Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce2358f1-9c83-362d-b2e3-82c3e7a658c4.roa
File:                     ce2358f1-9c83-362d-b2e3-82c3e7a658c4.roa (raw, json)
Hash identifier:          4Znbu37b5tJaWTYzY2xAOoduDWYdQ5DwBktf/Ef/XcA=
Subject key identifier:   80:52:44:55:54:59:EC:F8:DD:2A:7C:4A:91:32:D0:7E:4C:E6:5E:6A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A8DD5F6716FBA8B8C1A3C8270
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce2358f1-9c83-362d-b2e3-82c3e7a658c4.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     149440
IP address blocks:        23.27.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:f6:71:6f:ba:8b:8c:1a:3c:82:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=19ebab46-f2b4-4fd2-9e5a-f0e906f020a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:e6:73:b7:13:63:d7:d8:36:3f:c6:30:4f:
                    01:b0:bd:07:05:74:49:90:ad:81:54:ea:55:6a:ea:
                    c0:39:e9:53:65:df:21:df:b6:a6:74:57:60:59:d5:
                    77:6f:69:2b:b0:8f:19:aa:e9:ca:12:af:f3:22:09:
                    25:f9:68:d7:0d:f4:8d:bb:c5:7f:a5:db:03:25:53:
                    46:e4:bd:8b:c3:9e:29:80:ba:bc:d9:22:37:9f:f6:
                    9b:2e:fc:c8:98:84:a5:fb:88:42:a2:14:21:e8:f4:
                    1a:44:d0:30:1f:92:eb:98:e0:7b:b8:15:3f:99:7c:
                    7a:28:70:c2:02:50:d2:fd:3e:a1:a1:06:b1:f4:35:
                    da:d9:9e:85:0c:da:48:b5:70:af:11:b3:aa:5a:f8:
                    bf:48:95:00:a1:e5:f4:be:53:7c:66:30:1f:90:0c:
                    53:73:f1:f2:1e:c6:06:4e:c5:12:0f:5a:91:df:fd:
                    83:e1:db:36:52:9d:a9:0d:51:e1:5c:c3:f9:65:d2:
                    c6:1f:d9:96:12:a5:c0:75:c4:49:7b:ef:ef:85:74:
                    a9:ee:9c:d4:04:2a:58:18:f9:11:e1:9d:61:5c:00:
                    0a:77:29:d0:c0:71:11:70:83:2e:61:03:bc:fc:5b:
                    0a:f8:8d:e8:9f:86:6f:6a:6f:2a:5e:f8:e3:fa:00:
                    9a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:52:44:55:54:59:EC:F8:DD:2A:7C:4A:91:32:D0:7E:4C:E6:5E:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce2358f1-9c83-362d-b2e3-82c3e7a658c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:47:6a:66:cb:49:03:98:7f:be:9b:5b:7a:c4:ad:b5:62:8a:
         61:e0:25:01:ff:8f:89:86:88:50:69:bc:32:32:3f:48:82:3d:
         75:50:2c:6e:bc:2f:b3:e5:f0:79:49:f7:76:5d:0f:dc:61:2e:
         53:3f:69:50:33:35:16:31:f3:36:5e:a8:e8:10:61:c1:08:4a:
         0c:df:08:34:d6:95:59:3e:65:e5:ae:e0:10:66:01:73:0f:04:
         7a:fd:e8:10:c5:5a:17:bf:f1:b9:cf:48:68:c5:69:13:72:ee:
         23:72:1e:4e:8e:06:19:8d:d7:e4:c8:d1:f6:a9:bc:60:a6:89:
         28:7d:76:85:f0:ba:f0:ac:3f:41:52:00:ec:61:3c:86:ed:a8:
         ea:cf:fe:f3:03:36:60:99:82:90:d4:08:25:fe:a7:b6:a6:43:
         d6:eb:62:a3:89:3f:34:33:5b:ea:04:bd:9a:d7:1a:19:40:fa:
         b9:3c:98:0d:0d:10:97:72:86:f6:cc:ca:ab:e6:74:b4:cb:1e:
         f7:97:47:62:de:63:e6:fa:c8:09:e7:7c:68:aa:bb:55:8c:f0:
         c9:30:c8:88:19:88:cd:c5:7c:af:38:cc:f6:bb:2f:85:16:c5:
         fe:e0:dd:2f:23:94:d0:10:72:92:8d:2d:2f:bb:a1:48:01:44:
         0d:34:fe:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqN1fZxb7qLjBo8gnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDcxODAxMDA0OFoXDTI1MTAxNjAxMDA0OFowLzEtMCsGA1UEAxMk
MTllYmFiNDYtZjJiNC00ZmQyLTllNWEtZjBlOTA2ZjAyMGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSrmc7cTY9fYNj/GME8BsL0HBXRJkK2BVOpV
aurAOelTZd8h37amdFdgWdV3b2krsI8ZqunKEq/zIgkl+WjXDfSNu8V/pdsDJVNG
5L2Lw54pgLq82SI3n/abLvzImISl+4hCohQh6PQaRNAwH5LrmOB7uBU/mXx6KHDC
AlDS/T6hoQax9DXa2Z6FDNpItXCvEbOqWvi/SJUAoeX0vlN8ZjAfkAxTc/HyHsYG
TsUSD1qR3/2D4ds2Up2pDVHhXMP5ZdLGH9mWEqXAdcRJe+/vhXSp7pzUBCpYGPkR
4Z1hXAAKdynQwHERcIMuYQO8/FsK+I3on4Zvam8qXvjj+gCaPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBSRFVUWez43Sp8SpEy0H5M5l5qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2UyMzU4ZjEtOWM4My0z
NjJkLWIyZTMtODJjM2U3YTY1OGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxt+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANHambLSQOYf76bW3rErbViimHgJQH/j4mGiFBpvDIyP0iCPXVQLG68
L7Pl8HlJ93ZdD9xhLlM/aVAzNRYx8zZeqOgQYcEISgzfCDTWlVk+ZeWu4BBmAXMP
BHr96BDFWhe/8bnPSGjFaRNy7iNyHk6OBhmN1+TI0fapvGCmiSh9doXwuvCsP0FS
AOxhPIbtqOrP/vMDNmCZgpDUCCX+p7amQ9brYqOJPzQzW+oEvZrXGhlA+rk8mA0N
EJdyhvbMyqvmdLTLHveXR2LeY+b6yAnnfGiqu1WM8MkwyIgZiM3FfK84zPa7L4UW
xf7g3S8jlNAQcpKNLS+7oUgBRA00/uE=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:12 2025 by rpki-client