Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7861c935-f996-3819-a71e-0aaea2eea82c.roa
File:                     7861c935-f996-3819-a71e-0aaea2eea82c.roa (raw, json)
Hash identifier:          31XBxGbdblOmrAU1ezFScyD7cwxW9Ga9j1bNv2TKxl4=
Subject key identifier:   77:FE:C8:6A:DC:D2:49:07:9F:B2:E9:00:4E:A6:E1:5A:D1:10:89:ED
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AB7B6369105A44AD61BB96900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7861c935-f996-3819-a71e-0aaea2eea82c.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     7385
IP address blocks:        23.27.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:36:91:05:a4:4a:d6:1b:b9:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=bccd34a8-f13d-42e8-af3d-bbe89b294bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:bb:ef:80:e3:c7:93:b4:e1:48:10:c3:25:
                    63:b2:00:11:7f:cd:40:2d:82:5a:2b:c0:4e:68:bd:
                    57:47:78:0b:e0:09:88:9c:63:11:d7:fb:29:29:5e:
                    8f:e5:ff:7b:aa:49:49:eb:b8:c3:6d:be:70:a0:9c:
                    b4:d2:8a:e4:5d:46:04:de:57:53:83:82:6b:9a:32:
                    dc:8c:11:8e:97:94:61:37:aa:37:ab:a3:74:e5:8f:
                    08:f0:74:73:0e:39:c1:cf:6f:c9:a6:88:d1:77:bc:
                    42:6d:4f:f8:3b:ff:2e:10:38:0d:3c:2c:4b:e9:23:
                    53:6e:78:dc:3e:8c:fe:5b:2d:3b:70:bf:73:d7:31:
                    12:7f:b2:95:4b:c3:bf:b4:82:74:f7:39:c1:0f:8e:
                    ca:dc:86:7a:0a:6f:42:51:95:f3:75:26:05:ed:31:
                    ee:c6:b7:8c:07:60:2c:23:e7:d6:90:73:78:2e:27:
                    07:89:06:c1:6e:4c:1e:70:84:dd:ea:c4:64:f2:ee:
                    4c:12:84:d2:12:2b:2c:8f:1e:a8:d9:43:27:15:66:
                    49:4f:77:ec:6b:13:ea:31:3f:2d:30:9b:eb:a7:eb:
                    cf:aa:16:ce:0f:7c:37:a2:98:97:46:67:56:fc:4c:
                    d2:47:56:7b:14:7b:bf:48:cb:44:46:33:24:98:d8:
                    05:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FE:C8:6A:DC:D2:49:07:9F:B2:E9:00:4E:A6:E1:5A:D1:10:89:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7861c935-f996-3819-a71e-0aaea2eea82c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a0:e2:07:0c:71:31:14:b6:38:ff:76:4c:35:7f:ba:7d:4e:
         1e:77:65:76:5d:12:77:a8:0a:67:05:87:d1:5f:93:d2:c9:c1:
         a0:0f:76:78:d2:b3:7c:90:0f:87:30:cb:de:2b:ec:4e:df:f6:
         ea:8b:12:c8:46:97:d9:f8:93:55:9e:3b:cb:8e:4b:2a:8a:21:
         2f:78:e0:bc:83:ea:1a:2b:60:13:38:84:f9:c2:95:7d:b1:10:
         32:3f:73:62:f3:5f:6b:20:fd:35:70:31:66:01:0d:4f:e4:f0:
         95:01:30:a2:e6:aa:13:c2:73:5d:0c:2a:66:29:85:5d:33:8f:
         95:c3:ac:b6:ca:5d:64:61:66:f7:15:b9:cd:ea:9c:e8:ab:67:
         88:15:00:d9:0b:02:96:af:81:5b:f2:dc:43:1c:d2:56:ab:d4:
         7f:2f:fc:5c:81:68:5c:74:8c:da:df:90:27:dc:a3:13:65:fc:
         f9:86:5e:52:84:c1:1a:e2:ff:4b:3c:55:85:7a:4f:50:cf:7d:
         0b:93:08:30:bd:a8:9e:6e:78:44:43:dd:e5:f8:57:ea:0b:5d:
         42:da:36:be:3a:60:8a:e8:f6:95:51:4c:16:05:6f:96:a0:2c:
         a6:28:c7:b7:d5:90:cf:72:83:29:e7:05:54:f0:2d:54:3d:d4:
         4c:d7:c6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:51:33 2025 by rpki-client