Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/118ec368-b211-31ea-839f-ffb40b85b0a6.roa
File:                     118ec368-b211-31ea-839f-ffb40b85b0a6.roa (raw, json)
Hash identifier:          Gn/O3jt0/J5RD93pw2Yid5mql3vlpSpAuT8KvLKBzIc=
Subject key identifier:   F0:A6:A8:B6:53:CD:21:E9:A4:76:4E:07:63:92:84:57:61:2E:7B:4E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B4E772C1F96C28C1A316BAC80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/118ec368-b211-31ea-839f-ffb40b85b0a6.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     18779
IP address blocks:        23.27.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:2c:1f:96:c2:8c:1a:31:6b:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=f2393b4d-3e07-42ba-b80c-82daf425c924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:07:83:9e:04:2d:96:23:0f:30:02:fa:68:bf:
                    93:d9:0a:ab:38:6f:27:07:96:8a:b7:09:0d:8a:cf:
                    b5:1a:d9:f7:68:df:fd:ca:2d:e5:12:57:16:e0:af:
                    8f:39:d8:9d:67:db:0a:6a:3e:67:9c:69:e0:d4:31:
                    14:ce:20:9c:60:a7:0b:93:26:00:fa:26:67:8e:fa:
                    5d:05:9c:62:98:09:fe:e6:1f:2b:c3:2c:10:70:b5:
                    54:c6:3c:31:41:3b:f3:36:90:bd:1a:a9:a3:a1:97:
                    7c:46:5f:b8:9d:c7:32:51:25:7b:07:a6:f5:b4:d7:
                    fb:e5:11:05:1c:aa:59:0b:02:eb:35:b2:32:4f:09:
                    3f:6d:54:68:65:0f:7b:24:1d:ae:43:16:2e:e5:74:
                    66:52:39:5c:c6:d2:3f:80:87:b4:d6:85:9b:68:14:
                    4e:09:e5:9a:f4:58:a8:a9:d6:74:16:a8:e6:19:b3:
                    28:79:3b:ab:66:5b:d0:3e:66:ca:8c:d0:37:da:76:
                    9d:3a:14:37:3b:e3:ca:81:a6:c3:fe:69:b6:cd:81:
                    da:a8:be:64:e6:11:4b:b6:12:31:c0:25:5a:c1:ac:
                    05:c6:76:05:6a:ed:15:d6:85:63:7b:ec:b6:1b:cc:
                    b5:85:f4:15:ab:5c:61:32:6a:de:73:24:6a:e0:ad:
                    83:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A6:A8:B6:53:CD:21:E9:A4:76:4E:07:63:92:84:57:61:2E:7B:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/118ec368-b211-31ea-839f-ffb40b85b0a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:d6:21:aa:88:d8:b1:00:bc:08:76:c3:e5:5a:07:7e:34:0f:
         62:d2:d6:9c:57:de:31:c6:45:4f:a3:c6:19:04:1f:a8:dd:3e:
         7d:27:c9:c8:a8:b4:8e:bc:72:b2:74:c8:9f:92:27:58:91:4f:
         76:5c:87:25:50:0e:77:d4:fc:72:09:65:67:f5:ce:5e:0b:b9:
         73:3e:c8:aa:f5:e8:04:b1:c1:b0:68:3a:51:5e:f0:46:b7:8b:
         01:fd:18:8c:41:de:3a:be:5d:a9:ab:76:df:b7:eb:d9:c0:46:
         87:8e:48:23:06:b2:80:4b:5c:56:53:61:28:ec:fc:15:0b:e0:
         70:4b:0c:7f:98:92:ad:e3:7e:47:a0:9c:c6:a3:8c:4a:00:7a:
         d2:67:4e:ac:9c:a3:dd:30:40:01:7e:98:6f:16:bb:9e:0e:75:
         31:a8:cf:87:74:20:44:42:59:4c:94:8a:8f:22:3e:f6:1c:fb:
         1b:c9:06:98:0f:fc:26:69:3b:98:2b:0f:6a:b1:b7:6b:2a:5c:
         3c:f6:9b:6d:bd:89:29:52:27:d6:57:76:af:88:33:ff:f5:74:
         41:cb:c3:aa:9d:91:94:11:57:b1:17:da:7f:fd:83:ef:ee:dd:
         9a:8a:2f:ae:b5:01:12:d2:69:78:0c:b8:af:02:de:75:02:bf:
         66:19:85:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:47:24 2025 by rpki-client