Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9771656-2e9b-3098-92d1-4eedc5def83d.roa
File:                     c9771656-2e9b-3098-92d1-4eedc5def83d.roa (raw, json)
Hash identifier:          xtECaOmUboIYmaVScN5lidYptrR4yp6Pd/XsFP2xv8g=
Subject key identifier:   1D:82:ED:24:63:8C:B2:9C:D5:68:B3:0A:62:A7:EF:DB:BF:49:33:14
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A2EEAC5A438327D4305BB5618
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9771656-2e9b-3098-92d1-4eedc5def83d.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     8881
IP address blocks:        23.27.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:c5:a4:38:32:7d:43:05:bb:56:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=ecfd43e9-cc64-4072-8475-2401926e201b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:de:5c:a3:5a:6c:ce:0d:56:d6:b6:8f:cc:6c:
                    5a:e6:1c:d7:87:67:09:4d:8f:21:64:87:6a:95:c4:
                    27:10:e4:f1:f6:03:ee:6e:1f:08:67:05:99:c6:5a:
                    44:a3:e1:30:39:de:15:42:2f:94:d6:0b:db:b4:76:
                    28:0d:ea:f5:8e:65:84:48:27:6c:31:e1:f5:7c:9f:
                    23:84:e1:54:35:1f:f6:05:f5:0f:50:9a:9c:c0:1d:
                    fe:a9:b2:53:6e:f0:48:d2:5e:80:d0:05:6d:85:ff:
                    ce:7a:3c:a5:80:40:88:28:92:5d:56:76:0a:8d:8b:
                    42:55:69:be:49:44:57:52:72:0c:ff:ce:69:f4:e5:
                    4f:bf:25:a1:34:a2:8e:95:28:2d:01:bc:d5:b3:24:
                    03:d4:60:0e:00:73:95:6a:bc:e5:ed:ad:b2:5d:d6:
                    76:bf:8e:c0:0f:c2:aa:9d:49:cf:ce:f4:88:4e:cc:
                    53:48:0a:77:69:ae:ea:22:63:0f:9e:85:34:34:77:
                    cc:b0:2d:a3:56:31:9d:0a:3c:e0:44:45:c6:bf:de:
                    e5:1f:4a:89:6e:ef:e3:c0:cd:12:ec:98:d8:78:0b:
                    05:a7:69:1d:19:73:5e:8d:9d:80:2a:77:f9:fe:f8:
                    24:9e:89:e9:b1:e0:73:c8:3d:71:22:6a:42:9c:0e:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:82:ED:24:63:8C:B2:9C:D5:68:B3:0A:62:A7:EF:DB:BF:49:33:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9771656-2e9b-3098-92d1-4eedc5def83d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:52:13:57:0e:dc:08:d2:7a:58:1e:0f:65:1c:a4:01:0e:03:
         27:d7:ea:ae:25:52:35:0a:48:19:3c:a4:23:20:14:6a:ef:1d:
         dc:b6:bf:b6:76:f3:d2:45:6b:3a:41:3a:10:76:30:21:a7:63:
         25:5a:19:c5:2e:f8:fd:07:d1:eb:a0:4e:1e:29:77:63:53:b7:
         93:1a:20:19:73:03:c9:93:f2:1f:a8:84:18:c9:a9:58:09:06:
         72:1c:bb:c3:8a:cc:3c:cc:b6:3f:c6:4c:4a:ff:90:6a:c9:91:
         75:3e:d1:d6:a5:38:bb:ea:59:09:20:31:78:9a:1c:4e:10:05:
         55:86:10:fc:36:fe:85:08:4a:fe:ad:c6:a5:87:fb:8e:ea:d5:
         82:c9:f7:45:c0:6a:dd:fc:7d:dc:46:9c:44:35:c9:5e:07:f7:
         df:af:fa:b1:3f:fa:c3:32:06:d7:84:c8:f0:7d:1e:91:dd:05:
         7c:ae:fc:b7:ee:f4:7c:15:6d:f6:9f:48:87:9d:fd:78:54:57:
         65:9b:60:9a:5c:9d:3f:4c:a1:e3:f4:2a:2e:6d:10:fe:04:3d:
         74:9e:8e:0c:3e:24:f7:a0:40:31:33:c4:11:77:c0:e8:99:1b:
         a6:81:2e:7c:3a:b8:f5:9b:35:4e:50:fa:98:e5:b7:3d:1f:97:
         a0:e8:ef:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:10:42 2025 by rpki-client