Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa
File:                     b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa (raw, json)
Hash identifier:          BoRwTXBKZYBIOfc6mB/L4J9n2IKP31ebqH6BA76m37M=
Subject key identifier:   7F:34:BC:5C:9F:FD:F8:F0:3D:CF:1D:19:FD:FC:86:B0:C6:AD:72:B7
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849DB2A3140A430C6C3B093E240
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     134351
IP address blocks:        23.27.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:31:40:a4:30:c6:c3:b0:93:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=9276fc0a-6481-45e7-afd8-c8c5f7ed1aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:a7:50:0e:d7:97:1a:aa:e8:5e:ce:c6:93:
                    35:b8:29:66:38:7e:b6:22:d9:76:d1:80:18:2b:06:
                    ce:07:92:3a:99:63:72:6a:25:56:4d:96:ae:cd:28:
                    5a:9f:fb:d7:03:af:f5:77:61:57:a6:92:05:37:be:
                    b5:2f:6d:5a:f5:d4:d3:dc:0f:08:b4:1c:27:97:59:
                    a0:94:59:da:d1:4c:cf:ab:26:dd:91:62:bd:64:1a:
                    bc:2c:74:fc:23:ae:19:24:8a:ae:1c:7d:88:33:e6:
                    fd:6f:fd:75:c0:0d:f5:85:14:d5:30:84:9f:29:24:
                    71:1c:10:d4:03:5f:72:05:5d:46:d6:7f:a3:91:93:
                    e7:a0:50:bb:87:84:3d:f5:1a:f3:bf:ac:30:75:93:
                    0b:ef:8e:4d:66:9d:50:e1:be:5c:3e:bf:2c:4c:71:
                    69:38:eb:82:04:79:0c:ab:bb:89:e2:f4:e6:54:14:
                    26:d3:e4:2f:60:f4:c3:c6:30:61:84:21:d4:de:ce:
                    b1:8b:87:46:65:fe:d9:28:47:ad:61:f8:bf:ab:b9:
                    5a:01:0e:da:e9:11:80:fd:9b:86:6d:72:2f:41:e8:
                    08:39:17:a5:b2:5b:14:78:8b:a4:05:16:cb:28:24:
                    dd:fa:a4:2d:2f:c7:cf:40:ef:8f:df:1f:88:8a:6f:
                    89:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:34:BC:5C:9F:FD:F8:F0:3D:CF:1D:19:FD:FC:86:B0:C6:AD:72:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8d:4a:6e:78:bc:1e:09:30:67:3b:9a:3b:15:78:6f:bc:44:
         1e:1a:9b:b8:e2:26:86:d6:a7:62:1b:e0:aa:44:fe:11:20:1b:
         92:1b:4a:5d:fc:ff:36:e2:29:46:6b:2e:f3:63:00:3e:29:af:
         6c:7d:49:42:db:da:44:65:96:b3:a9:2a:7c:df:ad:72:72:a6:
         5d:46:6b:d0:cb:f2:18:ff:23:6f:b0:90:f0:6f:67:1b:b3:cb:
         f4:89:b4:e9:71:75:43:f8:cd:af:6d:4f:a0:95:74:e5:8e:3d:
         87:fe:5f:f4:a2:d0:fd:38:99:cb:ef:83:e4:0f:44:1c:68:ca:
         2b:82:3e:fb:68:e8:9e:17:1f:15:31:79:8a:26:27:80:f8:4e:
         26:5d:32:95:5b:b0:a8:ea:d7:68:b4:37:75:41:fa:7b:31:e3:
         2e:f4:15:17:9a:a8:2e:9d:9f:ad:1f:54:97:93:31:8e:54:56:
         fb:58:d7:a7:37:26:cb:e3:5b:82:92:1d:ff:43:69:e2:7e:7d:
         6e:fc:31:25:11:87:44:bf:98:6c:07:88:a2:36:67:93:c8:71:
         1c:3c:35:2e:0d:8f:13:36:a6:23:15:0a:3f:fe:95:95:28:b6:
         e2:fb:61:7c:b7:38:fb:6b:01:4d:70:6b:42:47:6d:2e:9c:6a:
         d5:23:0a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:12:14 2025 by rpki-client