Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1f1d758f-762c-3985-aba9-dfb77bb4f362.roa
File:                     1f1d758f-762c-3985-aba9-dfb77bb4f362.roa (raw, json)
Hash identifier:          HE4W/eCPuUHEbp6dK0W8JEY4GDQlFqZ/YyC8ilw0Sjc=
Subject key identifier:   3A:AE:BE:EE:48:17:BD:A3:00:7E:35:B1:C1:F3:A0:59:3B:6F:D2:16
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584BA9327695E582097D946CCC00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1f1d758f-762c-3985-aba9-dfb77bb4f362.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     149440
IP address blocks:        23.27.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:76:95:e5:82:09:7d:94:6c:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=91438eb6-84c0-4e6b-a942-af778ce7c3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cf:22:f3:6f:ec:dc:23:18:2d:1e:68:80:41:
                    28:85:16:ed:61:ac:e5:d9:cc:c5:a9:29:36:72:e6:
                    7a:79:f9:f5:a7:d4:f3:e3:6a:12:aa:a5:80:1e:b9:
                    be:b3:35:dc:15:aa:8f:e5:a6:6e:ce:1d:51:f6:43:
                    e6:ae:cd:4e:04:03:6f:68:f0:91:1d:4b:ab:5f:9e:
                    41:7d:75:10:4c:f5:f5:82:ed:79:de:a5:7c:57:a9:
                    23:51:7f:43:b3:d4:a7:7e:86:bd:2a:3b:1b:84:ad:
                    32:38:1e:3c:10:44:06:81:c9:fb:b4:a2:b2:6b:53:
                    cf:bf:58:07:54:6e:ce:6a:9e:5f:5f:bf:23:84:54:
                    87:80:5c:ec:62:87:42:db:43:51:75:b8:05:7d:1b:
                    cf:40:1d:6e:1e:39:af:09:fc:e8:5d:69:3f:59:e4:
                    f7:5f:e9:e1:87:30:2d:a0:81:c9:5b:18:5a:39:08:
                    85:30:10:2b:0a:3f:46:db:1b:da:1f:e2:28:14:7d:
                    47:7b:0f:ea:6f:e8:55:e5:8d:0d:99:ed:19:9c:e3:
                    8f:23:f9:11:ad:6d:61:e6:03:c4:f5:f4:da:17:ec:
                    7f:51:00:67:5d:af:63:fd:b5:8a:f7:68:af:50:43:
                    49:49:8f:b9:23:32:7f:d9:82:7c:3d:36:9c:3e:82:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AE:BE:EE:48:17:BD:A3:00:7E:35:B1:C1:F3:A0:59:3B:6F:D2:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1f1d758f-762c-3985-aba9-dfb77bb4f362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:72:34:ad:0b:1c:c5:e7:8f:60:ff:5f:df:7e:16:fb:5e:d4:
         6d:56:f4:d9:79:4a:5f:44:8c:5f:21:91:f4:21:8b:c6:55:70:
         da:3d:f9:f3:a4:34:8a:bf:65:e5:42:56:45:1a:b3:0f:20:e3:
         43:5a:4d:8c:ee:e9:0b:e2:0f:ba:2f:b8:44:0b:90:47:ed:73:
         7f:92:75:a4:a5:e2:55:38:40:d7:bc:b3:7b:cf:60:c9:36:fe:
         40:29:69:7d:f4:41:0e:71:54:47:61:9e:29:1d:19:a9:59:0a:
         24:ff:58:b4:86:12:d2:f7:00:2d:fd:f2:37:89:22:ed:86:20:
         f1:5b:37:bf:39:a7:29:2b:77:5f:d2:95:3a:fd:c2:a5:10:8b:
         75:52:82:16:a1:bb:49:a7:de:92:1e:36:b1:b0:99:4f:97:64:
         5d:9a:3a:63:0a:cf:db:2f:83:b0:73:90:d1:f8:eb:4d:0e:80:
         a7:70:fe:12:66:a2:6d:a3:e3:d0:82:ce:0c:59:d7:e9:24:fe:
         a0:76:9b:66:df:50:78:06:80:71:69:b7:e8:f3:5d:c6:dd:c9:
         c1:a1:74:47:34:f0:a5:87:a7:5c:d9:e8:72:77:a8:32:5e:88:
         34:fe:ef:fe:19:1e:3a:b7:e5:78:e2:3c:fe:af:1a:68:08:8d:
         c3:71:53:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:24:20 2025 by rpki-client