Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/768f4424-b3fc-31d8-8562-fad1d04e0acb.roa
File:                     768f4424-b3fc-31d8-8562-fad1d04e0acb.roa (raw, json)
Hash identifier:          GFAZHqz7eRvq0Yr/2+ux5AiuMCZ72nTJ9UGiE+E9R5Y=
Subject key identifier:   DC:33:C1:E2:CB:8D:49:BE:A8:9B:82:61:B3:03:30:BA:93:CE:B9:37
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B0FA6C389B425D2A326C98F00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/768f4424-b3fc-31d8-8562-fad1d04e0acb.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     8881
IP address blocks:        23.27.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:c3:89:b4:25:d2:a3:26:c9:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=e2194527-3086-421d-b6b1-3c50c129eedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:6d:ac:f4:88:85:db:8a:ca:fa:52:b2:0a:
                    1e:68:01:02:2c:34:a3:d7:4c:4d:b5:87:c7:98:3e:
                    72:d5:00:c4:f1:99:61:3b:ac:33:34:61:e3:f9:bd:
                    87:64:70:6d:c1:cb:4e:ab:e3:33:64:97:be:b9:19:
                    a8:6f:78:fd:9e:8d:0a:c7:a3:6b:b7:3b:c1:3d:e3:
                    82:16:7f:8e:a7:84:23:06:a2:8a:63:25:dd:3d:5a:
                    87:46:dc:3d:74:a6:98:23:27:4d:49:06:83:7c:e2:
                    59:9d:0e:12:3b:41:f0:fd:9d:c7:48:61:b2:b0:a8:
                    7c:72:8d:6d:23:1a:f0:f0:7e:fa:55:2d:cc:f5:0f:
                    11:12:f3:03:fe:a5:95:a3:63:98:51:33:d2:3d:f1:
                    b4:41:1a:a4:93:be:e1:98:c1:a3:57:47:50:fb:d4:
                    36:a4:4a:83:77:e5:ef:d2:98:2b:22:da:d9:39:fe:
                    c7:3a:d4:bc:6d:20:57:11:0c:ec:e1:b6:46:4a:7f:
                    ff:43:10:78:73:3d:44:44:64:98:c8:cf:c4:06:e7:
                    cd:c1:c7:50:93:18:d4:9b:78:b9:4c:b9:b7:0a:85:
                    c3:57:3a:68:51:4d:e1:e4:88:8f:1f:e6:b3:96:90:
                    94:3a:21:2e:77:2c:0f:ce:c0:ab:65:c0:ef:da:bf:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:33:C1:E2:CB:8D:49:BE:A8:9B:82:61:B3:03:30:BA:93:CE:B9:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/768f4424-b3fc-31d8-8562-fad1d04e0acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e7:65:17:aa:b3:85:21:75:99:81:07:34:e3:90:71:35:f9:
         2c:1b:7a:51:3b:e1:90:e5:3a:de:68:54:0b:1b:01:c3:78:f6:
         8f:39:da:07:00:ef:e9:24:ba:b3:b1:3f:ec:85:5d:49:94:6c:
         04:d3:22:50:e4:26:3d:60:fb:bc:c8:4c:8c:54:34:04:34:b3:
         27:6a:56:f4:c6:3d:38:09:3b:57:ae:9f:c5:c4:69:56:4f:9a:
         71:c6:74:8a:5c:8e:f7:ad:7a:3a:df:8e:9d:e7:9b:01:bf:b6:
         e1:44:14:d1:1d:f0:ed:f4:30:f9:42:aa:5d:e7:33:30:11:bf:
         e2:ef:58:6a:1f:a5:62:a2:0a:27:29:bc:01:38:22:7a:c2:0a:
         fc:0b:77:27:be:57:d2:0c:f5:35:f5:39:4b:b5:d2:c5:99:ea:
         07:7b:ec:b3:77:29:51:7e:28:b5:db:33:f6:27:b4:4f:d8:f3:
         74:21:00:47:dc:78:b9:4a:d4:9a:d5:9d:11:14:87:6c:8b:25:
         e5:65:e4:d0:0f:8d:7d:c8:87:0e:63:6f:40:c1:f0:0e:bb:cb:
         2e:74:2d:3d:18:f2:34:e9:e7:80:88:91:cf:89:34:7f:12:4e:
         8c:79:2c:47:bc:02:a3:48:f1:9b:df:47:5d:fa:66:9b:1a:9b:
         b4:d1:48:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpsOJtCXSoybJjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZTIxOTQ1MjctMzA4Ni00MjFkLWI2YjEtM2M1MGMxMjllZWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuARtrPSIhduKyvpSsgoeaAECLDSj10xNtYfH
mD5y1QDE8ZlhO6wzNGHj+b2HZHBtwctOq+MzZJe+uRmob3j9no0Kx6NrtzvBPeOC
Fn+Op4QjBqKKYyXdPVqHRtw9dKaYIydNSQaDfOJZnQ4SO0Hw/Z3HSGGysKh8co1t
Ixrw8H76VS3M9Q8REvMD/qWVo2OYUTPSPfG0QRqkk77hmMGjV0dQ+9Q2pEqDd+Xv
0pgrItrZOf7HOtS8bSBXEQzs4bZGSn//QxB4cz1ERGSYyM/EBufNwcdQkxjUm3i5
TLm3CoXDVzpoUU3h5IiPH+azlpCUOiEudywPzsCrZcDv2r/JOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwzweLLjUm+qJuCYbMDMLqTzrk3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzY4ZjQ0MjQtYjNmYy0z
MWQ4LTg1NjItZmFkMWQwNGUwYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACrnZReqs4UhdZmBBzTjkHE1+SwbelE74ZDlOt5oVAsbAcN49o852gcA
7+kkurOxP+yFXUmUbATTIlDkJj1g+7zITIxUNAQ0sydqVvTGPTgJO1eun8XEaVZP
mnHGdIpcjvetejrfjp3nmwG/tuFEFNEd8O30MPlCql3nMzARv+LvWGofpWKiCicp
vAE4InrCCvwLdye+V9IM9TX1OUu10sWZ6gd77LN3KVF+KLXbM/YntE/Y83QhAEfc
eLlK1JrVnREUh2yLJeVl5NAPjX3Ihw5jb0DB8A67yy50LT0Y8jTp54CIkc+JNH8S
Tox5LEe8AqNI8ZvfR136Zpsam7TRSAc=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:46:41 2025 by rpki-client