Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6468cbff-3ffc-39ba-8c1b-d8a1cfe0820e.roa
File:                     6468cbff-3ffc-39ba-8c1b-d8a1cfe0820e.roa (raw, json)
Hash identifier:          fMW38U6wT04BMJ9nPiuMv2DHrDQoLpfD1qiDNHtiCRE=
Subject key identifier:   F4:17:78:AF:2B:54:9C:26:5E:32:57:9D:E2:F5:58:97:CB:78:3C:50
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B6E91F5B7DE2AC516ACE07200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6468cbff-3ffc-39ba-8c1b-d8a1cfe0820e.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     149440
IP address blocks:        23.27.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:f5:b7:de:2a:c5:16:ac:e0:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=cd34700f-817f-4089-852d-99e5dcf3488a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e3:92:f4:42:d5:f4:24:fd:ee:3b:a4:77:f0:
                    ce:a0:7b:98:8f:08:60:7c:79:54:2a:35:11:45:ba:
                    29:ed:c2:f7:6e:35:ea:20:de:e7:b2:98:62:af:6d:
                    08:74:43:04:20:2c:e9:05:3a:bb:da:16:94:1d:bb:
                    7a:30:32:3a:0f:e8:17:72:da:49:bb:ba:fa:a4:84:
                    ad:82:c9:cc:06:c8:5d:42:a9:58:ea:5f:90:10:fe:
                    d8:9b:8b:fb:df:44:cc:2e:ac:50:bc:c7:a5:61:7c:
                    a3:77:38:80:92:49:4d:5f:40:d0:2c:f0:40:bf:24:
                    7e:5f:2f:b1:6f:46:c7:74:ff:40:8f:b6:cc:56:1b:
                    2c:ae:64:cf:80:64:14:7b:0a:3f:97:18:18:18:22:
                    dd:6f:de:5b:c8:2a:5b:88:cf:1e:fe:b6:f8:39:4f:
                    5c:f7:6d:47:ff:ec:3f:ed:72:f5:f3:95:55:06:05:
                    52:84:a0:a2:61:91:e9:b9:ea:3e:9f:ad:12:a5:23:
                    15:c3:35:82:6a:16:49:6e:07:1f:1c:d5:d3:58:80:
                    c7:3f:c7:a0:85:34:56:73:d6:83:8d:85:fd:a1:a0:
                    59:78:ae:54:f1:a0:fe:d7:74:76:73:4e:25:34:2f:
                    2f:07:de:fb:22:1f:30:44:11:16:e2:3c:4a:39:f1:
                    0f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:17:78:AF:2B:54:9C:26:5E:32:57:9D:E2:F5:58:97:CB:78:3C:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6468cbff-3ffc-39ba-8c1b-d8a1cfe0820e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:e9:c2:54:03:a4:7f:9c:2f:1f:01:5c:9c:d0:de:4f:31:45:
         a0:87:24:9e:6c:ae:93:99:33:65:ac:f5:d4:be:c3:ce:44:fb:
         70:c2:69:0b:17:77:b8:53:0e:c9:c0:e5:49:e6:cd:49:76:15:
         9b:30:38:c9:5b:d7:10:14:ec:b9:e3:6e:bf:28:db:e6:3f:9d:
         1d:3a:9a:7b:9c:77:70:2c:57:5b:0b:16:98:89:91:19:a3:5e:
         4e:07:63:44:a5:e2:5e:1e:ad:55:72:a0:8e:aa:e2:3d:71:6f:
         fe:85:5c:a3:72:e8:c1:c8:f9:4f:b9:75:4f:e7:f9:3c:ce:e4:
         fa:a4:d5:39:51:cd:f5:ca:d2:0b:92:ab:86:33:0a:7a:0e:63:
         40:b0:a6:66:2f:96:cc:1d:55:ab:ff:bc:fd:5a:21:8c:14:93:
         4b:0d:2b:c0:e1:a4:70:61:42:73:40:b0:74:a1:29:53:d6:a6:
         7f:74:f5:83:a0:d6:70:f7:01:29:f2:ec:fe:e5:17:6e:7f:f4:
         bc:5d:11:75:fc:34:fa:d8:3a:ee:21:04:11:65:e1:7e:c6:14:
         04:fd:ff:76:6e:aa:e4:b3:b5:e1:ab:c6:1b:e0:12:84:93:ca:
         be:1c:c8:6a:a5:b8:cb:b1:e9:06:45:4c:b1:f0:3f:5c:e9:91:
         5e:a1:4a:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfW33irFFqzgcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
Y2QzNDcwMGYtODE3Zi00MDg5LTg1MmQtOTllNWRjZjM0ODhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOOS9ELV9CT97jukd/DOoHuYjwhgfHlUKjUR
Rbop7cL3bjXqIN7nsphir20IdEMEICzpBTq72haUHbt6MDI6D+gXctpJu7r6pISt
gsnMBshdQqlY6l+QEP7Ym4v730TMLqxQvMelYXyjdziAkklNX0DQLPBAvyR+Xy+x
b0bHdP9Aj7bMVhssrmTPgGQUewo/lxgYGCLdb95byCpbiM8e/rb4OU9c921H/+w/
7XL185VVBgVShKCiYZHpueo+n60SpSMVwzWCahZJbgcfHNXTWIDHP8eghTRWc9aD
jYX9oaBZeK5U8aD+13R2c04lNC8vB977Ih8wRBEW4jxKOfEPOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQXeK8rVJwmXjJXneL1WJfLeDxQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjQ2OGNiZmYtM2ZmYy0z
OWJhLThjMWItZDhhMWNmZTA4MjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIvpwlQDpH+cLx8BXJzQ3k8xRaCHJJ5srpOZM2Ws9dS+w85E+3DCaQsX
d7hTDsnA5UnmzUl2FZswOMlb1xAU7Lnjbr8o2+Y/nR06mnucd3AsV1sLFpiJkRmj
Xk4HY0Sl4l4erVVyoI6q4j1xb/6FXKNy6MHI+U+5dU/n+TzO5Pqk1TlRzfXK0guS
q4YzCnoOY0CwpmYvlswdVav/vP1aIYwUk0sNK8DhpHBhQnNAsHShKVPWpn909YOg
1nD3ASny7P7lF25/9LxdEXX8NPrYOu4hBBFl4X7GFAT9/3ZuquSzteGrxhvgEoST
yr4cyGqluMux6QZFTLHwP1zpkV6hSuw=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:42:50 2025 by rpki-client