Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/45e47767-41ac-3659-aa15-11d98c36510f.roa
File:                     45e47767-41ac-3659-aa15-11d98c36510f.roa (raw, json)
Hash identifier:          RPebhoUgM74jV2puz6SNWOoYsprU2IiOs7R/6vEAI/g=
Subject key identifier:   A0:4D:85:B3:99:C9:51:46:D3:AB:D3:3E:40:DD:4F:EB:98:78:24:7B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B4BAC676F57EA8324CCC72300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/45e47767-41ac-3659-aa15-11d98c36510f.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     18530
IP address blocks:        23.27.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:67:6f:57:ea:83:24:cc:c7:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=d43cd645-7518-4431-aad2-d8da7a0a4324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b8:cc:83:bf:53:87:d7:8f:3d:bb:8d:a8:49:
                    55:f8:9f:1e:d8:6e:c2:5e:53:cc:a8:ed:63:5d:f0:
                    00:40:85:22:8d:d6:a9:06:fa:0d:f7:0e:19:8e:3c:
                    25:ea:67:aa:6f:e0:cd:f6:34:9a:13:ed:0d:10:fc:
                    29:8b:3e:5e:41:44:43:37:c9:17:9f:22:ad:fb:57:
                    1c:31:34:60:1c:3d:37:56:3d:30:db:9e:fe:fb:b1:
                    f9:e7:99:39:26:00:03:17:a6:53:60:15:6c:63:18:
                    eb:5c:e9:92:96:21:2d:3c:e0:3e:a3:ab:3a:d0:ff:
                    0e:5a:22:53:51:3f:94:fa:72:6a:cc:87:79:33:b8:
                    b0:8e:68:38:7b:94:5d:d8:3c:d0:46:d7:2e:64:4b:
                    1f:02:57:a5:cc:f9:99:f9:54:5d:03:7e:40:76:ce:
                    e6:bf:52:9d:fd:c4:00:48:c8:a4:5d:a1:1b:92:0d:
                    d2:bc:c4:0e:0a:66:ad:8b:17:ff:6e:df:bf:de:4b:
                    4d:8f:41:43:e2:9a:bf:91:e8:4b:88:14:0b:bc:6e:
                    5f:8b:0b:bf:ba:32:0d:31:bb:36:ff:88:28:02:a0:
                    51:ac:09:cf:36:ba:22:74:3c:7e:d3:6b:b8:fb:15:
                    a3:b0:8c:94:05:23:45:63:ca:00:9d:18:17:24:8a:
                    ad:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4D:85:B3:99:C9:51:46:D3:AB:D3:3E:40:DD:4F:EB:98:78:24:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/45e47767-41ac-3659-aa15-11d98c36510f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:3f:80:66:19:b1:7c:3e:f3:88:ec:72:ed:e3:7c:45:5c:be:
         20:c3:72:f5:42:61:0c:77:b8:49:6c:0b:55:cb:22:ed:98:01:
         85:5b:22:f4:a9:71:24:d1:35:7c:1f:70:71:87:f8:e0:52:0b:
         2f:97:41:41:52:5b:b2:48:50:b0:3a:30:62:4e:d4:8c:58:5e:
         d0:c3:d1:8e:1a:8c:7e:e8:2f:9e:90:93:bc:b4:d2:b1:9e:35:
         03:cc:e4:67:2e:cb:e1:c9:22:df:4e:08:ca:85:65:f1:6e:af:
         c6:44:04:54:fa:3f:88:14:ae:c3:dd:74:6c:be:44:93:d0:95:
         bd:d3:f8:41:29:0f:60:0a:da:18:b3:62:8d:d8:0e:56:77:2b:
         4b:fe:82:2e:00:25:ab:71:d2:13:fa:4d:89:06:2f:07:e2:6b:
         de:c6:66:58:10:5c:6e:a6:ea:a4:5d:90:8f:24:44:9e:f0:f7:
         9a:55:bd:c3:2b:11:fc:bc:62:aa:ec:73:a3:66:75:5d:e9:55:
         41:e7:d3:f2:8b:2e:e7:e1:b4:15:b7:7d:bb:83:e1:5f:70:e3:
         7d:4d:22:00:36:0b:cc:18:7f:69:f0:ca:50:5e:c0:54:79:11:
         ae:9c:65:0a:31:bf:30:eb:e8:2e:e3:19:12:78:6b:75:e1:00:
         f0:df:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:49:36 2025 by rpki-client