Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7ccda48-416d-3760-b320-7fadc4b22530.roa
File:                     a7ccda48-416d-3760-b320-7fadc4b22530.roa (raw, json)
Hash identifier:          xcHr3/e/vY6PyFzOF22O2SShlef7Vzm6jqpVUjTH78w=
Subject key identifier:   BE:38:E8:DD:0C:02:25:67:62:97:8F:9D:AA:70:78:59:47:AF:EF:18
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A093AA47C7615B36137481B00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7ccda48-416d-3760-b320-7fadc4b22530.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     149440
IP address blocks:        23.27.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a4:7c:76:15:b3:61:37:48:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=f1d8cda3-9134-4115-b2d9-81593a575ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:61:4e:3d:35:66:52:30:f7:b2:8d:f7:8c:18:
                    8a:3d:ca:bd:f5:37:46:97:dc:e1:54:0d:ef:48:cb:
                    08:4b:ba:91:04:56:7b:56:40:ac:a2:af:bc:42:fc:
                    8c:46:9b:9e:37:e3:7e:31:34:0a:79:c1:ca:dd:49:
                    38:2e:af:4b:22:73:6d:63:25:01:e6:b9:04:fc:80:
                    95:ab:7b:32:bf:2d:6f:5e:25:20:30:95:6f:31:ef:
                    3e:0e:e9:c5:56:07:1e:dd:c3:af:51:1d:b7:29:12:
                    3d:0f:36:96:a3:bd:1c:d8:0d:78:3a:3b:fa:a5:38:
                    64:eb:32:49:e3:a1:a5:e7:2c:1d:cc:f9:21:70:ca:
                    c6:09:96:e7:4f:dd:14:57:b6:cc:a6:56:cc:3f:6e:
                    e8:7d:08:ef:8f:b8:07:8f:50:b9:85:32:36:a2:91:
                    1d:25:a6:4f:75:39:f1:72:50:91:e0:71:bc:f1:d9:
                    45:e7:e6:fa:ca:0f:94:7a:3c:3d:47:7f:c4:2d:5b:
                    35:7e:01:85:b6:66:4f:a1:9e:26:07:ed:f0:da:f2:
                    f3:25:19:72:fb:c2:7f:87:d8:c9:81:04:d4:c4:d0:
                    c3:a7:26:c3:c1:50:0b:40:79:b9:f5:b2:62:db:15:
                    ff:dd:ac:bb:52:77:36:73:bc:dd:ac:60:85:be:06:
                    b9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:38:E8:DD:0C:02:25:67:62:97:8F:9D:AA:70:78:59:47:AF:EF:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7ccda48-416d-3760-b320-7fadc4b22530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:1f:2f:97:6f:5f:ff:c4:cc:11:15:84:d3:14:b7:7c:e3:4f:
         e7:05:65:0a:dd:29:e9:d0:70:dd:27:2b:c8:0c:39:35:a5:d5:
         af:2d:49:32:ff:84:c3:6e:04:ae:bd:30:df:d6:60:89:f3:0d:
         44:50:66:cb:ee:aa:f2:90:0b:00:69:00:bd:a6:d1:09:a0:37:
         65:da:8d:67:20:54:b1:2d:04:ec:95:99:f8:a8:cf:74:71:3c:
         c2:74:8c:c3:bc:56:a3:05:fa:02:15:8d:b8:3a:3a:0a:fe:4a:
         e7:68:c4:3a:ce:5b:18:74:66:0f:a3:15:e8:e8:a5:b8:ec:68:
         8e:2f:e0:3a:c1:fd:48:c4:51:3f:aa:48:c6:72:72:4d:bb:ec:
         5c:25:1d:14:a7:fa:84:9d:6f:b5:26:c1:b3:33:58:2a:39:25:
         99:58:7e:65:e5:83:73:33:a5:3e:ce:c1:77:52:6b:a3:6f:0d:
         a8:49:12:05:03:b8:a6:d0:fa:84:ee:d6:bb:e8:f0:d3:e0:a6:
         0b:35:66:5d:3e:d7:88:0d:0e:00:99:ce:e9:42:19:7f:cc:b5:
         33:19:6f:f2:e3:a8:66:55:db:9d:a0:f2:a5:5a:7b:e0:cd:d5:
         27:6c:90:2c:99:05:be:2c:03:b2:49:72:a5:33:33:ec:52:da:
         a5:66:5f:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOqR8dhWzYTdIGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk
ZjFkOGNkYTMtOTEzNC00MTE1LWIyZDktODE1OTNhNTc1Y2UxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2FOPTVmUjD3so33jBiKPcq99TdGl9zhVA3v
SMsIS7qRBFZ7VkCsoq+8QvyMRpueN+N+MTQKecHK3Uk4Lq9LInNtYyUB5rkE/ICV
q3syvy1vXiUgMJVvMe8+DunFVgce3cOvUR23KRI9DzaWo70c2A14Ojv6pThk6zJJ
46Gl5ywdzPkhcMrGCZbnT90UV7bMplbMP27ofQjvj7gHj1C5hTI2opEdJaZPdTnx
clCR4HG88dlF5+b6yg+Uejw9R3/ELVs1fgGFtmZPoZ4mB+3w2vLzJRly+8J/h9jJ
gQTUxNDDpybDwVALQHm59bJi2xX/3ay7Unc2c7zdrGCFvga5qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL446N0MAiVnYpePnapweFlHr+8YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTdjY2RhNDgtNDE2ZC0z
NzYwLWIzMjAtN2ZhZGM0YjIyNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJsfL5dvX//EzBEVhNMUt3zjT+cFZQrdKenQcN0nK8gMOTWl1a8tSTL/
hMNuBK69MN/WYInzDURQZsvuqvKQCwBpAL2m0QmgN2XajWcgVLEtBOyVmfioz3Rx
PMJ0jMO8VqMF+gIVjbg6Ogr+SudoxDrOWxh0Zg+jFejopbjsaI4v4DrB/UjEUT+q
SMZyck277FwlHRSn+oSdb7UmwbMzWCo5JZlYfmXlg3MzpT7OwXdSa6NvDahJEgUD
uKbQ+oTu1rvo8NPgpgs1Zl0+14gNDgCZzulCGX/MtTMZb/LjqGZV252g8qVae+DN
1SdskCyZBb4sA7JJcqUzM+xS2qVmX7s=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:41:11 2025 by rpki-client