Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5acb3e17-f281-32e2-88a7-24f1b9182943.roa
File:                     5acb3e17-f281-32e2-88a7-24f1b9182943.roa (raw, json)
Hash identifier:          UFBLN+U8pq/+mGyrz04vKeGzoTrBLQdvAEJe+5SXCXM=
Subject key identifier:   1A:7C:75:29:E1:D1:3A:02:11:DA:A6:64:48:BB:B5:7E:17:D1:31:9A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849E7BA8AB1131316226BD31B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5acb3e17-f281-32e2-88a7-24f1b9182943.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     149440
IP address blocks:        23.27.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:8a:b1:13:13:16:22:6b:d3:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=866cf832-35b4-4a01-9cfd-a7eae731a638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a8:40:5a:a2:8e:14:77:6a:f7:b4:39:98:a4:
                    d7:39:f5:36:95:83:81:05:b6:9e:92:2d:73:be:a0:
                    2d:dd:ac:12:73:fb:3e:3c:86:fe:c0:fd:59:93:41:
                    ba:e2:7d:5e:b8:d9:b5:f5:eb:65:4f:c2:b7:29:bc:
                    ab:91:e6:87:ce:10:c9:50:18:84:2f:fc:b5:21:08:
                    a0:66:bf:a7:c4:55:a0:2b:0b:e3:5b:cf:2f:cb:8e:
                    df:87:92:2d:f8:f6:ec:44:0f:71:9a:b6:48:a6:7d:
                    92:36:be:2d:51:e2:2b:32:66:38:02:8d:21:46:de:
                    9f:90:66:1a:ee:27:dc:1f:18:e4:4d:e2:2d:51:e7:
                    0c:6f:fe:41:3e:5c:9e:e7:0c:a5:b4:f2:72:3b:0a:
                    c2:39:2a:bb:56:6d:76:1d:4f:8f:62:9d:65:d5:17:
                    35:fc:ca:8c:0e:5c:65:8b:55:d7:86:6c:08:79:37:
                    7f:cf:79:4b:b1:5c:3b:e4:ce:da:5c:9a:eb:ce:11:
                    f7:78:61:58:70:e8:4d:b6:0e:09:39:4e:9c:d0:2d:
                    12:f7:c2:1b:e4:1f:aa:74:de:ea:4f:64:88:55:9d:
                    08:45:01:a4:7c:50:cf:a7:d4:14:c8:8e:fb:cb:a0:
                    d1:e2:4a:38:d7:3a:7c:21:ee:5e:1d:4d:4e:59:96:
                    36:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7C:75:29:E1:D1:3A:02:11:DA:A6:64:48:BB:B5:7E:17:D1:31:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5acb3e17-f281-32e2-88a7-24f1b9182943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:27:fb:3e:26:80:76:df:a2:69:1a:fd:94:3c:b3:f8:1c:3c:
         a2:1d:2a:88:f7:e0:5e:82:b2:19:ac:ab:9e:f0:fe:a6:bb:e8:
         5d:c7:12:8f:7f:b9:17:b7:98:56:c6:51:87:4c:50:3e:d2:05:
         37:aa:ff:89:96:fe:6a:52:71:b9:08:75:73:3c:39:5b:b4:0a:
         10:0b:e2:52:4c:33:0b:30:be:aa:8c:f3:70:a4:14:41:9f:39:
         4a:0a:82:ef:ef:43:13:17:30:fb:cf:34:dc:aa:f9:65:5a:bc:
         f6:ca:a8:28:dd:6f:75:62:fa:cd:7b:07:4d:55:d8:f8:bb:25:
         d6:86:60:35:ae:e8:ec:e1:96:70:56:a1:ca:c3:aa:56:08:fb:
         37:de:e9:b0:1c:3e:d0:10:0a:9a:e7:f9:26:44:b7:93:3a:85:
         6f:31:d7:8f:b6:39:f2:31:3a:08:f7:0b:8c:de:f2:05:12:fe:
         15:e9:0c:71:b6:bf:b4:e0:9d:ad:9c:85:06:9d:16:ce:93:68:
         a1:50:88:95:b7:2d:87:5e:68:af:79:66:9a:23:1d:90:a7:97:
         7e:79:ce:d7:be:cd:e3:4c:f2:03:80:0e:25:7d:ca:f3:ba:da:
         1e:17:e9:f3:ed:84:62:7e:65:07:18:61:23:c6:3e:47:4e:83:
         b0:7e:49:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:04:43 2025 by rpki-client