Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b0fa1258-8a40-395c-8ce3-c8a5f01f304f.roa
File:                     b0fa1258-8a40-395c-8ce3-c8a5f01f304f.roa (raw, json)
Hash identifier:          7r2AE/xYv20JjZ96EZt+B3wl98z1LqAokVmvnpbIO4g=
Subject key identifier:   91:37:60:26:AD:A0:E6:BF:67:B6:AE:53:EA:C0:A8:B2:1C:77:78:25
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849F37450A719246AC2BB719F50
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b0fa1258-8a40-395c-8ce3-c8a5f01f304f.roa
Signing time:             Fri 23 May 2025 17:49:37 +0000
ROA not before:           Fri 23 May 2025 17:49:37 +0000
ROA not after:            Thu 21 Aug 2025 17:49:37 +0000
asID:                     49770
IP address blocks:        23.27.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f3:74:50:a7:19:24:6a:c2:bb:71:9f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 23 17:49:37 2025 GMT
            Not After : Aug 21 17:49:37 2025 GMT
        Subject: CN=3634f98c-6ce8-49c9-98f6-5fe5ea887040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:21:f3:16:12:c1:19:58:ff:75:2c:ac:5b:68:
                    54:96:dc:c5:c0:fd:cd:76:f5:6d:e8:9b:78:eb:50:
                    bf:96:1c:f6:25:aa:30:15:20:21:40:12:cb:97:4d:
                    34:11:8c:ba:1d:97:c1:24:8a:cb:69:90:53:71:84:
                    3c:5c:37:9a:65:c9:e9:45:b1:ac:a6:7e:56:6a:1e:
                    84:b2:19:0f:1f:4e:01:50:ce:dc:10:7d:77:f1:1c:
                    c7:14:a0:a9:20:66:1d:35:8d:15:a5:cb:e4:4e:38:
                    d9:19:fc:51:8a:ba:01:17:06:b0:55:66:6b:53:ff:
                    45:6f:f8:f5:d1:3b:da:16:02:77:f8:c6:9d:77:f5:
                    9b:3a:b9:05:b2:df:b9:e6:c8:1d:e2:cd:1e:e2:1c:
                    26:5e:a8:15:b1:de:2d:a0:ca:21:97:47:aa:8f:4e:
                    02:04:9a:28:d6:9f:49:c4:de:eb:23:25:1f:b2:3d:
                    72:f1:72:7a:61:b0:e6:e8:22:dd:89:b0:47:8f:d7:
                    14:15:99:d9:40:1f:6e:f0:01:a3:9e:03:5e:ea:39:
                    c9:ab:0a:70:99:4e:40:bd:86:2b:fd:fd:af:c8:43:
                    9a:ea:f0:d8:d9:ae:50:03:c7:3e:10:ba:65:93:ca:
                    19:e9:ef:85:71:c0:dd:d3:43:a9:03:54:3e:76:54:
                    1c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:37:60:26:AD:A0:E6:BF:67:B6:AE:53:EA:C0:A8:B2:1C:77:78:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b0fa1258-8a40-395c-8ce3-c8a5f01f304f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ff:75:3b:67:dc:d4:6d:c9:d3:c3:db:e8:c0:b7:73:1d:00:
         80:d4:56:d0:83:07:24:e5:91:2a:d9:94:60:ba:c8:1a:f7:1a:
         e5:0b:11:1a:fc:82:67:2b:14:41:a7:d0:26:bd:f5:67:2a:eb:
         95:c7:0a:ef:da:b6:05:f1:ff:31:c5:43:11:07:40:ec:39:cf:
         66:10:3c:fa:53:41:5f:18:a9:28:2d:87:6e:8d:cd:1f:ce:c4:
         01:80:99:a1:83:0c:da:2a:a6:cd:54:d9:2c:64:13:02:76:c1:
         15:ba:03:99:46:36:72:9b:01:9e:b5:00:fb:de:ab:1b:84:26:
         63:03:5f:ff:16:3c:92:67:c6:20:07:25:ce:66:8a:2e:c2:4f:
         52:85:89:87:85:e5:48:42:3e:fb:86:cd:ba:9e:25:d7:7b:c9:
         2e:f7:31:ee:90:ac:c8:a9:c3:8a:ba:38:ae:36:0b:a9:6f:eb:
         34:7c:31:7d:0a:52:10:90:69:20:a5:68:bd:97:74:de:61:35:
         4d:fe:b9:26:65:37:31:48:c4:ba:ad:ae:ff:90:15:08:1b:cf:
         83:68:35:31:06:01:7a:f6:d4:bf:9e:de:71:8a:fa:b8:27:2c:
         26:55:68:bd:ae:16:2d:a8:58:46:72:20:12:0a:d6:54:87:57:
         ce:79:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:09:27 2025 by rpki-client