Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/229f77a4-3dfb-34c2-b453-c46e37a942e8.roa
File:                     229f77a4-3dfb-34c2-b453-c46e37a942e8.roa (raw, json)
Hash identifier:          oTjP2aTPvh2VTspamWdTsOmlWg03vFEHktHw+u8mTEY=
Subject key identifier:   8D:81:14:0F:D5:E5:BF:24:15:AE:D6:EE:D8:56:BA:51:AE:B7:B0:BB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A093AA48D38CF9DD0C4767788
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/229f77a4-3dfb-34c2-b453-c46e37a942e8.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     149440
IP address blocks:        23.27.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a4:8d:38:cf:9d:d0:c4:76:77:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=dc46860c-1c34-4a25-ad27-15ef28cbf8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:eb:60:a0:2d:08:a0:aa:3f:80:de:73:b2:28:
                    24:64:53:bf:84:f3:e0:7c:91:0c:3e:da:2f:38:ed:
                    58:06:ba:87:52:e3:de:a2:2d:d9:06:1a:11:b0:6d:
                    6a:27:f1:66:7c:3f:f1:50:39:ff:81:63:bb:26:38:
                    ac:33:e7:ae:58:95:5a:ca:1f:a6:1d:db:18:49:58:
                    55:64:99:69:d5:91:59:6c:b6:14:54:fb:4d:74:0d:
                    8d:7f:6d:d7:45:c2:8a:ed:76:b6:ef:2e:ff:69:d3:
                    9b:dd:ab:bf:65:61:2f:c3:9b:1f:ec:4f:d0:90:1d:
                    eb:8d:0b:89:2f:91:fa:d7:04:9e:cd:35:0c:2a:23:
                    3d:db:a8:91:26:c1:6f:1b:22:3e:a9:90:1a:33:84:
                    6a:bf:4f:36:9d:47:96:47:d4:20:8d:94:e3:f4:48:
                    bc:4e:49:e6:46:fb:3d:b5:92:a4:4f:d0:83:6f:79:
                    b1:82:fe:d0:fb:19:fb:d0:59:84:7b:3f:5e:c1:79:
                    3a:10:fe:fe:a6:6a:87:90:8a:a2:6c:4a:d4:77:81:
                    50:8e:e0:fe:9c:6c:61:88:41:44:cc:5e:4f:02:c6:
                    ea:b7:23:e7:5f:18:2d:72:ad:3f:c9:e2:c0:e5:b5:
                    0b:75:9a:e8:4c:1b:1d:8e:5e:ae:f5:a6:9b:2b:74:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:81:14:0F:D5:E5:BF:24:15:AE:D6:EE:D8:56:BA:51:AE:B7:B0:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/229f77a4-3dfb-34c2-b453-c46e37a942e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:9f:e9:57:f5:22:ff:a0:e7:79:84:99:c4:29:a7:b9:a1:eb:
         e8:f3:ed:29:d8:e7:22:38:ce:06:8d:80:0f:3e:98:30:ae:f1:
         87:82:c8:f6:9a:28:67:b5:b6:6d:59:f9:e5:f9:7f:9c:79:fc:
         54:82:97:0d:be:11:e5:ed:2e:84:5d:4e:10:2e:41:a5:91:e7:
         35:f8:ef:67:75:7c:ef:98:b6:56:e5:6e:9f:29:0f:22:e1:f9:
         88:4f:fd:92:52:46:79:73:b8:bd:60:1b:9c:7d:4a:7d:55:44:
         b4:f9:4c:f3:45:6e:15:e8:45:67:0e:98:8b:0d:6a:9c:67:f2:
         f2:75:95:26:69:6f:84:75:0e:9d:d8:a4:08:24:31:c6:0d:ef:
         e6:2c:0e:73:80:ee:f7:f8:35:1b:a4:3c:67:37:91:d9:c7:de:
         b2:36:a5:25:20:dc:87:b3:ce:be:a9:09:fd:fb:4b:23:a3:2c:
         4d:6e:71:44:12:03:04:d3:36:e7:c4:d4:c3:49:19:48:90:26:
         01:48:b2:d0:ba:a6:c1:29:7d:5c:50:fc:36:24:fd:15:10:82:
         76:21:85:d0:ca:a4:75:8b:16:b0:c2:73:ad:85:57:e6:5e:21:
         49:7a:06:eb:d5:a4:22:ff:60:f3:26:d4:66:0d:ef:78:c1:ee:
         09:ec:cc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:46:17 2025 by rpki-client