Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c70abe3-fda0-3b57-94ba-8ad0100b9379.roa
File:                     5c70abe3-fda0-3b57-94ba-8ad0100b9379.roa (raw, json)
Hash identifier:          MuzFnOfbw0TjSO+K3i4qzWVPxxzaR4PYTTCjGFKk+Z4=
Subject key identifier:   93:ED:EA:AC:E3:F6:42:54:C3:64:1F:21:17:42:CE:5A:01:4B:64:BF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A71EB57A2F781BA93430B25C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c70abe3-fda0-3b57-94ba-8ad0100b9379.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     209854
IP address blocks:        23.27.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:57:a2:f7:81:ba:93:43:0b:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=c0e11f3f-748a-4da6-9023-ee277a53085e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:4a:13:66:48:cd:78:25:67:9b:74:5a:3a:
                    f2:c3:5d:ec:66:2b:72:05:ea:80:97:a9:e9:7a:36:
                    56:34:35:0f:9c:e1:3b:11:52:f5:65:64:89:94:8d:
                    a6:44:66:15:70:75:cf:08:2a:f9:23:f2:f9:d0:5b:
                    3c:b7:16:c7:cb:b9:a0:c3:49:80:04:ac:f6:a6:f5:
                    9c:80:be:93:66:cc:d0:4c:4a:e6:db:43:df:96:d3:
                    49:32:0c:78:49:cc:bb:24:db:85:ec:6d:a5:53:79:
                    9a:2d:ab:f5:f3:e3:23:59:2d:a6:bd:b6:5d:e3:d0:
                    89:09:37:12:9d:35:1d:4c:94:f2:87:0c:9f:35:2b:
                    2a:e3:53:ee:0a:0f:cd:1a:ba:30:97:66:57:6d:97:
                    e3:59:e0:f5:63:a3:34:e3:0d:4c:83:99:f1:a7:78:
                    17:4b:08:5d:43:f9:7c:98:7d:8d:23:cb:23:67:f5:
                    88:48:8a:20:9f:93:56:be:df:26:b1:e6:c9:c8:18:
                    7f:be:b3:3a:82:da:4a:f0:77:76:0d:fa:a0:28:a9:
                    5e:b3:e3:6c:ca:3a:2f:cb:1a:57:c7:2e:26:ad:e1:
                    fa:41:64:1b:c2:f2:61:64:c1:b2:9d:50:26:a1:b4:
                    b6:15:29:8d:f2:f1:ab:da:45:d4:8c:0a:02:18:ad:
                    bc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:ED:EA:AC:E3:F6:42:54:C3:64:1F:21:17:42:CE:5A:01:4B:64:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c70abe3-fda0-3b57-94ba-8ad0100b9379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e0:3e:03:c8:99:49:cd:1c:c6:f5:f5:c1:7f:37:8a:e5:d2:
         b9:e9:38:e6:27:87:f2:6f:dd:80:4f:2e:29:73:07:a6:7e:f7:
         00:87:a0:9e:f7:74:20:b2:bb:f9:3b:49:68:5e:5a:72:de:40:
         18:4a:de:94:f8:34:74:e0:b5:2b:8d:98:98:5a:a7:df:b7:3a:
         78:63:31:38:32:ae:3d:b8:3a:87:c7:a1:c0:bd:46:e7:62:9b:
         a8:5d:47:b7:06:5e:14:e4:28:48:ef:b2:39:c5:00:6f:81:f6:
         19:9f:51:34:28:d5:87:35:db:39:28:8c:a2:13:d8:a8:09:6e:
         10:b1:54:a4:b4:79:46:ed:14:01:eb:6c:f0:ce:73:19:11:5f:
         b7:07:2f:a9:21:3f:98:26:63:d6:39:b8:10:f5:94:90:f5:d7:
         60:6b:0c:fc:06:d5:d3:94:dc:54:23:48:f8:a2:36:fe:81:6d:
         05:4b:0a:8b:20:9f:b9:af:35:34:e3:a8:cc:19:8b:37:64:70:
         36:7e:e6:9f:c0:1d:3f:2b:1b:88:22:f0:92:39:c6:8c:2b:56:
         74:5b:c4:21:97:c9:b7:66:c8:6c:1f:4c:59:3f:94:ea:7a:f8:
         15:96:c1:9b:ff:a3:de:d1:a1:70:c1:27:b8:bf:aa:b4:c4:59:
         2b:d3:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 20:04:40 2025 by rpki-client