Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fbc076b0-c17c-344f-b46b-5fd27670d07a.roa
File:                     fbc076b0-c17c-344f-b46b-5fd27670d07a.roa (raw, json)
Hash identifier:          rwE7AnqFVI4P5cFVgUyRUVUqLquMK3G+pYfflgSytpc=
Subject key identifier:   C8:8C:1C:3D:52:E6:3F:66:7B:FA:D8:0C:FC:C5:D4:69:7E:37:D0:BC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AF9514F9F1FE2677E74D3D430
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fbc076b0-c17c-344f-b46b-5fd27670d07a.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     5650
IP address blocks:        23.27.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:4f:9f:1f:e2:67:7e:74:d3:d4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=626b06bc-1391-43fe-b930-91044572c3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:8f:ab:6d:41:e1:78:ce:2d:b2:de:73:82:
                    25:6a:95:60:cc:25:c9:c9:55:3b:07:d0:a9:4a:1a:
                    d5:ef:27:01:78:98:67:f1:b3:b5:81:d3:b0:c8:2c:
                    25:39:ae:47:65:b3:68:05:3a:e6:42:b9:57:32:96:
                    45:12:1f:af:05:cc:e7:e9:41:8a:97:ba:01:bf:bb:
                    b1:42:7b:87:9f:50:d9:87:48:7d:09:e4:a1:89:c2:
                    a2:f8:06:85:8b:fe:e6:ff:3a:5a:d2:f5:f3:21:58:
                    bd:02:81:5c:f0:d9:85:5e:a2:de:65:75:7c:f5:49:
                    e1:19:1e:fb:97:29:10:67:8d:8d:9a:f1:66:3c:26:
                    81:63:04:10:4b:c1:99:36:0f:98:8f:73:9e:0f:6b:
                    59:b5:67:56:5e:71:39:b9:73:05:76:ca:2d:c7:d1:
                    15:00:95:a0:83:69:5c:1b:a0:cd:0e:b2:11:42:e8:
                    11:1b:0a:b4:95:fd:8d:f6:6d:7b:d5:48:79:e5:77:
                    ff:78:b7:b9:9d:68:6c:a2:a5:42:cc:60:0a:4c:34:
                    32:20:c3:e7:df:1d:20:71:a6:a1:78:c1:74:fd:40:
                    4c:0a:5c:da:8f:96:38:6c:c5:8a:44:d3:3e:39:6f:
                    41:34:35:84:c7:c8:6f:fc:94:7d:6c:6a:71:38:da:
                    b9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8C:1C:3D:52:E6:3F:66:7B:FA:D8:0C:FC:C5:D4:69:7E:37:D0:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fbc076b0-c17c-344f-b46b-5fd27670d07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e6:71:c7:96:3c:0c:d9:7a:ce:8f:2b:1c:13:2b:46:27:a5:
         62:ff:1f:fb:2b:f0:b7:cf:c0:c1:2d:8b:8f:59:d1:01:f2:db:
         22:93:e6:99:d3:66:99:02:08:76:fb:40:6c:0b:de:b9:77:e7:
         40:df:c6:ed:ad:35:14:c6:a8:5e:a2:ac:55:6a:ea:0f:24:bd:
         b9:5e:a2:8c:19:27:fa:fa:6b:30:11:b4:ec:0f:28:6b:a3:e5:
         4c:18:4c:ca:1b:9e:90:35:bf:37:b2:9a:f7:7d:ac:07:b5:9e:
         4e:0c:5f:40:ab:2e:01:cf:3d:fc:ff:b0:03:5c:13:3c:51:d3:
         74:be:e7:4e:dc:49:27:71:d0:1e:62:a0:7f:44:86:02:61:11:
         2e:2d:6c:41:ee:89:69:11:4a:2a:c1:aa:88:60:b0:aa:3a:5c:
         5a:2b:e4:f9:d5:13:be:82:28:91:54:03:9b:a5:c3:68:2d:2a:
         b6:f5:31:e0:59:70:45:a7:8a:4f:a6:72:57:b3:99:6b:bf:e7:
         a4:ce:f7:e8:b2:31:84:ed:65:cc:61:8a:ca:f8:83:f8:c2:b8:
         8f:b8:80:b6:53:68:3c:b0:14:72:03:e2:dd:c8:38:d7:33:b9:
         71:f8:25:35:f8:5d:0d:99:b1:68:cf:1f:e5:e5:74:d2:03:88:
         cc:ce:89:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UU+fH+JnfnTT1DAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk
NjI2YjA2YmMtMTM5MS00M2ZlLWI5MzAtOTEwNDQ1NzJjM2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxaPq21B4XjOLbLec4IlapVgzCXJyVU7B9Cp
ShrV7ycBeJhn8bO1gdOwyCwlOa5HZbNoBTrmQrlXMpZFEh+vBczn6UGKl7oBv7ux
QnuHn1DZh0h9CeShicKi+AaFi/7m/zpa0vXzIVi9AoFc8NmFXqLeZXV89UnhGR77
lykQZ42NmvFmPCaBYwQQS8GZNg+Yj3OeD2tZtWdWXnE5uXMFdsotx9EVAJWgg2lc
G6DNDrIRQugRGwq0lf2N9m171Uh55Xf/eLe5nWhsoqVCzGAKTDQyIMPn3x0gcaah
eMF0/UBMClzaj5Y4bMWKRNM+OW9BNDWEx8hv/JR9bGpxONq5AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMiMHD1S5j9me/rYDPzF1Gl+N9C8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmJjMDc2YjAtYzE3Yy0z
NDRmLWI0NmItNWZkMjc2NzBkMDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxv4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI7mcceWPAzZes6PKxwTK0YnpWL/H/sr8LfPwMEti49Z0QHy2yKT5pnT
ZpkCCHb7QGwL3rl350Dfxu2tNRTGqF6irFVq6g8kvbleoowZJ/r6azARtOwPKGuj
5UwYTMobnpA1vzeymvd9rAe1nk4MX0CrLgHPPfz/sANcEzxR03S+507cSSdx0B5i
oH9EhgJhES4tbEHuiWkRSirBqohgsKo6XFor5PnVE76CKJFUA5ulw2gtKrb1MeBZ
cEWnik+mclezmWu/56TO9+iyMYTtZcxhisr4g/jCuI+4gLZTaDywFHID4t3IONcz
uXH4JTX4XQ2ZsWjPH+XldNIDiMzOiTg=
-----END CERTIFICATE-----
Generated at Tue Aug 26 18:03:24 2025 by rpki-client