Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/170fa6b9-a100-3ef6-8991-f9a81388f66b.roa
File:                     170fa6b9-a100-3ef6-8991-f9a81388f66b.roa (raw, json)
Hash identifier:          PxIuOSOlZGpVio+qbXvE+OPJRBbuQ4Ftltwkd8iiUAw=
Subject key identifier:   68:00:04:0D:CF:D6:B7:37:08:F3:E5:56:1B:CE:1E:9D:42:F8:78:D0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B95A955DFBF4BE7CD17783F80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/170fa6b9-a100-3ef6-8991-f9a81388f66b.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     149440
IP address blocks:        23.27.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:55:df:bf:4b:e7:cd:17:78:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=3417b208-7f56-45c4-8ffb-0edc6bb6c119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:72:86:bc:32:28:0e:25:8f:a3:06:ae:87:
                    2b:d7:9c:7a:98:bc:fe:70:02:84:0e:99:e6:6f:d9:
                    3a:f4:ac:6c:fe:d4:e8:80:5b:92:a3:59:fc:6e:6c:
                    ac:9a:15:93:dd:b4:1d:7a:7d:f9:a0:16:6b:1f:7d:
                    3e:59:e7:be:5f:bc:8f:9f:74:40:e8:3b:15:47:64:
                    8b:d1:b6:75:61:db:f6:64:ae:24:27:14:a0:4b:bf:
                    85:bb:20:10:f4:f5:e3:89:cb:9a:30:60:6e:4b:1b:
                    a7:7b:67:6f:7c:0e:be:57:c5:3b:18:3f:c0:97:c6:
                    b7:5f:e1:55:28:18:9a:02:4e:f1:fc:ad:74:e7:43:
                    87:6c:f5:6e:f9:83:a0:22:c7:63:1d:d7:84:16:58:
                    0c:9e:5f:22:ea:1b:d4:13:4b:df:ac:8d:84:eb:71:
                    ff:5c:21:72:61:7f:04:0c:bd:2d:64:9e:4f:5b:d7:
                    a2:01:98:2e:f3:78:94:ae:69:01:6d:0e:98:d7:5f:
                    c0:5b:e3:86:d3:5f:73:d0:9a:c3:02:3c:18:d1:ea:
                    08:7b:8c:9c:2f:bb:7f:4c:70:b2:64:97:61:66:e0:
                    a3:5c:21:78:a1:da:d0:8d:e9:14:9e:c3:35:58:bf:
                    11:b1:ea:7a:cd:40:3b:14:4e:91:fc:27:3a:e7:c1:
                    ff:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:00:04:0D:CF:D6:B7:37:08:F3:E5:56:1B:CE:1E:9D:42:F8:78:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/170fa6b9-a100-3ef6-8991-f9a81388f66b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:96:79:e6:a8:c2:57:98:ac:61:2a:79:72:23:12:a4:10:bf:
         36:b0:4e:f8:eb:f6:cb:9a:ad:32:9b:42:5d:b9:8d:6a:79:f6:
         67:d6:af:12:f0:f7:4e:4b:31:fd:de:9e:72:b8:7d:95:2e:ec:
         f4:40:73:60:17:40:ea:96:ad:d8:2c:99:61:c3:3f:91:56:eb:
         05:c3:d7:c0:cf:88:1a:2c:b6:a4:b1:f9:4a:fb:dc:c0:af:0a:
         43:ae:6a:15:68:b3:a0:ee:0f:f3:73:cc:d3:2b:c5:93:47:e4:
         24:2f:94:ef:6b:e2:79:43:ef:34:be:87:03:07:e9:10:1a:d1:
         b6:6b:26:b6:cc:c3:ff:6b:7d:f0:f7:09:d2:48:d8:84:29:51:
         96:59:54:04:c0:53:df:1e:dd:14:75:3f:07:39:c2:b6:5a:89:
         a6:83:69:25:bd:d8:13:a0:fd:9f:b7:e3:27:89:5c:93:2d:aa:
         17:58:f7:5b:9c:b1:c6:31:12:f3:7f:0f:d8:70:57:2e:02:a2:
         5b:21:e0:36:56:9c:8f:04:37:07:ad:d9:b8:90:71:b3:fc:64:
         17:a8:b7:08:08:03:05:00:f0:ea:ce:5a:13:0c:20:73:bb:69:
         1d:17:40:ab:15:79:51:0d:ba:4f:b1:ec:3a:ee:05:54:92:57:
         ed:aa:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:41:22 2025 by rpki-client