Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf31851a-c3eb-39cf-9ef9-0b79cfa230e1.roa
File:                     bf31851a-c3eb-39cf-9ef9-0b79cfa230e1.roa (raw, json)
Hash identifier:          fhyuBl8rDwiDK/nhs10uZh6syksCVTXkU9juAh4SyXI=
Subject key identifier:   1D:0F:A6:EB:F4:42:BB:9A:B2:E7:CF:90:AA:F9:6F:44:12:67:50:F0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AB7B6366EDA5D6AFC8FE37E50
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf31851a-c3eb-39cf-9ef9-0b79cfa230e1.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     7385
IP address blocks:        23.27.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:36:6e:da:5d:6a:fc:8f:e3:7e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=ae36be9a-afcf-4d40-9353-f13a36f749c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:47:bc:3f:80:86:a4:d2:bd:2b:fe:73:26:ef:
                    cc:6a:3a:f7:94:f9:53:1b:3e:c7:cd:b5:41:f7:57:
                    17:f9:90:6b:eb:3b:39:fd:0e:44:7b:ea:bf:a0:64:
                    30:d1:29:95:7b:29:f6:b5:dd:25:c2:0b:e0:a7:e7:
                    4f:b7:ca:4a:99:e3:a9:3f:e2:6a:94:ea:d7:ec:bd:
                    75:ff:a7:b7:1d:b2:35:b5:2f:f0:90:be:54:b0:c2:
                    c5:70:7f:5f:e9:81:8e:4e:47:19:98:b2:47:4b:27:
                    ff:85:fa:17:37:c6:2d:f3:ff:cc:84:5f:74:e7:2d:
                    cc:cc:f8:58:08:86:bc:41:ff:8a:38:8a:66:75:e3:
                    c3:05:b1:62:9a:b2:c6:6f:1f:f1:d1:f2:79:7a:8e:
                    53:f7:5c:dc:a0:4a:b9:ba:0a:7e:01:20:9f:24:f7:
                    01:a8:52:1f:ed:f5:14:fe:0b:8a:aa:2b:df:05:8f:
                    bc:e3:80:e2:07:f3:ae:84:9d:4c:ad:2b:30:a0:0f:
                    0c:c6:b0:c0:f7:88:ce:bb:11:ff:b7:94:60:f6:4b:
                    4a:62:47:c9:b4:26:3f:e6:ae:41:bf:63:12:73:19:
                    15:25:1a:c6:3a:a9:b8:f3:ae:e4:a7:86:98:af:47:
                    51:38:47:d4:8f:50:20:51:7c:9f:02:86:ee:12:9e:
                    de:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0F:A6:EB:F4:42:BB:9A:B2:E7:CF:90:AA:F9:6F:44:12:67:50:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf31851a-c3eb-39cf-9ef9-0b79cfa230e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:5d:ee:d6:89:72:79:6d:6a:b9:07:2f:36:3a:3f:88:c3:6b:
         bd:fc:d5:f7:82:1a:0b:9b:c5:00:ce:d8:11:69:28:8d:6a:ed:
         c4:f3:0b:17:4e:63:50:4e:76:65:d1:b0:35:93:08:97:d4:6f:
         41:b7:c8:33:7d:34:3f:73:90:26:9a:e8:aa:1e:f5:be:76:74:
         39:62:6b:f1:f0:f2:a5:b9:10:dd:4a:45:05:1d:da:2b:b2:6f:
         8e:04:84:8c:67:7b:8a:b9:e3:b1:a5:ca:d3:78:63:6d:57:8a:
         1c:be:7e:67:54:af:45:eb:5c:4d:de:09:28:89:f6:fa:11:b6:
         c0:04:1f:9c:9f:a5:8a:c9:18:60:af:ee:5f:cd:18:92:a4:1e:
         a4:4e:4f:d0:bf:ef:3a:73:48:d5:da:1f:b4:b6:b6:1c:d2:29:
         e9:a3:4c:75:1a:4d:ed:78:9b:22:16:b1:79:28:67:c8:0a:8e:
         ea:1a:5f:9d:ec:8a:83:ad:18:80:85:c7:6d:57:9d:5b:c8:76:
         4c:c2:94:dc:71:4a:bc:a9:28:95:16:0d:36:3e:fc:ee:0f:ed:
         5d:bc:35:e1:c0:be:2e:77:ef:71:85:d6:dd:49:31:f2:08:a5:
         aa:62:45:87:a7:37:02:fe:92:c1:b6:7b:a3:74:8e:2e:ee:8d:
         22:b7:ad:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:30:59 2025 by rpki-client