Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23e1cf91-0f7b-3f2a-8e7d-e5477b398ea8.roa
File:                     23e1cf91-0f7b-3f2a-8e7d-e5477b398ea8.roa (raw, json)
Hash identifier:          j0NQv0B5UQItQAxqtxnICjd/Jds6S5SWCfFs7G1BCvI=
Subject key identifier:   D5:2A:F8:B7:EC:63:8C:28:F0:2E:57:D4:87:B2:1E:16:BF:6C:1E:46
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B5E48A8D29CE98A718B301760
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23e1cf91-0f7b-3f2a-8e7d-e5477b398ea8.roa
Signing time:             Tue 30 Sep 2025 17:00:05 +0000
ROA not before:           Tue 30 Sep 2025 17:00:05 +0000
ROA not after:            Mon 29 Dec 2025 18:00:05 +0000
asID:                     7029
IP address blocks:        23.27.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5e:48:a8:d2:9c:e9:8a:71:8b:30:17:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 30 17:00:05 2025 GMT
            Not After : Dec 29 18:00:05 2025 GMT
        Subject: CN=08775c18-ebde-45ac-abbe-ef37a3758997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:94:5c:c9:62:36:b5:b3:99:b6:d0:2b:4e:67:
                    cb:45:a0:e5:f4:5f:46:9c:de:ff:e0:4b:de:e0:5e:
                    19:43:7f:4d:df:a4:4f:7e:78:0c:51:0e:59:6a:81:
                    66:ba:6d:cf:f8:0a:8d:03:21:da:c1:7e:db:0f:af:
                    b3:00:95:20:2a:30:10:c7:a0:2d:86:47:d5:1f:85:
                    11:5e:2b:73:f3:31:48:58:f1:96:99:4f:98:ad:67:
                    92:d1:ef:cb:f7:a9:5c:34:d3:3e:a0:3b:d0:7f:b2:
                    61:9f:2f:2a:28:bb:69:00:a2:41:27:c5:d1:e7:ac:
                    5b:74:8c:a8:cf:87:b1:43:4b:50:c7:20:74:db:fb:
                    3c:64:79:a9:85:2a:36:ab:86:3c:c6:b5:dc:07:d1:
                    5f:c4:42:f7:40:1d:95:26:29:88:0b:63:07:b7:f7:
                    34:0a:f9:82:31:db:65:35:49:57:43:d5:5d:f4:f6:
                    56:e1:e9:78:5e:a7:00:59:66:fc:46:bf:7c:3c:9d:
                    cb:2b:db:2a:09:0e:5f:10:ec:f4:52:27:c4:ef:0a:
                    c7:26:69:1b:2d:a7:e1:f4:ec:57:4b:a8:cf:c8:79:
                    e4:11:45:b9:1a:25:f1:59:8b:c2:91:ab:eb:1d:2c:
                    a0:0b:fd:e6:b4:c2:bc:cb:8f:5d:16:ca:29:6a:ce:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2A:F8:B7:EC:63:8C:28:F0:2E:57:D4:87:B2:1E:16:BF:6C:1E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23e1cf91-0f7b-3f2a-8e7d-e5477b398ea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a1:8c:3a:90:bf:7c:37:26:d3:28:2c:67:df:a5:6e:cb:2f:
         00:0f:13:9b:bb:51:83:b5:cf:ba:42:c2:9f:58:48:2c:8d:3b:
         74:7d:85:0f:1d:53:c5:59:73:81:55:79:05:77:f4:4b:98:24:
         31:7b:e1:6a:5c:ad:d8:2e:27:88:9a:56:0f:90:9d:b4:bb:a5:
         b3:80:cf:ca:fc:c3:b3:f0:03:8f:3a:48:20:37:80:b2:53:54:
         4a:76:57:76:e4:e3:99:23:8d:e2:54:a2:f8:9c:29:24:69:a6:
         22:2b:02:ee:30:46:de:37:6e:96:c8:44:e0:41:20:ee:28:96:
         49:99:00:e3:16:09:76:6e:d4:8d:69:c9:fb:e0:c1:fe:4a:b4:
         9c:ca:8f:95:94:a9:f0:11:ba:11:d8:4e:50:c3:4d:45:3c:fd:
         d5:7f:7a:07:b3:d8:7d:9a:64:db:fb:51:5c:7c:f5:fb:ce:50:
         86:b8:f2:9d:26:19:d9:35:a8:d3:e7:25:f4:dd:25:0b:38:5b:
         72:05:d8:38:c7:0a:c8:e2:cd:71:37:94:60:94:c6:25:1d:5b:
         68:7e:52:81:be:1f:f1:79:0e:21:01:fb:42:0a:55:f3:ad:c5:
         e0:2e:0f:ce:64:d2:b5:1a:b6:41:05:ba:57:5e:86:41:5e:db:
         fa:09:a4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:41:06 2025 by rpki-client