Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6facb4c3-8e1f-3ae1-9cd6-827e8304c923.roa
File:                     6facb4c3-8e1f-3ae1-9cd6-827e8304c923.roa (raw, json)
Hash identifier:          Q8xPQr2sZDxP+sPZKt1d3DVJpafysC9m2EeOp7X0n14=
Subject key identifier:   47:96:5A:D5:11:88:D2:12:35:64:F5:4D:4A:94:B9:7D:95:E7:2B:C1
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A87B8A9A9D9E5E4DA997E1D00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6facb4c3-8e1f-3ae1-9cd6-827e8304c923.roa
Signing time:             Tue 15 Jul 2025 20:26:58 +0000
ROA not before:           Tue 15 Jul 2025 20:26:58 +0000
ROA not after:            Mon 13 Oct 2025 20:26:58 +0000
asID:                     44559
IP address blocks:        23.27.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:87:b8:a9:a9:d9:e5:e4:da:99:7e:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 15 20:26:58 2025 GMT
            Not After : Oct 13 20:26:58 2025 GMT
        Subject: CN=b7af2f20-d2f3-42ef-aa26-aeb0be21b92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:70:3a:d8:02:6f:50:d0:14:86:c0:35:1a:
                    46:91:4f:1b:1c:d8:57:04:b7:bf:2d:6f:1a:74:e6:
                    83:32:7d:a4:e5:b3:bd:83:52:28:e3:a0:32:c1:1a:
                    3c:0a:ff:73:d9:99:8b:00:f3:b8:e4:2c:f8:60:6f:
                    d1:0e:37:0f:b1:9d:35:f1:29:5e:30:86:f9:e3:5e:
                    20:74:5f:b5:65:4a:ea:8f:d2:59:4d:7d:46:58:36:
                    cf:0b:e8:e6:a4:b3:a2:2b:a9:99:d0:4c:51:b1:0a:
                    08:87:2e:05:0d:7b:11:be:ac:a1:d6:45:05:8e:31:
                    88:8b:94:46:48:b9:bf:06:81:d9:96:d0:84:2b:4b:
                    6e:2e:0e:95:0b:50:10:1e:c6:bf:4d:6c:d2:1a:b5:
                    2a:e6:a1:78:4a:2c:49:3b:64:84:d1:51:49:92:40:
                    ef:d2:cf:b1:e0:ac:eb:e2:74:4c:c4:64:7e:95:c4:
                    ae:92:e8:45:04:68:04:b5:31:f3:fc:22:1f:04:03:
                    41:4a:1f:55:bb:bf:d3:4b:d0:8f:e3:05:88:57:4b:
                    d9:d7:9a:8a:97:d9:d6:57:38:6c:2b:42:7d:66:a3:
                    65:8d:22:80:4b:75:20:57:93:4a:76:c2:a0:92:85:
                    a8:3c:f0:fd:52:a0:d8:d4:c7:ea:ec:ee:cf:3f:01:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:96:5A:D5:11:88:D2:12:35:64:F5:4D:4A:94:B9:7D:95:E7:2B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6facb4c3-8e1f-3ae1-9cd6-827e8304c923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:dc:b1:b7:da:7d:ed:11:6b:8b:c5:99:3a:e9:5f:10:17:29:
         1c:3e:53:be:23:b8:fc:06:88:58:ff:01:cc:ac:19:73:b7:ab:
         6d:fc:ee:b5:ce:c9:0d:10:7c:e8:61:e9:41:b7:b2:71:09:ea:
         7e:02:1e:b9:18:15:ba:58:f4:04:a9:0d:4f:ad:27:a3:0a:1a:
         aa:5e:a2:3c:cf:a5:34:f5:96:59:5f:05:d2:28:27:58:d9:91:
         ef:fc:ba:66:aa:fe:7d:b7:c4:4d:12:bb:60:97:10:3c:26:8d:
         85:33:5d:33:ab:99:d0:fc:14:fc:2a:a6:83:1d:9e:2a:90:60:
         10:47:49:62:6d:ea:ae:75:1d:fc:94:e8:cb:35:91:bf:fd:c4:
         30:87:ac:e1:f6:1d:06:5f:65:8b:8a:04:d3:2a:d0:ee:b8:ec:
         6e:19:b4:88:7e:74:ff:60:e3:a1:5e:d2:9c:53:27:1f:34:4c:
         27:79:dc:00:95:06:87:a0:91:26:18:6c:c9:ad:9e:6c:5c:38:
         34:0b:da:be:53:f1:2e:a0:50:a7:62:8f:54:6d:b6:61:5e:e7:
         12:0f:30:68:65:2e:d9:91:28:63:d9:46:bf:df:c8:d2:32:10:
         55:dc:c7:96:2a:fb:5d:31:20:fc:4e:63:45:10:6d:48:cb:84:
         4c:e6:b2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:34:15 2025 by rpki-client