Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa
File:                     b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa (raw, json)
Hash identifier:          qZOxHQZFYaOW4GhkZwRo1rY5avTglkjAOl/0Bu+VD0Y=
Subject key identifier:   D1:DF:0A:5C:ED:FA:79:67:00:DE:CB:B3:F0:4D:2C:2C:76:CC:A8:E4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584ABBE633A01AEEF4D2C31F4120
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     134351
IP address blocks:        23.27.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:33:a0:1a:ee:f4:d2:c3:1f:41:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=73892fde-3279-4ff8-adb6-8cde59ff1c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:83:da:bd:1d:76:55:68:bf:a8:38:42:19:
                    99:88:4b:55:9f:31:30:a1:e0:e6:99:0f:c3:d5:c4:
                    50:81:ad:8d:d0:c3:e6:d9:52:d2:f3:48:19:f7:a3:
                    41:c2:79:fb:de:68:40:b3:ba:3e:5a:65:ea:1c:7e:
                    04:d4:0d:f2:3a:65:47:e7:aa:b8:d2:fd:d6:e5:20:
                    bf:3c:bd:4b:17:85:c0:09:b8:09:20:25:b4:e6:43:
                    0b:a1:0a:6c:96:4b:d5:69:48:0f:d0:08:9c:61:4f:
                    74:ef:11:14:2c:09:16:03:1d:1d:91:c0:28:d7:74:
                    65:bf:77:96:88:38:b1:a3:ba:91:10:d1:d2:be:7a:
                    e5:e8:1e:64:a9:7c:aa:40:67:5d:76:f5:fe:df:a2:
                    7b:0a:25:0c:ed:3c:04:6a:37:79:f6:3f:69:b8:1a:
                    a8:07:52:17:95:bf:56:ec:35:fb:0b:b2:b2:16:06:
                    f3:68:81:5e:ba:27:2e:18:68:e1:2d:d2:e2:8f:af:
                    12:14:4a:c6:8b:08:44:10:a8:ed:c7:11:23:e2:a1:
                    a7:b3:3e:97:40:ea:99:c6:5b:4b:77:1d:3d:08:bf:
                    ec:6f:0d:d8:2b:61:d8:8c:2e:44:4a:3c:8c:44:59:
                    cd:6d:91:f2:6f:15:0a:91:c7:57:50:c0:f0:13:1c:
                    21:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DF:0A:5C:ED:FA:79:67:00:DE:CB:B3:F0:4D:2C:2C:76:CC:A8:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:57:ea:ea:0b:6d:ab:f1:5a:90:5b:15:f0:b5:fa:18:67:28:
         34:9e:31:4a:7d:90:2b:66:ab:c7:f7:c9:7f:82:ae:86:ce:3f:
         fe:34:ac:38:83:ab:5d:46:d3:de:26:1c:67:a0:7b:5b:b5:d7:
         ad:4d:69:71:c9:85:3e:ed:79:85:45:99:63:75:1f:fb:8a:67:
         2d:83:cb:a2:f5:14:48:85:81:c6:11:c2:25:8b:a6:35:80:48:
         29:0e:0b:ff:b1:49:d8:f6:dc:43:7c:83:1b:0b:d6:c1:51:fd:
         9b:1b:b4:d9:62:95:7f:02:a0:85:09:14:c9:a4:53:ac:0b:f4:
         e3:9e:1f:00:d7:1b:62:39:1e:35:06:36:ea:42:f4:eb:75:8e:
         16:45:fd:ec:c3:0c:31:26:63:34:95:e7:3b:65:d3:cf:9d:86:
         c7:2c:a2:03:75:a4:ca:48:30:f7:a3:0f:6d:ea:88:37:c5:b6:
         e3:4c:92:9e:bd:70:01:ca:51:e9:23:a7:a8:bb:b5:12:2b:ab:
         ce:69:8d:d1:fb:b4:d5:66:0d:bb:ce:6f:04:25:0e:6d:42:cf:
         67:25:01:f5:38:29:ad:1f:79:83:38:48:78:56:3a:6c:33:33:
         2a:11:40:27:12:f8:47:e9:1e:d6:65:ec:7f:4b:7f:79:bd:cb:
         91:de:d2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:12:44 2025 by rpki-client