Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bc1b0ff2-0a2e-32b9-9c76-b9d851647fb8.roa
File:                     bc1b0ff2-0a2e-32b9-9c76-b9d851647fb8.roa (raw, json)
Hash identifier:          HW6wS2iX3vlYdHHiJXxhc3FcLMrgLK2ZukSm1wTpieI=
Subject key identifier:   A1:16:DC:4C:7C:9A:17:C2:24:04:04:D5:CE:38:66:B0:42:59:E2:7B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A9E6531D1752EF590EB3042C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bc1b0ff2-0a2e-32b9-9c76-b9d851647fb8.roa
Signing time:             Wed 23 Jul 2025 23:22:23 +0000
ROA not before:           Wed 23 Jul 2025 23:22:23 +0000
ROA not after:            Tue 21 Oct 2025 23:22:23 +0000
asID:                     7385
IP address blocks:        23.27.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:65:31:d1:75:2e:f5:90:eb:30:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 23 23:22:23 2025 GMT
            Not After : Oct 21 23:22:23 2025 GMT
        Subject: CN=89240e27-f9c4-4164-8fbc-f3a604e83bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:93:61:3a:b8:18:88:72:b8:2d:a9:5e:b2:
                    85:c9:9c:dd:11:a8:24:7e:9c:ea:e1:a5:9e:55:ee:
                    e3:de:6c:68:9e:73:17:d2:df:ca:d5:6b:b1:14:6c:
                    1f:ed:bd:e3:a6:fc:fe:de:61:0d:30:1e:55:21:73:
                    b1:d4:d4:2d:31:3c:0c:4c:de:0d:05:02:58:e2:fd:
                    8d:10:3b:2a:cf:73:e7:48:49:dc:48:90:7f:8c:82:
                    d9:be:86:43:2b:35:6b:8e:eb:78:2d:1b:e3:e1:5e:
                    4a:2a:ed:12:54:72:aa:f2:ff:0d:10:ac:57:2c:d7:
                    15:02:7f:a6:e7:5e:4f:1a:3c:36:33:7e:b4:cf:01:
                    c0:75:53:62:97:f4:1e:11:f2:a6:7d:b0:e2:bd:91:
                    b2:f0:3c:db:78:c1:f6:a7:2e:b7:7a:fc:44:1a:f3:
                    56:ab:f5:c2:11:2b:6d:e5:59:6a:ce:d8:90:9a:01:
                    c6:30:e1:11:2d:d3:f8:d1:9c:a1:c9:7c:a9:f1:54:
                    7d:73:6d:e4:85:c4:ec:5c:51:4f:2f:a1:7c:44:04:
                    03:f3:fb:29:a6:de:75:54:9a:e8:49:6e:2b:9b:ad:
                    34:e7:5a:f7:0d:e5:40:14:fa:f8:b8:99:02:cf:34:
                    d3:a6:c3:2a:86:72:a7:5b:89:fd:a4:09:0a:7c:6f:
                    58:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:16:DC:4C:7C:9A:17:C2:24:04:04:D5:CE:38:66:B0:42:59:E2:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bc1b0ff2-0a2e-32b9-9c76-b9d851647fb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:03:46:62:33:e3:8e:9d:09:e3:d2:d3:6d:0a:65:7b:6a:cb:
         1c:c6:af:28:9d:61:4a:c1:e3:b3:67:01:8f:5c:b9:de:7c:5f:
         a9:fd:c4:9d:f6:3e:88:95:7a:42:9d:bb:38:c5:14:34:36:54:
         0f:7d:30:82:21:cb:5e:68:b9:e8:d3:2a:da:f7:84:15:82:40:
         39:20:c4:2a:f3:3e:17:86:6b:5f:1e:08:9e:ff:7c:77:44:d6:
         a8:37:ee:a0:00:db:b7:54:9a:3a:96:03:eb:f0:a5:cf:1f:57:
         56:58:af:2a:1d:16:6e:3c:e7:f3:52:e2:43:e5:4a:db:70:37:
         7f:0d:71:72:6d:69:76:de:d1:a7:1d:82:94:fd:a4:d9:8d:5e:
         5d:fa:c5:ee:70:fb:34:58:37:58:fa:e2:f8:fb:b6:ea:70:38:
         69:09:ff:2a:23:28:9d:1d:0a:a8:fa:19:97:3a:ab:a6:57:e6:
         da:b9:3c:0c:64:94:2d:0b:6a:72:d6:cc:22:58:60:49:bb:73:
         fa:0f:31:8c:b3:3f:7e:81:64:9c:21:aa:61:ff:e2:13:75:ff:
         34:28:cf:6f:99:9d:8c:f5:ff:54:a3:21:70:3b:38:96:52:d0:
         24:77:82:73:04:3c:eb:ae:2c:47:18:1b:85:27:47:67:66:f9:
         24:e6:24:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 13:02:57 2025 by rpki-client