Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/84f3c0e5-056d-3a88-8fa1-fa02a3f373bb.roa
File:                     84f3c0e5-056d-3a88-8fa1-fa02a3f373bb.roa (raw, json)
Hash identifier:          3fMj2Hv2P0bE8mVjvIv9J9p53npwVYiaK/If+AfZwcc=
Subject key identifier:   F4:AE:4B:0F:8C:24:3F:4C:91:16:5D:53:BA:20:B5:99:E2:DE:69:61
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B328C62C419CA23F891870B00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/84f3c0e5-056d-3a88-8fa1-fa02a3f373bb.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     11404
IP address blocks:        23.27.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:62:c4:19:ca:23:f8:91:87:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=c138dfcc-5e7e-4444-a13c-ef883319c5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:ca:4d:23:84:60:ab:fe:dd:4b:6a:4d:14:
                    bc:ef:9e:26:14:1b:60:d8:ea:a9:ed:a9:40:5f:f8:
                    70:cf:e2:74:8b:7a:7c:69:36:f4:17:5d:60:aa:a5:
                    b5:91:fd:e4:9e:fc:c6:22:3b:53:3c:41:04:60:17:
                    af:e0:44:9e:86:de:14:91:c0:e4:55:e6:20:9e:83:
                    f4:df:70:8b:c6:8d:b8:d2:ab:8b:25:de:4c:5c:1d:
                    02:c6:07:06:fb:75:07:90:f9:93:46:03:17:92:88:
                    1c:d3:81:af:a0:2f:4d:d8:22:c8:ef:e4:cb:dd:59:
                    e4:87:3f:c8:85:2c:95:d1:92:51:97:77:0e:ff:1b:
                    03:87:bd:b1:03:44:7b:ac:7a:7c:be:cd:60:52:f4:
                    3e:cd:5c:ee:3f:4a:b5:77:b3:cc:6c:04:d0:04:69:
                    6f:79:b9:7a:ca:ed:1d:79:25:ae:9c:5a:15:3a:98:
                    af:bd:0b:3f:d2:44:96:61:73:51:fc:d4:d1:0d:20:
                    c3:29:ec:33:d9:6f:1b:89:71:dd:85:05:2f:58:60:
                    a2:f8:24:ef:a6:d7:f7:b2:f9:67:75:0d:9a:fd:2d:
                    5a:77:c4:30:87:f9:35:18:ce:0b:d1:ea:ac:3e:60:
                    51:e3:e9:bb:7c:90:e4:90:cd:0c:71:43:d5:36:8a:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AE:4B:0F:8C:24:3F:4C:91:16:5D:53:BA:20:B5:99:E2:DE:69:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/84f3c0e5-056d-3a88-8fa1-fa02a3f373bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:3c:54:32:ec:1e:9d:a0:c8:53:4d:06:49:af:7d:b8:4b:3c:
         06:f3:8d:c6:5c:5b:86:21:c4:2c:af:54:6b:2c:61:53:04:a6:
         64:c4:73:02:80:fa:e1:61:eb:66:6c:b1:9f:9d:4e:5e:c2:fb:
         48:f1:c7:ee:25:f7:3d:30:4f:4c:e6:e6:ee:dc:c1:a4:d7:84:
         47:1b:82:d8:e2:f6:12:24:de:37:12:5d:16:f8:22:02:bb:07:
         81:91:d7:5e:ba:5d:63:c0:67:dd:ed:72:ad:91:a4:ff:a1:7b:
         72:8f:b7:d4:83:0d:cd:83:9f:ea:e9:dc:84:10:ff:84:64:1b:
         d8:f0:40:00:c6:8e:db:92:0a:e6:38:58:d9:ec:2a:96:b8:3a:
         aa:98:d9:b1:62:57:91:bb:c8:a3:d9:9d:30:84:d3:e6:e1:ee:
         68:51:b0:40:cb:be:08:a3:e0:ac:7a:f9:e5:f8:b4:9e:7c:fd:
         2a:91:4f:29:09:9e:0c:30:55:e7:53:0a:3e:c7:cb:ce:90:0a:
         87:0d:07:f3:3f:00:24:1c:9e:43:88:6d:09:c9:35:fe:7e:b3:
         78:cd:88:80:c1:4c:74:fd:2e:85:c5:12:9e:90:aa:23:1f:76:
         c1:99:10:0d:f6:a8:c6:38:62:76:2e:07:24:e0:97:a7:fa:87:
         86:88:83:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:45:49 2025 by rpki-client