Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e08dd3d-c968-3562-8bd6-ddc5971ef85a.roa
File:                     3e08dd3d-c968-3562-8bd6-ddc5971ef85a.roa (raw, json)
Hash identifier:          XFcZf/FfaNPnYx3lGzWKk2O1Nr1nr5aiHCi4QQLbR5g=
Subject key identifier:   B6:C3:EC:DC:21:9C:75:E4:79:C4:96:6A:93:B5:34:57:29:87:03:92
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB5ACB2AC02D28D696ECC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e08dd3d-c968-3562-8bd6-ddc5971ef85a.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        23.27.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:5a:cb:2a:c0:2d:28:d6:96:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=f4ab088d-667e-411f-becc-da7687e77fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:3b:a0:ba:3c:0d:61:87:61:ce:f9:5a:d3:
                    3e:7f:d4:77:cb:71:10:05:ca:6e:eb:5c:59:fc:b5:
                    fd:f1:70:e2:4a:bc:f6:81:39:23:6a:33:61:81:88:
                    7e:f9:f1:ed:8a:35:17:ed:8d:00:89:e9:57:f7:73:
                    8d:25:21:bc:e5:84:d5:4a:49:e1:6b:35:e1:75:46:
                    3b:46:11:68:bb:f9:fe:89:a8:dd:6c:c9:d3:43:05:
                    ab:a6:6b:7d:71:da:33:ee:22:6c:ae:8c:33:b6:db:
                    25:6d:49:8b:f2:32:f8:65:28:c2:a4:48:76:9a:b0:
                    06:30:83:f4:94:ea:42:58:ed:f2:58:98:d0:ad:52:
                    f5:a4:ee:ff:b1:14:d5:6c:56:d5:22:77:a9:6e:77:
                    2e:25:62:0c:00:2c:4c:28:62:17:9c:f5:e9:4f:b8:
                    e5:e3:91:99:00:6e:31:cd:76:91:b7:99:1f:f4:74:
                    a0:e3:f1:ae:92:d5:34:90:3f:3d:e6:d4:54:8e:31:
                    c4:c8:ed:70:5a:64:93:b5:fb:29:d2:a6:b4:c2:99:
                    8b:18:fa:37:66:33:62:fd:25:09:ee:46:fb:94:86:
                    ec:24:de:d7:c9:b9:4b:8a:06:e9:4a:f3:c3:a6:11:
                    f9:8e:70:f3:7a:c7:bf:af:e0:68:7e:3d:d1:0b:c4:
                    c9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C3:EC:DC:21:9C:75:E4:79:C4:96:6A:93:B5:34:57:29:87:03:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e08dd3d-c968-3562-8bd6-ddc5971ef85a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:55:62:98:c7:6b:a0:71:23:28:18:2c:11:ba:9f:d7:ba:f8:
         98:08:31:d3:26:ed:ce:cf:fe:79:72:43:ff:38:3d:d3:2e:5d:
         ae:ff:1b:c9:f8:0f:53:01:4b:2f:e3:ff:ae:bf:2f:12:95:d2:
         ff:d4:81:6a:3d:fb:96:11:38:26:65:91:c7:44:de:42:e7:d8:
         7d:51:af:f1:f2:1f:49:46:c5:0f:3b:21:45:61:45:d7:22:9b:
         d9:fb:f5:fb:c1:5c:be:eb:29:1c:6e:e9:15:29:5f:78:f2:b5:
         7a:1d:24:f1:d6:76:50:f4:c6:05:58:34:76:90:a2:77:f4:4d:
         70:69:5b:cc:2c:54:2f:c8:04:ae:92:bb:55:35:cf:be:c8:d8:
         6f:37:81:be:8d:9a:ca:f1:9a:bc:e0:d0:df:87:b7:0d:cd:c5:
         07:9a:9b:50:f9:05:07:dc:2c:35:70:62:d6:9b:fc:3a:38:d7:
         8b:4f:ae:ec:16:5b:54:35:f0:f5:81:b1:87:32:91:01:37:c6:
         64:c9:25:58:2d:36:03:f5:3a:68:9e:c5:22:a3:4e:9d:f4:1c:
         d2:16:83:95:6c:92:7d:9d:27:31:7d:63:68:9f:12:38:9f:48:
         ae:5e:0a:1e:e4:b3:96:da:cb:cf:6d:ae:e1:12:f3:8e:6b:94:
         54:86:2d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 17:20:43 2025 by rpki-client