Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/522a063a-4db5-3fce-b6c8-b147d68cbdda.roa
File:                     522a063a-4db5-3fce-b6c8-b147d68cbdda.roa (raw, json)
Hash identifier:          hJZULmQ6TAiZCBrSzT5oYT+mpWtSEarWWAy2q8v+w/I=
Subject key identifier:   6B:A1:45:2D:90:A1:FA:74:8D:5D:D5:F5:E7:99:0E:4E:2E:0D:1C:17
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A82AB4D8A85F1B6EF9E3B4A40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/522a063a-4db5-3fce-b6c8-b147d68cbdda.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     400402
IP address blocks:        23.27.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:4d:8a:85:f1:b6:ef:9e:3b:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=a778fa4c-3aed-49b9-aebb-35ced1733f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:b6:fa:57:1b:dc:e1:99:b3:27:88:0a:25:
                    ed:dc:e1:b8:66:e6:bc:02:b9:ab:a2:f7:22:d3:49:
                    56:0a:b5:87:e4:c0:0a:a5:a6:e9:a5:b6:9c:77:80:
                    86:3e:cc:bc:7b:b3:fd:24:09:df:15:83:59:5d:3e:
                    bf:05:d1:56:68:3c:aa:9b:42:05:f7:cb:89:d8:e4:
                    64:cd:21:6b:dc:29:92:cb:07:2e:bf:ca:96:ff:92:
                    86:a5:92:16:f1:f8:9c:d1:38:a0:9c:02:45:d4:ae:
                    9c:69:7d:e1:11:73:0e:c3:bf:77:28:d5:91:5b:98:
                    73:be:93:15:b1:85:6a:61:b0:b9:62:4d:6e:85:12:
                    12:9e:b2:31:8b:b1:76:8f:3a:8a:fa:71:07:1b:34:
                    4c:03:5c:92:73:6a:b4:58:cc:8a:a5:e1:fc:60:0e:
                    66:91:e2:d9:06:5d:51:ab:fc:d3:d0:db:c5:02:73:
                    e4:c2:2f:c5:3e:0e:3d:8a:8e:5f:3f:85:c6:28:42:
                    7d:69:73:57:7c:5e:fa:85:b1:a3:d3:b0:7b:84:bf:
                    e2:c9:1b:2f:b6:81:6e:73:75:bc:9e:82:8e:f8:17:
                    b9:68:52:8e:94:e9:2b:b7:78:d2:d6:60:70:08:3e:
                    d7:e7:e0:16:ea:76:48:7f:c6:3b:87:5c:e8:38:72:
                    e1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A1:45:2D:90:A1:FA:74:8D:5D:D5:F5:E7:99:0E:4E:2E:0D:1C:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/522a063a-4db5-3fce-b6c8-b147d68cbdda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:41:2f:fa:d0:a5:3e:0b:bb:30:1c:e4:b8:0f:d6:ef:92:ab:
         06:5a:2b:98:3a:d6:92:61:77:35:6c:a1:49:e9:15:08:44:12:
         2e:44:79:bd:24:0d:02:3b:f1:a0:af:a8:3e:46:79:11:68:52:
         4c:26:63:de:85:14:12:15:5d:67:1c:94:3b:2e:8f:e3:50:22:
         14:8b:c6:47:ca:32:ca:ca:67:45:ca:90:06:9a:f8:55:b8:0e:
         ae:13:5c:39:db:e9:7c:50:5c:13:a3:07:22:ab:04:65:7f:6a:
         64:66:b3:08:5d:b8:da:af:90:6b:7d:67:74:c6:1d:28:19:d6:
         b5:f9:ea:9a:4e:65:ac:a2:5f:c1:25:98:f7:e1:b2:0a:fa:19:
         a8:e1:5a:f5:2b:fc:66:ce:8b:9d:36:ca:78:09:61:96:30:66:
         1d:fb:46:58:f0:f2:75:c6:95:36:f1:a0:cf:5b:7d:97:3f:7b:
         da:ba:e6:c5:fc:88:fa:0e:86:45:45:31:6e:7b:ff:66:d6:cd:
         aa:6b:8c:51:52:c4:ce:e0:c9:28:95:78:d0:24:6e:95:06:0f:
         00:5d:f2:db:6e:70:ab:a9:b1:c7:51:91:de:e5:99:35:dc:3a:
         32:0a:5c:f4:72:96:39:6e:e0:25:e5:04:eb:ca:d4:ab:75:a6:
         87:32:c0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:30:29 2025 by rpki-client