Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a425210b-5222-3930-98b6-b2dec297abd7.roa
File:                     a425210b-5222-3930-98b6-b2dec297abd7.roa (raw, json)
Hash identifier:          DRffL5r/0wYlcyZ822zdWz9EKeSfvXp75tVs5v/t/ZU=
Subject key identifier:   67:1F:42:AC:EE:0C:FB:1E:BC:CB:DE:4D:B9:BF:48:B7:E8:29:CC:FC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B5E48A8C3F843EC8F34C5FDFA
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a425210b-5222-3930-98b6-b2dec297abd7.roa
Signing time:             Tue 30 Sep 2025 17:00:05 +0000
ROA not before:           Tue 30 Sep 2025 17:00:05 +0000
ROA not after:            Mon 29 Dec 2025 18:00:05 +0000
asID:                     7029
IP address blocks:        23.27.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5e:48:a8:c3:f8:43:ec:8f:34:c5:fd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 30 17:00:05 2025 GMT
            Not After : Dec 29 18:00:05 2025 GMT
        Subject: CN=37cff266-a287-4fd7-8971-f27aec16ac1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:b2:e8:5f:1f:f9:28:f9:2f:de:86:37:15:
                    51:e4:77:4b:13:80:85:45:59:d9:af:e9:a6:c5:ab:
                    17:19:58:80:33:b7:e7:c9:52:4e:2e:86:eb:bb:bd:
                    35:9a:f1:95:43:c5:76:17:2c:b0:44:4f:cd:b4:ac:
                    92:63:52:45:0a:4a:76:2a:a1:6e:eb:dc:72:05:44:
                    87:c3:dc:57:47:48:92:59:83:ef:60:28:b7:a2:8d:
                    c4:cb:72:18:95:c2:9b:9f:b4:2c:87:41:0c:b8:ee:
                    16:90:4b:3b:ab:7c:47:97:53:97:09:f0:f3:5f:87:
                    b6:f4:02:c4:85:a9:e5:54:cf:bc:a3:5b:98:f9:c2:
                    b8:97:bb:02:9c:77:8a:2e:cd:50:f6:ca:97:9e:10:
                    9c:d5:59:79:5e:79:8c:df:22:94:d3:5d:e9:38:9b:
                    17:2c:bd:6f:81:66:e4:c6:60:32:ef:12:27:7b:b6:
                    5c:41:97:fb:32:68:7d:0a:c3:16:d1:54:c7:95:8c:
                    02:a4:03:33:5a:fc:eb:cb:cc:70:3b:0a:1e:d7:60:
                    e8:a1:86:f5:63:d9:ba:57:2a:4b:53:a3:15:ae:75:
                    b7:3f:ea:48:68:23:27:c3:ea:f0:15:00:48:65:7f:
                    80:c0:4d:cd:f4:e9:a5:be:e5:a7:d4:fd:b7:a6:7e:
                    fa:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1F:42:AC:EE:0C:FB:1E:BC:CB:DE:4D:B9:BF:48:B7:E8:29:CC:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a425210b-5222-3930-98b6-b2dec297abd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:e2:47:21:c6:26:86:2a:97:b2:b2:98:b3:db:85:e1:0c:00:
         27:91:12:fa:5c:82:c8:61:90:98:ef:f5:dd:dd:06:81:3c:4c:
         c1:07:8a:19:5a:7b:85:8d:4e:3b:e3:6f:bc:b2:6b:23:53:54:
         36:ca:26:bd:78:c4:0f:17:9a:76:8e:91:36:d0:e4:33:64:26:
         95:2a:ef:fa:ee:ba:80:25:c0:88:40:6a:e0:5c:c0:f7:5e:81:
         78:c2:6d:bd:fd:67:26:fb:ca:3b:f7:75:87:62:9d:36:dc:4a:
         1e:9a:29:87:88:ef:3a:37:86:31:1d:fb:6b:e3:2c:4f:f5:77:
         6a:5e:84:80:4d:fb:23:e5:f4:2c:c8:0f:10:db:1f:4e:0e:8f:
         2b:e7:76:90:15:82:39:7a:f4:fc:c6:15:2d:a8:c7:93:90:a0:
         d8:ed:f9:6d:3f:b1:4c:01:8c:2d:51:b7:1e:15:f8:82:a5:ca:
         7d:82:9f:53:40:15:8a:40:1d:8e:20:b6:f0:a3:34:f7:1e:50:
         bc:c9:10:5c:3b:cd:61:f3:5d:13:c3:ff:e9:4d:72:5f:fd:cb:
         a5:04:2c:3b:92:ab:5e:2a:72:f5:a2:c1:3d:60:62:98:4f:d2:
         56:8c:ad:6b:82:2a:fd:5e:26:cb:f8:33:1b:90:fb:92:af:22:
         0b:82:e5:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEteSKjD+EPsjzTF/fowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDkzMDE3MDAwNVoXDTI1MTIyOTE4MDAwNVowLzEtMCsGA1UEAxMk
MzdjZmYyNjYtYTI4Ny00ZmQ3LTg5NzEtZjI3YWVjMTZhYzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuqy6F8f+Sj5L96GNxVR5HdLE4CFRVnZr+mm
xasXGViAM7fnyVJOLobru701mvGVQ8V2FyywRE/NtKySY1JFCkp2KqFu69xyBUSH
w9xXR0iSWYPvYCi3oo3Ey3IYlcKbn7Qsh0EMuO4WkEs7q3xHl1OXCfDzX4e29ALE
hanlVM+8o1uY+cK4l7sCnHeKLs1Q9sqXnhCc1Vl5XnmM3yKU013pOJsXLL1vgWbk
xmAy7xIne7ZcQZf7Mmh9CsMW0VTHlYwCpAMzWvzry8xwOwoe12DooYb1Y9m6VypL
U6MVrnW3P+pIaCMnw+rwFQBIZX+AwE3N9OmlvuWn1P23pn76GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGcfQqzuDPsevMveTbm/SLfoKcz8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTQyNTIxMGItNTIyMi0z
OTMwLTk4YjYtYjJkZWMyOTdhYmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxslMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJLiRyHGJoYql7KymLPbheEMACeREvpcgshhkJjv9d3dBoE8TMEHihla
e4WNTjvjb7yyayNTVDbKJr14xA8XmnaOkTbQ5DNkJpUq7/ruuoAlwIhAauBcwPde
gXjCbb39Zyb7yjv3dYdinTbcSh6aKYeI7zo3hjEd+2vjLE/1d2pehIBN+yPl9CzI
DxDbH04OjyvndpAVgjl69PzGFS2ox5OQoNjt+W0/sUwBjC1Rtx4V+IKlyn2Cn1NA
FYpAHY4gtvCjNPceULzJEFw7zWHzXRPD/+lNcl/9y6UELDuSq14qcvWiwT1gYphP
0laMrWuCKv1eJsv4MxuQ+5KvIguC5as=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:40:58 2025 by rpki-client