Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2178b4c6-a5d7-31fc-b015-087391b89b3b.roa
File:                     2178b4c6-a5d7-31fc-b015-087391b89b3b.roa (raw, json)
Hash identifier:          fWtVCzSFElOnmWecyWdHTT41NswGX1AHHIi3kJDpgpw=
Subject key identifier:   3B:B3:A7:16:2E:C8:30:A8:29:97:80:CB:28:D6:65:02:8F:A4:B6:5D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584BB45D1BB1EB17AC67FF58A260
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2178b4c6-a5d7-31fc-b015-087391b89b3b.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     49770
IP address blocks:        23.27.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:1b:b1:eb:17:ac:67:ff:58:a2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=a1e049c4-6d5a-4194-959d-b18e2834bfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:80:22:dd:be:a3:26:02:b1:7e:08:0d:7b:bd:
                    93:9f:91:f1:08:d1:85:a7:21:9a:2e:2d:bf:5f:22:
                    39:a1:a7:6c:9d:45:76:6e:8d:36:d8:e8:28:e3:f5:
                    5c:a6:68:7b:e6:4c:40:61:e9:14:8c:0f:17:07:f3:
                    96:5c:f0:57:76:21:10:24:af:0f:8d:1c:0f:2b:b9:
                    4e:21:91:2b:14:e1:41:02:8f:f8:08:e5:f2:84:40:
                    06:91:76:53:04:26:aa:66:33:2c:be:0d:74:4b:25:
                    44:95:83:a9:f2:18:bb:05:5b:cd:35:3c:48:3d:a1:
                    64:b0:8c:96:8c:6c:28:14:92:de:87:a9:b6:c0:43:
                    87:b8:31:c2:40:63:59:02:af:1d:0c:99:ca:40:bf:
                    38:20:07:55:9c:1e:94:0b:7c:65:0f:36:37:33:9b:
                    5f:f0:71:81:35:c9:79:91:2e:3e:8f:18:d1:bc:9b:
                    e2:94:9c:e1:7f:d3:fe:fc:65:72:cb:54:14:02:37:
                    10:3e:a8:95:19:5c:d2:a1:27:80:df:a8:80:5a:e8:
                    b5:fc:78:94:f4:0a:c1:30:1c:6d:52:ff:63:01:b3:
                    ab:d6:ce:f4:b5:d8:b6:41:c9:60:e2:46:a7:68:f5:
                    21:d0:ce:69:04:eb:06:40:b5:ae:09:84:a9:bb:c7:
                    bf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B3:A7:16:2E:C8:30:A8:29:97:80:CB:28:D6:65:02:8F:A4:B6:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2178b4c6-a5d7-31fc-b015-087391b89b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e4:bb:bf:64:49:07:e5:e2:85:42:62:93:e5:60:2a:db:03:
         df:b8:59:b6:60:52:a9:47:0b:92:42:4f:f1:fd:74:ca:cb:42:
         2e:33:98:3f:e4:b9:15:60:0f:99:de:26:6e:81:42:c1:8d:e2:
         68:0c:cc:c1:49:a7:c1:4e:3e:c5:f0:b7:06:7a:37:d0:ef:51:
         a1:1c:04:d9:52:81:e4:e7:1d:ac:04:9b:83:2a:d4:10:70:3f:
         20:ba:e4:77:a9:2f:eb:69:ad:16:66:d2:ef:62:a2:05:c9:7d:
         c6:82:11:90:b9:76:95:c6:a3:03:9e:cd:c1:89:b1:a4:71:92:
         8f:b7:e4:4d:ab:e4:03:e4:e1:0e:55:11:a7:79:8c:54:45:aa:
         c0:b2:10:ff:6d:ba:96:7a:23:4e:2a:c7:29:58:e8:7e:db:83:
         ae:8c:86:46:d1:d1:79:67:b8:4a:91:62:df:bd:62:db:61:d6:
         7a:05:88:8d:4a:82:f5:05:4e:0b:57:1b:58:a5:e7:59:ce:6a:
         15:2b:da:9f:7b:17:c7:9d:a6:4b:31:68:c2:ac:2e:da:14:c9:
         c1:72:70:9b:61:cf:a8:ef:48:e1:dd:f2:b6:cb:e1:c7:43:0f:
         46:fa:73:67:00:fc:f0:c7:08:2d:f7:e7:bf:e5:a0:1c:59:47:
         8c:79:c6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:39 2025 by rpki-client