Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8cd6331b-3f3f-3ff8-831c-67b064d48bde.roa
File:                     8cd6331b-3f3f-3ff8-831c-67b064d48bde.roa (raw, json)
Hash identifier:          rNPviZjMiaATEXYx6QPbru5YAqY0J1kSetOvSAOoZGs=
Subject key identifier:   23:ED:F4:54:CC:3F:B2:5B:02:BC:23:40:67:37:A8:B5:CB:B5:76:27
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B328C629FCD8EBF4C2F237A80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8cd6331b-3f3f-3ff8-831c-67b064d48bde.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     11404
IP address blocks:        23.27.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:62:9f:cd:8e:bf:4c:2f:23:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=a3a0130e-e16d-488f-a7e2-b28a66dcec67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:4c:b6:77:62:ad:a4:37:9c:99:c8:be:2e:
                    ea:d8:44:8c:ba:1f:9b:44:17:3a:cf:57:4c:4d:47:
                    71:9f:e0:40:1f:b1:c7:2a:f0:56:33:31:ce:d0:9a:
                    02:f9:b2:20:80:a8:d5:ed:58:2d:2c:41:6e:cb:a6:
                    01:b9:28:14:0b:a9:bc:ec:fd:44:43:4f:50:23:7d:
                    ea:68:eb:9b:95:e0:b1:4c:4f:a6:db:a4:55:95:bd:
                    5e:f7:8e:76:52:a2:b7:5a:ca:98:d2:28:8e:d4:b2:
                    ec:91:6e:f3:62:cb:34:c1:c9:e0:58:bb:13:0a:93:
                    63:0d:f1:1f:2d:77:22:da:4f:a7:4a:7f:0e:6a:72:
                    82:8c:90:29:a1:52:78:8b:b5:28:da:0c:18:de:8d:
                    93:be:a8:05:88:e6:60:66:76:ae:6a:ef:21:f4:f2:
                    78:44:27:76:b0:4d:68:fb:87:9e:88:2e:ad:1c:38:
                    aa:3f:ba:02:46:3c:98:30:1b:6a:57:88:42:ed:d8:
                    3f:75:65:5b:de:e0:68:bf:fb:98:4e:ad:aa:8f:7e:
                    a6:3a:8d:ac:83:de:5e:29:ed:93:4e:71:00:43:e8:
                    3d:43:71:62:8d:51:a6:4c:13:5e:65:0d:e5:11:bb:
                    82:18:0d:eb:2c:ac:e3:53:46:1e:74:8c:6b:01:02:
                    1c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:ED:F4:54:CC:3F:B2:5B:02:BC:23:40:67:37:A8:B5:CB:B5:76:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8cd6331b-3f3f-3ff8-831c-67b064d48bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b0:de:09:36:9a:72:47:4f:c5:77:35:dd:8d:d7:7c:59:04:
         b0:b9:ce:bb:5d:83:9b:74:a7:75:7b:3a:16:e3:23:5c:b2:8f:
         60:77:59:46:e8:e5:1d:10:2f:89:e1:05:7b:03:27:3a:3b:a9:
         82:b3:61:4e:d2:e9:15:1d:95:8f:ee:06:c5:e5:77:92:a0:67:
         3f:f7:9f:d3:37:e8:fa:12:9e:86:b9:fb:2d:d4:8b:f0:8f:d8:
         2d:49:36:b1:db:09:1f:3c:11:d7:0d:ca:e6:6b:0e:9d:ad:e6:
         8e:f1:52:23:0f:12:a2:10:3f:48:0a:04:ae:86:ae:6e:81:a3:
         29:df:71:71:c6:c0:e9:9f:f3:e1:55:09:c3:86:cb:a9:8f:5b:
         9e:95:58:2a:d5:f5:69:88:ae:1e:67:f4:fd:d6:1f:a7:fe:29:
         f2:d8:21:5e:a1:a3:92:4b:a1:b3:e2:a1:30:eb:3d:9c:d8:0f:
         6a:48:11:7d:b4:25:4b:99:3c:b5:dc:83:57:95:37:51:44:b7:
         99:40:0e:21:4b:ce:6d:a7:98:59:40:d2:0b:ab:de:3a:8f:40:
         85:8e:37:cd:05:76:85:00:c1:79:95:a7:a0:d1:17:15:51:f2:
         cd:f4:d4:1d:81:a3:80:d2:8b:99:e0:27:3e:40:3f:86:36:e3:
         f6:2f:9a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:41:51 2025 by rpki-client