Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/02d7f6e2-c003-3b10-aa49-f6356f8234fd.roa
File:                     02d7f6e2-c003-3b10-aa49-f6356f8234fd.roa (raw, json)
Hash identifier:          Wiu+TpRAduDUFOgOlZs6Qn87ut7STRIl0+Av6wghF8c=
Subject key identifier:   27:18:D3:86:09:DE:F7:9E:90:F1:EB:D8:9E:CE:67:E6:BB:01:1E:44
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A77809A3E6637AE73659A2100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/02d7f6e2-c003-3b10-aa49-f6356f8234fd.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     209854
IP address blocks:        23.27.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:9a:3e:66:37:ae:73:65:9a:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=c6b06c28-19aa-4956-bc51-9068a5248af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0a:72:75:7e:4f:7f:57:e0:ca:b9:42:d1:e9:
                    ed:9c:c4:1d:86:ee:e9:2a:69:ba:c0:76:2c:5f:be:
                    82:12:a6:58:75:b9:ef:f0:c6:c8:17:ac:62:4f:da:
                    b9:e2:39:4f:0b:43:8b:b2:5e:5a:cc:60:e7:bf:98:
                    59:7d:4d:70:cf:0e:f4:47:86:10:56:99:62:9c:80:
                    1c:5b:58:eb:55:18:0c:91:33:fa:58:22:25:f8:4a:
                    3d:a4:64:38:ed:33:81:09:25:07:0b:06:2e:94:67:
                    35:63:58:10:cf:03:48:cc:30:95:6d:f6:61:4e:1c:
                    85:5d:d9:8a:e9:a2:fe:c4:ef:80:f2:40:80:49:cf:
                    58:39:77:11:bf:a4:b4:86:36:e1:40:83:15:69:b4:
                    5a:b2:c1:8d:47:78:b1:90:f6:28:05:a9:d2:b7:86:
                    a9:25:a2:92:21:19:a1:47:3b:19:35:07:3a:6b:77:
                    fa:8a:dd:fa:f2:15:8f:a5:2b:9d:ae:49:73:0a:55:
                    dd:11:5c:20:8c:d6:7d:32:5f:cd:88:c5:c8:54:cf:
                    35:bb:5e:c0:34:7e:ae:96:5a:43:55:85:12:5f:42:
                    4c:af:da:e1:7f:20:5e:c4:b3:ca:a3:01:48:25:48:
                    18:d7:6c:24:b7:92:8f:8f:95:66:66:1f:25:08:07:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:18:D3:86:09:DE:F7:9E:90:F1:EB:D8:9E:CE:67:E6:BB:01:1E:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/02d7f6e2-c003-3b10-aa49-f6356f8234fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ea:d2:e4:f2:54:da:2e:05:ba:c7:51:c2:09:a6:c7:09:53:
         28:ee:d5:17:41:bb:72:76:b6:f5:b9:09:a1:2b:1a:ea:7d:20:
         21:a6:ea:23:36:c9:e6:fe:af:d4:3e:27:66:eb:0c:19:ec:c3:
         b0:68:1a:42:df:02:65:fc:7a:ea:90:a9:0a:78:e8:b0:5c:ac:
         46:d8:da:42:b4:5b:98:cf:a2:c9:de:ea:b1:a5:28:82:92:9c:
         8c:96:b0:18:ec:e6:f1:72:58:ed:41:95:fb:60:e2:19:d7:4f:
         9b:d4:12:bd:47:80:fb:86:d7:65:39:51:5e:b4:83:bf:87:05:
         aa:1d:8c:0f:08:20:32:02:91:07:8a:ab:7b:db:69:0b:cd:03:
         70:ec:8e:41:a6:99:da:0d:b0:77:41:5e:19:a9:8f:6b:5c:45:
         f5:68:19:f8:90:8c:08:38:9c:27:81:36:5d:75:15:91:2a:76:
         56:5b:32:2a:d8:4d:59:b0:b8:30:9d:30:91:9a:26:39:98:5b:
         9b:24:50:2d:70:6b:e4:ad:60:03:18:52:3f:d4:95:ef:05:41:
         d3:d8:c4:aa:2a:ce:98:84:fb:30:e3:b2:f2:fb:cb:14:1c:df:
         fa:5b:29:9c:d1:bf:d4:01:97:4e:91:79:97:ac:4c:af:c4:f5:
         42:a4:e4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 16:36:41 2025 by rpki-client