Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/98a1b54b-c7dc-3a5c-960c-58f82cf67455.roa
File:                     98a1b54b-c7dc-3a5c-960c-58f82cf67455.roa (raw, json)
Hash identifier:          Rp6asZEsHKxBQbRn740tRBvc4uKXZgktx+CWY/jFJhU=
Subject key identifier:   A5:A5:52:34:68:21:37:71:AE:09:E1:94:45:F8:7C:06:00:E8:D2:BE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849D4312AB23729F435F7AF6100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/98a1b54b-c7dc-3a5c-960c-58f82cf67455.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     149440
IP address blocks:        23.27.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:2a:b2:37:29:f4:35:f7:af:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=17e86204-40ab-4f56-bf69-1cb66cf4e678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4b:55:fb:63:c7:b3:f2:75:85:91:78:ec:9f:
                    0e:74:46:be:58:c9:e4:cc:67:51:49:de:5a:65:8f:
                    ae:0b:92:39:0e:2e:f9:69:8c:aa:94:fc:fb:b2:dc:
                    09:8a:15:dd:22:53:5d:13:42:2c:9f:2c:dc:40:0a:
                    15:9a:91:57:36:c7:5e:07:2b:45:72:ab:83:0b:aa:
                    32:71:93:be:32:04:b1:f0:7d:6a:ed:41:04:02:b6:
                    96:af:e2:42:d7:63:2e:a6:8d:bd:8d:a1:83:19:35:
                    24:2d:26:15:d8:08:b7:38:2c:34:fd:c5:18:f9:3c:
                    54:f8:fe:c3:8e:ed:01:86:74:5c:22:be:cc:c6:94:
                    1f:ed:70:62:a2:ee:b2:04:3f:08:b2:c1:06:f0:c3:
                    4a:54:aa:16:63:10:58:9c:ed:fb:89:73:a6:5c:eb:
                    ec:e2:28:09:e6:e2:f5:a4:7a:76:73:6d:96:ad:df:
                    2e:fb:96:6f:1a:06:8e:0c:95:87:17:9e:b2:a1:09:
                    c1:44:53:cc:75:d2:c3:9b:fd:38:19:95:1a:24:d7:
                    e5:68:55:d8:cd:a2:fe:a6:7a:33:9d:ba:d2:93:4a:
                    e0:78:81:e8:c7:9b:9e:3d:4d:21:db:9e:7f:24:38:
                    af:cb:6c:59:b5:35:51:b6:86:29:bc:cb:d1:17:e8:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A5:52:34:68:21:37:71:AE:09:E1:94:45:F8:7C:06:00:E8:D2:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/98a1b54b-c7dc-3a5c-960c-58f82cf67455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:36:66:c1:af:40:9f:00:c2:ba:9c:db:5a:d4:f9:68:29:ef:
         7a:8f:4b:aa:e6:bd:14:23:53:b0:95:1b:58:80:b5:db:ea:8f:
         18:9d:0a:ed:b8:39:2a:29:f8:3f:74:aa:f3:07:bd:6c:45:9d:
         64:0e:3a:17:f7:67:32:e9:cc:54:39:96:5c:6e:96:41:51:1c:
         45:5d:cd:88:ed:2e:eb:42:03:85:54:6e:6f:83:69:4c:22:d3:
         24:f1:0d:20:ad:d6:5b:c4:20:12:88:ad:9f:3b:bd:0e:e4:d7:
         46:c4:df:a0:65:ad:e4:b9:c1:b9:4d:52:56:77:69:3a:80:d8:
         6b:e0:00:65:21:b7:f0:33:6a:59:49:dd:c3:42:9d:48:df:37:
         25:64:fe:9b:9a:36:ab:47:a5:46:a6:d6:0b:c0:7e:f1:17:cb:
         a7:59:f7:7c:88:75:d0:11:a8:5e:9f:83:8b:78:8f:0b:7a:59:
         a7:d6:04:59:1a:ce:e0:ca:de:fb:87:28:9b:a2:fe:6b:e8:0a:
         d8:10:18:80:42:4d:de:0d:0c:f3:bd:26:5a:8d:dd:05:ce:07:
         51:68:f0:d7:1b:5a:8f:35:32:34:04:24:03:92:18:b7:69:76:
         35:55:4a:f2:21:4e:07:f5:ab:ef:92:08:de:6a:35:a1:48:ae:
         cf:bb:b2:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMSqyNyn0NfevYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MTdlODYyMDQtNDBhYi00ZjU2LWJmNjktMWNiNjZjZjRlNjc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgktV+2PHs/J1hZF47J8OdEa+WMnkzGdRSd5a
ZY+uC5I5Di75aYyqlPz7stwJihXdIlNdE0IsnyzcQAoVmpFXNsdeBytFcquDC6oy
cZO+MgSx8H1q7UEEAraWr+JC12Mupo29jaGDGTUkLSYV2Ai3OCw0/cUY+TxU+P7D
ju0BhnRcIr7MxpQf7XBiou6yBD8IssEG8MNKVKoWYxBYnO37iXOmXOvs4igJ5uL1
pHp2c22Wrd8u+5ZvGgaODJWHF56yoQnBRFPMddLDm/04GZUaJNflaFXYzaL+pnoz
nbrSk0rgeIHox5uePU0h255/JDivy2xZtTVRtoYpvMvRF+hl/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKWlUjRoITdxrgnhlEX4fAYA6NK+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOThhMWI1NGItYzdkYy0z
YTVjLTk2MGMtNThmODJjZjY3NDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxt7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFA2ZsGvQJ8Awrqc21rU+Wgp73qPS6rmvRQjU7CVG1iAtdvqjxidCu24
OSop+D90qvMHvWxFnWQOOhf3ZzLpzFQ5llxulkFRHEVdzYjtLutCA4VUbm+DaUwi
0yTxDSCt1lvEIBKIrZ87vQ7k10bE36BlreS5wblNUlZ3aTqA2GvgAGUht/AzallJ
3cNCnUjfNyVk/puaNqtHpUam1gvAfvEXy6dZ93yIddARqF6fg4t4jwt6WafWBFka
zuDK3vuHKJui/mvoCtgQGIBCTd4NDPO9JlqN3QXOB1Fo8NcbWo81MjQEJAOSGLdp
djVVSvIhTgf1q++SCN5qNaFIrs+7sus=
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:52:13 2025 by rpki-client