Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df8e2d32-7ffc-3b3e-aafd-1d5f20e8e254.roa
File:                     df8e2d32-7ffc-3b3e-aafd-1d5f20e8e254.roa (raw, json)
Hash identifier:          IemQH9YNRdoujSewA511wpnnXh6VVljSGX62eLl5b9g=
Subject key identifier:   9C:BE:FB:28:78:AA:F4:16:4E:16:06:9B:8B:2B:89:71:45:B2:F1:36
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A77809A2C893BC72B88746900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df8e2d32-7ffc-3b3e-aafd-1d5f20e8e254.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     209854
IP address blocks:        23.27.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:9a:2c:89:3b:c7:2b:88:74:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=e3a11edc-e3bd-4ed2-b51c-d0683d88ae90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dc:e9:d4:c6:fa:84:38:f2:ff:e3:36:a6:fb:
                    74:37:45:fc:d7:23:ee:54:15:33:97:46:69:9d:48:
                    e9:23:f7:8f:06:08:90:96:af:46:6d:45:ce:2d:80:
                    ab:c8:cc:72:75:0f:29:ee:0d:a7:24:f4:8f:9e:88:
                    b9:74:71:63:c1:78:cf:ed:08:40:ba:0a:19:8a:8f:
                    48:69:3e:61:8d:03:f2:a7:66:86:65:a5:bd:02:ab:
                    f8:d4:10:07:3a:c3:3d:eb:53:05:43:78:9d:31:75:
                    97:d2:f4:64:46:3b:64:18:ee:f8:31:59:12:c4:1f:
                    88:3e:87:f8:29:5b:f2:51:a4:f9:39:59:01:c7:c9:
                    89:41:a8:09:1b:c8:46:6a:08:b3:0f:76:c6:2a:aa:
                    7a:41:b6:95:ad:d1:35:cb:ac:3e:f8:80:6a:90:88:
                    15:4e:9b:40:c5:f0:0e:7e:6d:14:89:b8:7b:71:cc:
                    94:1d:ac:44:65:fa:01:f3:36:19:66:9e:8e:38:0b:
                    e8:da:68:11:93:37:71:87:f6:0e:eb:8c:64:fc:08:
                    5a:d4:1c:e6:92:4c:dd:ca:e8:a0:c2:cc:c8:3d:a5:
                    38:36:e0:80:1d:69:eb:c4:98:3e:66:54:13:e8:f3:
                    3a:6b:8b:15:98:2d:31:17:ce:83:c5:ae:ca:99:b6:
                    0f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BE:FB:28:78:AA:F4:16:4E:16:06:9B:8B:2B:89:71:45:B2:F1:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df8e2d32-7ffc-3b3e-aafd-1d5f20e8e254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ed:b8:63:1c:82:8a:ce:7e:3b:7d:e8:73:e5:72:97:48:10:
         61:72:dd:7f:d6:e3:a7:c1:a0:bc:50:43:06:4f:82:c0:76:ea:
         ce:6b:a1:e0:e1:39:55:73:e1:22:b2:0e:d9:df:61:27:c3:6f:
         c1:65:ae:90:46:e0:3f:51:f5:c3:cf:36:65:79:11:a8:10:f9:
         86:77:99:ab:29:da:95:4d:10:f4:ba:d1:ca:7c:11:b4:5f:e5:
         bd:65:83:13:8a:b0:17:97:92:48:1f:f0:6d:86:37:5a:42:83:
         e9:1e:20:98:90:5f:fb:ef:c5:39:ad:91:fc:90:f4:05:1b:ed:
         b8:ec:4b:5d:aa:29:95:b6:97:a7:26:eb:e7:7d:e7:ee:fd:da:
         91:ec:a9:57:b1:bc:41:91:b4:7a:be:50:ef:21:37:50:1b:00:
         71:7e:91:fe:61:8a:4d:d7:71:ca:56:e1:b2:b3:1e:2b:b6:c6:
         35:eb:17:ad:64:87:15:f8:88:6f:bc:00:c2:24:35:dd:db:02:
         73:9d:45:80:7c:74:57:17:e8:cb:76:91:7a:6f:3e:f1:cf:17:
         6a:63:ac:1e:33:dc:ed:ca:03:b2:98:f5:07:98:94:33:7a:44:
         da:fa:4f:3d:63:17:80:fc:3f:35:50:8f:5b:ee:a2:18:25:f3:
         16:77:06:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gJosiTvHK4h0aQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk
ZTNhMTFlZGMtZTNiZC00ZWQyLWI1MWMtZDA2ODNkODhhZTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutzp1Mb6hDjy/+M2pvt0N0X81yPuVBUzl0Zp
nUjpI/ePBgiQlq9GbUXOLYCryMxydQ8p7g2nJPSPnoi5dHFjwXjP7QhAugoZio9I
aT5hjQPyp2aGZaW9Aqv41BAHOsM961MFQ3idMXWX0vRkRjtkGO74MVkSxB+IPof4
KVvyUaT5OVkBx8mJQagJG8hGagizD3bGKqp6QbaVrdE1y6w++IBqkIgVTptAxfAO
fm0Uibh7ccyUHaxEZfoB8zYZZp6OOAvo2mgRkzdxh/YO64xk/Aha1Bzmkkzdyuig
wszIPaU4NuCAHWnrxJg+ZlQT6PM6a4sVmC0xF86Dxa7KmbYPTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJy++yh4qvQWThYGm4sriXFFsvE2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGY4ZTJkMzItN2ZmYy0z
YjNlLWFhZmQtMWQ1ZjIwZThlMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxs2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATtuGMcgorOfjt96HPlcpdIEGFy3X/W46fBoLxQQwZPgsB26s5roeDh
OVVz4SKyDtnfYSfDb8FlrpBG4D9R9cPPNmV5EagQ+YZ3masp2pVNEPS60cp8EbRf
5b1lgxOKsBeXkkgf8G2GN1pCg+keIJiQX/vvxTmtkfyQ9AUb7bjsS12qKZW2l6cm
6+d95+792pHsqVexvEGRtHq+UO8hN1AbAHF+kf5hik3XccpW4bKzHiu2xjXrF61k
hxX4iG+8AMIkNd3bAnOdRYB8dFcX6Mt2kXpvPvHPF2pjrB4z3O3KA7KY9QeYlDN6
RNr6Tz1jF4D8PzVQj1vuohgl8xZ3BjU=
-----END CERTIFICATE-----
Generated at Thu Jul 10 16:25:18 2025 by rpki-client