Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5e12a8bd-3e9c-3f9d-8daa-89096162d12c.roa
File:                     5e12a8bd-3e9c-3f9d-8daa-89096162d12c.roa (raw, json)
Hash identifier:          OQix78N65LgibF2eeV2JiPCDZQ3qM2ndnbzTVtawgz4=
Subject key identifier:   6B:2B:BC:D9:A9:CF:D2:BD:CC:EB:D5:8F:08:4E:AC:3D:38:CA:F1:D9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B98723A1DEDC8485ACE8BDB00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5e12a8bd-3e9c-3f9d-8daa-89096162d12c.roa
Signing time:             Tue 21 Oct 2025 13:00:39 +0000
ROA not before:           Tue 21 Oct 2025 13:00:39 +0000
ROA not after:            Mon 19 Jan 2026 14:00:39 +0000
asID:                     7385
IP address blocks:        23.27.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:72:3a:1d:ed:c8:48:5a:ce:8b:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 21 13:00:39 2025 GMT
            Not After : Jan 19 14:00:39 2026 GMT
        Subject: CN=bae611b7-6690-49fd-8ac1-7a2939e545b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0a:31:4c:71:2a:b0:fe:fb:2a:f9:68:34:62:
                    0b:47:13:18:0c:e0:71:2c:a3:5f:cd:0e:c5:27:2c:
                    e6:63:0f:03:8d:6a:1d:85:46:a5:9f:dc:b6:56:45:
                    a6:d9:f9:82:e3:06:dd:ad:ea:d4:88:d9:ec:ad:fe:
                    f9:b0:f5:36:8c:39:04:f3:ec:94:9d:78:ff:af:75:
                    6c:58:61:8a:a1:ed:5d:d2:5c:0d:d4:c9:87:d8:d9:
                    ee:33:ad:b6:eb:95:16:15:b9:ce:c5:7b:de:a7:7b:
                    a4:01:bd:fd:ef:d7:22:b3:89:7d:c9:3c:31:6d:47:
                    be:51:9e:d6:39:96:8e:a0:e6:b0:be:50:a2:54:b1:
                    ec:cd:b1:ed:19:6c:46:1c:d8:fb:3a:9a:c6:21:85:
                    e2:58:db:cd:8e:f1:d4:17:1b:88:01:db:b3:fa:49:
                    9a:4d:fc:c3:57:65:43:66:44:40:09:85:35:ec:f6:
                    3f:b6:f6:0a:0a:f6:ca:8b:ee:16:a6:14:65:2a:c6:
                    85:7e:42:15:d8:d4:46:82:57:bd:63:b3:7a:39:4f:
                    75:d3:7c:8f:ce:a3:04:d2:6e:2f:6f:d5:b2:a4:5c:
                    e4:69:41:8c:ab:40:6e:5b:6e:f8:50:52:31:00:0b:
                    2d:45:9f:79:ac:6f:6c:0a:36:1e:8d:de:4b:60:29:
                    82:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2B:BC:D9:A9:CF:D2:BD:CC:EB:D5:8F:08:4E:AC:3D:38:CA:F1:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5e12a8bd-3e9c-3f9d-8daa-89096162d12c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:26:e1:9d:98:09:33:a6:1a:8b:90:cd:28:e7:45:4e:c6:fb:
         28:73:d8:41:0c:12:3d:34:1e:bd:c1:ad:4b:7d:ad:86:e3:6a:
         d8:e5:9d:90:18:5e:da:1a:b9:67:b8:2b:72:b2:38:a1:53:c3:
         9b:e5:00:2f:20:0c:ac:4c:78:bf:7a:83:be:5f:0d:85:30:ff:
         ea:b0:68:58:f5:f0:b1:b0:16:11:26:c9:ed:81:12:1b:9e:76:
         47:3f:3a:19:7c:8b:83:94:e7:ac:61:74:0d:15:42:fc:de:29:
         69:6f:fe:11:a1:32:0f:a3:02:d6:25:2b:4e:15:de:ad:02:40:
         37:f9:5a:df:21:16:a4:c0:e7:d6:8e:4d:64:01:90:4b:ee:ce:
         08:64:2c:e3:60:3e:35:9a:ca:45:26:14:85:16:69:01:3c:6a:
         6e:18:69:53:4b:8b:f2:30:1c:81:39:1c:d7:f1:05:50:32:17:
         b5:c9:bd:95:c9:f3:87:09:0c:60:6f:26:dc:05:5e:1f:66:2e:
         af:c6:f9:2e:17:4f:36:bb:8c:25:eb:45:28:71:79:d6:5f:60:
         a7:df:ff:d5:64:9a:8e:4c:1f:1f:ea:91:c7:12:75:a0:6b:67:
         ca:76:6a:41:ce:cb:c0:c5:fb:eb:97:2a:09:bd:dd:ef:81:f4:
         59:4e:14:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:03:18 2025 by rpki-client