Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/706229b3-bb19-3146-9186-71020ab2961c.roa
File:                     706229b3-bb19-3146-9186-71020ab2961c.roa (raw, json)
Hash identifier:          Z3hs0qn4vZFaw6F8wbRMMI/XCPtneXldgdCuoAy1gl4=
Subject key identifier:   C7:AC:DA:18:15:EB:0B:94:D5:FE:CE:E1:07:7F:F7:14:3E:B4:24:35
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B0FA6C3D3F9FD90A03B5588C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/706229b3-bb19-3146-9186-71020ab2961c.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     8881
IP address blocks:        23.27.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:c3:d3:f9:fd:90:a0:3b:55:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=d08be43c-0522-4ddd-ac9b-82c67770c68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:c4:97:89:97:af:e3:f0:36:f0:cc:f0:3a:
                    79:3b:e5:45:a1:b0:34:b4:4a:8c:26:0a:7d:b0:9b:
                    8e:0c:bc:c6:4c:f4:e7:60:dd:0b:52:1a:e8:b3:1f:
                    1f:00:4b:f8:bb:20:5c:b5:cb:61:1f:43:ec:98:5c:
                    71:f2:f6:06:19:f2:53:44:6e:c0:27:76:b4:92:55:
                    ce:31:65:83:19:57:70:f0:09:cb:e4:ec:7e:6f:38:
                    49:ec:a6:9d:a9:91:be:20:b2:42:13:db:f1:c6:47:
                    cf:d0:39:1b:73:d2:98:e3:2c:38:51:2d:50:90:e1:
                    92:14:56:30:0e:17:3e:25:2a:1e:32:0a:52:51:1f:
                    50:3f:cc:1d:53:35:38:c6:0a:87:57:29:27:07:91:
                    e1:5f:27:ab:89:11:ce:84:e1:ef:29:0f:1c:b2:50:
                    a9:66:07:8b:64:af:4b:b8:e8:07:08:f2:30:79:39:
                    54:2b:cd:58:17:b9:03:8a:13:c5:d3:ec:90:e4:73:
                    7a:9f:5e:c4:f6:45:05:ca:84:02:27:5c:e3:3d:9c:
                    3e:02:03:d5:51:50:9e:1f:7c:40:cf:92:ce:b4:4b:
                    90:e7:74:97:81:5f:3f:6e:f3:fa:16:76:6d:47:27:
                    c8:03:d6:78:8f:fc:36:1e:63:85:4d:6f:0f:bd:61:
                    40:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AC:DA:18:15:EB:0B:94:D5:FE:CE:E1:07:7F:F7:14:3E:B4:24:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/706229b3-bb19-3146-9186-71020ab2961c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:db:02:f1:7d:1f:70:cc:d1:c3:f5:49:fe:89:a8:bc:61:d3:
         2f:54:03:f7:81:de:9e:f4:3a:d8:02:01:12:91:74:c5:87:a3:
         95:b5:cd:4c:73:c3:11:eb:fd:e3:6d:20:fc:f7:26:40:43:87:
         c5:22:8f:fd:71:4d:93:24:59:d4:53:06:06:88:12:24:14:db:
         5a:b3:e7:81:bb:cb:0e:95:f4:8e:db:5b:54:81:a1:25:0e:be:
         1b:bc:77:97:d3:15:e8:22:5b:d1:ee:d5:02:b1:cd:d1:7f:8c:
         a6:c9:66:8c:fd:97:e9:31:5e:5e:b7:0f:34:be:27:b9:e4:61:
         42:5a:46:9d:16:28:59:20:e9:c4:7d:fd:bb:24:33:04:3b:b4:
         7b:dd:d2:f5:99:c3:7d:69:1c:d8:64:30:dc:28:a3:11:01:5d:
         eb:5e:4a:10:3b:db:b1:57:a4:36:b2:aa:04:bd:c7:1f:ab:3e:
         55:1d:b9:18:ff:de:e8:92:f6:40:74:ba:e9:13:f5:e1:72:71:
         23:fe:2d:d4:78:e8:06:75:a0:f4:54:a3:7a:50:9e:38:57:0e:
         c3:2c:c2:14:76:85:e0:11:7e:a4:64:17:a7:c1:93:53:01:ab:
         68:61:8e:95:08:8e:73:c9:b4:f9:ca:ae:43:83:25:82:1b:50:
         06:8b:1c:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpsPT+f2QoDtViMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZDA4YmU0M2MtMDUyMi00ZGRkLWFjOWItODJjNjc3NzBjNjhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2vEl4mXr+PwNvDM8Dp5O+VFobA0tEqMJgp9
sJuODLzGTPTnYN0LUhrosx8fAEv4uyBctcthH0PsmFxx8vYGGfJTRG7AJ3a0klXO
MWWDGVdw8AnL5Ox+bzhJ7KadqZG+ILJCE9vxxkfP0Dkbc9KY4yw4US1QkOGSFFYw
Dhc+JSoeMgpSUR9QP8wdUzU4xgqHVyknB5HhXyeriRHOhOHvKQ8cslCpZgeLZK9L
uOgHCPIweTlUK81YF7kDihPF0+yQ5HN6n17E9kUFyoQCJ1zjPZw+AgPVUVCeH3xA
z5LOtEuQ53SXgV8/bvP6FnZtRyfIA9Z4j/w2HmOFTW8PvWFAWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMes2hgV6wuU1f7O4Qd/9xQ+tCQ1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzA2MjI5YjMtYmIxOS0z
MTQ2LTkxODYtNzEwMjBhYjI5NjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfbAvF9H3DM0cP1Sf6JqLxh0y9UA/eB3p70OtgCARKRdMWHo5W1zUxz
wxHr/eNtIPz3JkBDh8Uij/1xTZMkWdRTBgaIEiQU21qz54G7yw6V9I7bW1SBoSUO
vhu8d5fTFegiW9Hu1QKxzdF/jKbJZoz9l+kxXl63DzS+J7nkYUJaRp0WKFkg6cR9
/bskMwQ7tHvd0vWZw31pHNhkMNwooxEBXeteShA727FXpDayqgS9xx+rPlUduRj/
3uiS9kB0uukT9eFycSP+LdR46AZ1oPRUo3pQnjhXDsMswhR2heARfqRkF6fBk1MB
q2hhjpUIjnPJtPnKrkODJYIbUAaLHBo=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:50:00 2025 by rpki-client