Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fe687ec3-cab8-37fb-832c-a6ef9bce3924.roa
File:                     fe687ec3-cab8-37fb-832c-a6ef9bce3924.roa (raw, json)
Hash identifier:          JrixRpjxm3kVVstDGD0P2CZBFWGd5UT0M73df8V+RsM=
Subject key identifier:   20:42:35:B2:90:EF:94:7D:2B:90:0C:AE:E4:BF:05:F2:4F:38:EA:EE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A6DBB59E4C0901C5F72691390
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fe687ec3-cab8-37fb-832c-a6ef9bce3924.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     18779
IP address blocks:        23.27.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:59:e4:c0:90:1c:5f:72:69:13:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=b11e96ef-dbf2-4981-9824-fa04b186e3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8d:eb:3e:ae:ce:af:c5:23:b6:32:e6:44:2a:
                    39:f6:98:ff:26:3e:1c:c1:49:54:e4:39:59:0d:8a:
                    24:c6:0e:a1:ab:74:1c:d6:0e:b9:93:8a:bf:3e:9c:
                    1c:4e:54:c9:b4:58:37:18:0f:b5:59:c8:be:d0:48:
                    8d:71:25:05:e6:60:2e:3d:73:69:a4:e9:dd:98:83:
                    6c:4c:2e:86:70:10:66:b7:ec:e0:37:5b:d0:cd:a0:
                    1e:a3:a4:f0:b7:5f:81:f8:e1:29:a7:24:02:a0:19:
                    1a:e4:86:94:11:8d:82:32:cd:c9:d1:43:fa:7b:ed:
                    86:b1:eb:0d:0c:27:8d:a5:ff:0a:84:03:b6:0c:41:
                    fd:af:7a:d2:c6:d8:89:d3:e3:1b:3f:55:c2:96:dc:
                    78:40:ce:66:93:c3:2d:15:11:5b:1f:03:89:33:b7:
                    76:ad:a3:f2:ab:bd:e9:3a:3b:4a:b2:7b:19:ee:2c:
                    61:40:97:e2:76:a1:0f:1e:02:30:24:0f:20:d2:3e:
                    07:b0:e2:4e:c7:21:11:6a:3f:09:d5:0f:d3:49:10:
                    5d:b7:79:1c:e7:40:2e:9e:16:79:ae:ae:8e:1d:2f:
                    27:4c:0c:88:03:20:b0:8f:5e:9a:83:61:5e:cb:04:
                    7b:d6:31:1f:16:d4:41:87:16:2c:60:ea:16:ee:1d:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:42:35:B2:90:EF:94:7D:2B:90:0C:AE:E4:BF:05:F2:4F:38:EA:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fe687ec3-cab8-37fb-832c-a6ef9bce3924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:54:63:9e:27:29:b5:e7:04:43:cc:2e:48:7e:74:79:5e:54:
         f9:b3:8e:98:ae:98:c5:a5:ac:68:f8:fc:91:19:c0:62:a3:2a:
         99:33:23:f2:a1:26:c2:5c:44:4f:70:d0:7b:1f:d0:48:3e:da:
         bd:d9:a8:bc:5d:0b:0e:56:27:04:a8:87:4b:87:44:18:51:ad:
         8c:21:37:1d:c8:15:a7:2e:dd:61:03:91:83:86:4b:0d:97:90:
         7a:37:e0:91:5c:72:45:4a:8d:b9:96:74:bb:f2:16:0a:4f:5d:
         21:46:2e:5d:5c:60:78:94:d8:a3:80:b8:a1:1a:10:72:c6:80:
         32:c2:19:bd:a7:7e:8b:7c:00:7f:46:81:52:a7:63:34:f0:9b:
         18:97:00:e8:31:67:21:50:fe:b1:20:18:0d:14:45:62:13:91:
         80:dd:02:d9:20:4d:fe:7d:f6:18:a5:90:4c:f8:04:bd:b5:61:
         b0:05:0f:39:98:03:9d:5e:72:a6:59:23:fd:91:12:f6:c0:db:
         ca:b3:67:7a:05:7e:a5:1b:0c:21:7b:58:36:c1:9e:26:8a:f3:
         d9:9c:e4:59:ce:ea:1f:57:69:56:c9:fe:55:04:13:61:0a:44:
         d0:ca:18:f6:b8:27:ea:cb:eb:28:33:d2:f8:1e:73:9c:9b:37:
         9c:07:c9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 16:24:17 2025 by rpki-client