Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e739d35-2e00-3836-be1e-c5c52d818c55.roa
File:                     2e739d35-2e00-3836-be1e-c5c52d818c55.roa (raw, json)
Hash identifier:          VIPgCT1zbhkMDXTWH+SfsksvgIDBKk9kL2RH1bNPzb0=
Subject key identifier:   DE:CC:A8:DC:FE:85:D1:74:CC:0F:E0:9D:E9:E4:8D:BB:4E:17:F2:58
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B2E5C5F3DF699706B7791DF00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e739d35-2e00-3836-be1e-c5c52d818c55.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     214238
IP address blocks:        23.27.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:5f:3d:f6:99:70:6b:77:91:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=e7e2a80b-e003-491b-9c6a-74a41fde792f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:9b:29:d7:61:0d:c6:bf:e7:6d:24:c5:09:
                    9f:f9:5b:6b:a7:1b:e5:c4:3e:04:2b:ef:f1:26:4a:
                    c7:9c:bc:6d:43:25:2e:11:8f:68:a5:d0:93:9b:1d:
                    56:ad:2b:fc:2c:29:73:50:ef:bf:3f:2b:8d:6f:e3:
                    91:ff:ef:4b:6e:53:6b:0e:1b:db:bc:f0:2c:7b:91:
                    f0:f6:ec:5a:ed:07:ec:09:c7:29:90:b5:e9:70:d7:
                    dc:ea:46:ae:64:6f:11:88:19:a3:46:aa:84:a5:ba:
                    6e:b9:67:a2:ba:b3:47:86:c4:9c:67:96:22:70:93:
                    0c:a7:01:ad:5d:e9:7c:94:48:7b:fb:0b:d9:25:95:
                    54:ef:92:9a:f4:06:43:d5:b0:03:e1:d8:7e:be:30:
                    d8:75:8b:36:a2:b8:79:22:9a:f7:0e:cc:41:7a:2c:
                    b0:5e:e3:3a:3b:72:93:fa:31:b4:0b:14:1c:4c:50:
                    60:4f:ac:4c:4c:8e:b7:dd:f1:26:89:b7:62:c4:b2:
                    c2:ee:96:6e:ce:45:39:02:e7:1e:4d:e7:e5:3a:80:
                    71:60:60:54:1e:23:d5:92:dd:b1:da:db:18:67:a4:
                    42:fc:57:bb:50:57:d6:92:64:19:b9:3f:d4:91:e0:
                    0d:2e:bf:a2:59:13:0f:ea:c5:0c:ac:3e:90:a1:34:
                    b9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CC:A8:DC:FE:85:D1:74:CC:0F:E0:9D:E9:E4:8D:BB:4E:17:F2:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e739d35-2e00-3836-be1e-c5c52d818c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e3:b9:1d:5d:9f:6a:70:f2:c1:6e:be:8e:17:4f:ff:19:c0:
         bd:28:90:9d:19:a2:78:c7:29:12:32:76:56:ec:d5:83:9f:37:
         95:88:af:51:42:5e:29:b0:2d:ad:47:17:b9:be:b6:1b:4b:e3:
         10:11:d0:1b:26:c7:2e:aa:de:bf:18:f9:b8:53:64:2a:ac:39:
         0f:2e:42:19:63:4d:0f:11:61:d7:1e:4f:a9:d1:57:08:7c:d3:
         e5:5d:cd:b8:55:6e:b0:73:a0:d7:13:cc:db:07:eb:63:cc:20:
         3d:30:9c:45:ba:0b:b9:46:d5:f5:20:39:2f:66:14:86:71:a8:
         8e:61:36:8a:43:af:ad:11:61:40:3e:e2:91:ef:ee:ff:9f:75:
         da:3e:4e:81:63:fc:8f:be:36:86:c8:9d:e8:69:cc:bc:74:7a:
         61:55:17:7b:5c:1c:fa:63:d7:ba:f8:8b:8c:25:4f:83:7e:15:
         87:84:97:35:12:87:c6:07:d0:f6:fe:5e:05:fc:70:92:a8:22:
         0d:0e:c9:07:ff:14:88:1c:83:62:6a:dd:ca:15:82:94:36:d6:
         46:7b:9a:82:3b:11:21:0d:a0:59:b0:bd:5b:1f:78:46:e0:a5:
         22:5f:bf:54:ac:24:26:be:f8:26:fa:66:75:e1:8c:94:f4:f0:
         ea:d8:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:45:46 2025 by rpki-client