zwNqtZ
Ffybw0wuWzM7ZmWENjR/SQeD8c2Wz6s57m1ToZIYgjxIbBVjWYVFmijHxNUJaH6s
ToXdk9TuC4Ow/fY5Z1/ylMxQjm6LsR7g9PccdzJIBC4P4ANlj92P8ZBR2xvrPYtd
i/DSZjQt0RHCcorrVQngVYRPXM9rPS1KqsgAHkfsMAwEUUiw3RwuUQFWe5yTUN28
X0oqmbRRB4+NWujwgngU8npFgO4XDI5OaJo5glomj5XDsVIucQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMy34cZLQWZTmI+ZXT3vpIo4e/YbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDE1MTM2MDYtOWUyNi0z
ZmY3LWIzZTAtMjMyMjY3Yjc1N2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQdhFcJsqi1zg6LeCm+byBB7568Z91pxEZf1dzI6SH9y4/2gBrLZhNh
S6hg8TSAET1tvVdQJfaQrwrvupBHeNngOrzDsDZung0cf2O5JxsnDg/Dz1qQjVLL
nXRWOFpDHmM4rY60nWmKS3580ZYnith5sckFChVaEv5LIZSRE8+D5smwFW2cjLG4
aWNMQVhg3rFZMz0R4lqSWzPd2LuTTQwpM2PuaeK7xAgXrHmrqGepw1d5E706+2sl
5IwzXYZphg34tlA4vNPsdpkLX4ejBo5LBZafy5GERncJ1EcEVcoPSDixNIyK6r81
oAgAXzvrhmtnqJGBz2biOiRgygTvpoc=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:41:02 2025 by rpki-client