Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c5b4441f-3c04-3891-9309-9751fee4f813.roa
File:                     c5b4441f-3c04-3891-9309-9751fee4f813.roa (raw, json)
Hash identifier:          zTraT8JGaesi4rgniOFPs6axLlJGRGNMxXR9Rqtse0Y=
Subject key identifier:   D3:E8:99:13:08:84:03:A5:09:96:79:7F:37:09:68:6D:98:9A:32:2D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A94D0E675B4605E6A464BB600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c5b4441f-3c04-3891-9309-9751fee4f813.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     7018
IP address blocks:        23.27.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:e6:75:b4:60:5e:6a:46:4b:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=214a2363-9de1-4c77-a16a-5efef6d38016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:71:f5:f0:65:6d:8f:ba:b7:f6:33:c5:9b:24:
                    e6:ec:06:a6:1a:13:d7:e9:f4:50:f8:e3:48:b7:eb:
                    36:18:a0:33:23:74:a6:6a:98:6e:51:67:11:dc:36:
                    e7:24:3f:52:0b:85:bf:79:51:28:ab:14:d2:5e:8c:
                    1b:b6:a1:74:04:85:1f:34:df:64:d5:11:d0:a5:f7:
                    df:dd:30:1b:9d:91:60:5d:c4:7d:55:15:13:02:85:
                    6e:15:95:cc:3b:29:1f:a2:ac:f8:6f:98:e7:d4:96:
                    f8:ae:31:ec:97:61:61:bd:ea:e5:f6:15:9f:94:ea:
                    4b:3d:2f:7a:44:a9:a7:de:5d:a9:74:24:6e:4b:3f:
                    79:2c:b5:e7:84:c0:3f:75:57:4e:3c:ac:88:84:2e:
                    91:33:47:32:e5:89:b9:89:a9:6a:ca:ff:db:1e:6c:
                    55:42:50:db:dc:29:68:0c:9c:49:10:16:02:d8:b9:
                    d0:42:95:02:c0:63:c6:29:70:c7:6e:bc:16:48:9e:
                    ce:da:95:64:4b:64:e0:ac:f4:50:1e:94:84:0b:6f:
                    41:26:37:0b:f6:62:bb:94:c4:87:8b:d5:69:75:0e:
                    c3:9b:07:fc:6c:01:1c:69:9a:fc:4c:3a:96:50:b8:
                    1f:ce:af:56:48:cd:c9:f8:43:b0:76:5f:16:54:2d:
                    86:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E8:99:13:08:84:03:A5:09:96:79:7F:37:09:68:6D:98:9A:32:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c5b4441f-3c04-3891-9309-9751fee4f813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e3:1c:de:d9:34:ac:96:ea:2e:33:76:bf:cc:35:47:af:a2:
         9f:f8:66:9d:2a:3b:62:eb:67:24:1f:90:7a:8a:d4:9a:49:c1:
         89:b6:0f:c3:27:98:f2:bb:f3:fe:ac:5f:b0:ac:cd:88:ba:d0:
         00:50:ea:99:03:e7:34:eb:75:2a:a7:7d:aa:bf:ad:4a:09:f0:
         7b:24:21:52:1f:27:0b:1e:fa:75:e8:dd:69:eb:a8:b1:8f:2a:
         dc:27:43:55:4d:5d:a7:04:42:84:04:47:c1:f5:1f:b6:cf:65:
         5c:e7:fc:a7:8b:9b:26:0b:03:91:3c:81:b8:ce:64:4e:25:49:
         5a:aa:e3:bc:56:61:20:85:a8:0e:a2:87:14:02:5b:fd:51:61:
         fc:ea:47:49:b6:5f:da:e1:fa:d8:52:4f:3c:37:18:e1:9a:1f:
         ae:52:52:24:82:de:23:e5:09:6c:e0:04:62:a7:42:2e:32:bb:
         e0:4d:ae:71:36:f7:51:46:56:75:a1:33:ea:0b:99:8e:fd:1c:
         6e:dc:56:74:b3:72:ac:47:bf:15:76:8b:1b:bf:e8:8c:30:09:
         8f:c4:8e:85:fa:6f:0c:ef:6a:8b:ba:26:da:a0:3e:76:a4:4f:
         24:b9:af:a5:40:99:9b:c0:67:09:f2:84:d4:cf:28:46:27:2e:
         c9:08:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:53:03 2025 by rpki-client