Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7d2e3d8-3686-333e-bc56-63f8f76a6221.roa
File:                     f7d2e3d8-3686-333e-bc56-63f8f76a6221.roa (raw, json)
Hash identifier:          aV+t6dpbsH8jTUepWivnskgK1ql58ETPTjDrx5fAjU0=
Subject key identifier:   A4:80:8B:A5:2F:B4:B5:C3:5C:44:6E:FE:53:17:AC:30:4D:A4:C4:85
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A9E653216D9AB7F39195D8280
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7d2e3d8-3686-333e-bc56-63f8f76a6221.roa
Signing time:             Wed 23 Jul 2025 23:22:23 +0000
ROA not before:           Wed 23 Jul 2025 23:22:23 +0000
ROA not after:            Tue 21 Oct 2025 23:22:23 +0000
asID:                     7385
IP address blocks:        23.27.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:65:32:16:d9:ab:7f:39:19:5d:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 23 23:22:23 2025 GMT
            Not After : Oct 21 23:22:23 2025 GMT
        Subject: CN=84dc57bf-86eb-448e-9f5d-945b984078bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:d4:a6:47:de:53:85:db:f5:ca:53:ec:41:
                    c7:61:4c:8e:12:12:a8:47:69:bc:0d:0e:35:23:60:
                    8f:01:42:7f:b0:42:e7:29:4f:a4:c3:6b:ac:6f:57:
                    d7:2b:05:fb:01:d4:f3:7f:d6:cd:23:c5:01:e5:cc:
                    46:fd:ca:18:53:c9:ec:42:ac:d1:c0:77:a1:ad:8e:
                    f4:37:f6:30:f5:aa:6f:62:92:d1:e6:e4:e3:56:16:
                    e0:30:d7:a6:b2:bd:74:64:86:7d:ad:7b:9e:33:f2:
                    c5:04:73:b4:35:f1:86:30:13:e5:2b:ea:1d:cb:14:
                    08:fe:1a:63:0a:fa:97:4c:51:6a:7e:ca:26:37:81:
                    0e:94:d5:e9:2b:ef:8d:e4:ea:14:72:40:d3:84:bc:
                    2f:18:72:4b:53:c2:fc:e0:71:b1:01:76:b0:91:c4:
                    61:56:1d:74:69:e7:ef:04:ae:d7:69:3f:fb:6a:3c:
                    d5:bd:28:a6:0c:62:ae:e9:54:f4:bf:99:1b:f7:ba:
                    9f:68:04:74:11:e4:ef:d4:17:51:e1:1f:71:9c:a9:
                    b6:03:7f:d3:b2:30:f1:43:93:ab:9e:b7:a7:66:83:
                    33:03:28:a5:37:21:af:f4:15:8d:35:6b:ce:44:77:
                    02:b2:54:ca:15:a4:d0:ed:0f:c2:f7:a3:c4:d1:2f:
                    3d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:80:8B:A5:2F:B4:B5:C3:5C:44:6E:FE:53:17:AC:30:4D:A4:C4:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7d2e3d8-3686-333e-bc56-63f8f76a6221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:dc:77:82:e8:b3:62:14:13:90:5e:a5:49:b3:e2:24:57:6d:
         3a:ba:b5:58:e0:12:18:0e:0c:aa:e2:25:92:7c:bf:d5:fc:e5:
         c5:e0:d0:f4:0a:19:05:fd:53:22:04:31:25:12:a8:39:6f:50:
         fd:3c:32:44:22:d3:f4:b8:18:f8:d6:e9:24:31:e2:67:c1:12:
         8b:1f:09:a7:fe:b8:38:d5:20:68:30:54:80:03:c1:ea:ce:8b:
         8a:4c:e7:a7:a4:f1:cb:03:a3:de:21:f4:c1:12:ee:94:ae:c6:
         e3:4b:d5:3a:87:e4:63:c8:26:90:ca:da:c2:d3:7c:6f:c2:03:
         ba:67:bc:d0:75:ba:e6:53:17:89:4e:6d:6f:79:cd:33:83:c2:
         1b:e0:7a:eb:97:42:37:6e:fc:3b:6c:cb:21:f1:47:85:d9:a5:
         88:81:1c:db:40:5c:e3:fb:be:53:c1:a6:25:e4:27:d4:16:da:
         bb:a1:46:01:1c:d9:9a:c8:4a:bc:1d:ae:fa:1b:74:86:6d:a7:
         ef:8a:d7:5d:01:79:b8:79:5b:c2:26:86:c5:74:ba:ce:0f:61:
         0b:d4:d3:22:4c:f0:72:f7:72:4c:11:93:09:87:14:81:c4:c1:
         b5:16:ac:b8:09:29:80:62:30:13:c6:48:ed:30:e3:db:50:e4:
         86:c8:60:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 13:07:10 2025 by rpki-client