Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d294797e-5b16-30a2-94a8-d834f3712c91.roa
File:                     d294797e-5b16-30a2-94a8-d834f3712c91.roa (raw, json)
Hash identifier:          MwyYauPnceFJGB3iIxIeD8DE87NmNQSR5piB3W915HY=
Subject key identifier:   7B:F9:99:CB:58:0A:36:B2:97:1D:08:BE:C0:CF:3D:3E:77:8C:D6:D8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AB0BB8313ABB425B4713E4600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d294797e-5b16-30a2-94a8-d834f3712c91.roa
Signing time:             Wed 30 Jul 2025 13:00:40 +0000
ROA not before:           Wed 30 Jul 2025 13:00:40 +0000
ROA not after:            Tue 28 Oct 2025 13:00:40 +0000
asID:                     44477
IP address blocks:        23.27.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:bb:83:13:ab:b4:25:b4:71:3e:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 30 13:00:40 2025 GMT
            Not After : Oct 28 13:00:40 2025 GMT
        Subject: CN=5046cf65-adab-40d2-89a2-1611c595b22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:91:93:ce:a4:1e:fc:06:b7:fa:b8:a4:40:
                    ac:d4:59:25:53:e5:f3:04:bd:3e:bd:26:dd:c8:d5:
                    cd:41:c6:50:6a:4e:2d:a4:0e:74:a4:1a:8f:c4:b8:
                    49:f8:f6:60:1d:ff:db:1f:04:49:59:6a:1f:48:da:
                    0b:7d:43:39:94:6d:dd:f4:a3:1f:f9:1d:f2:7d:39:
                    39:5c:f3:bb:a7:8f:07:0a:0f:36:20:dc:88:c9:99:
                    76:00:c5:5b:53:fe:eb:1c:41:4a:0a:23:02:83:6e:
                    ea:b0:04:ef:22:81:e5:09:33:71:95:32:0f:62:a7:
                    a7:54:99:06:cb:ed:b3:f9:f9:bb:17:f8:b3:ed:f4:
                    88:fc:d3:24:d9:ea:5a:24:74:86:aa:a4:86:00:2e:
                    08:60:7f:c9:f5:ed:e4:0e:d9:62:20:1b:ca:75:63:
                    14:54:3b:1a:7b:df:e6:7a:21:ff:ef:cd:ab:21:62:
                    11:12:29:24:eb:74:7e:ce:7b:02:35:f0:a7:ed:31:
                    62:67:b0:3e:10:9c:15:1b:e3:cf:36:87:fb:13:01:
                    a7:f2:bd:cf:f9:e8:7c:cd:40:bb:d8:91:9a:66:77:
                    52:2d:89:01:64:45:09:93:50:59:72:16:6f:c2:e5:
                    22:13:99:31:3c:29:d4:a7:a7:30:4e:49:b4:59:ec:
                    6c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F9:99:CB:58:0A:36:B2:97:1D:08:BE:C0:CF:3D:3E:77:8C:D6:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d294797e-5b16-30a2-94a8-d834f3712c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:f5:cf:e5:81:ce:66:c4:80:6b:de:d9:72:e5:1d:0d:25:bc:
         06:92:3d:01:be:ed:ef:30:bb:6d:0d:62:bb:37:ee:79:55:cf:
         99:b2:60:70:35:3f:3a:ba:b5:2f:3d:c2:95:5b:e2:7f:a9:86:
         22:04:4e:e0:98:5b:0c:5f:c1:d1:64:91:2f:e7:51:ee:c6:fb:
         21:91:77:49:bd:41:fb:7b:fc:dd:70:60:ca:1a:52:d9:89:a6:
         63:a7:d9:64:7e:90:60:e4:b7:62:78:da:14:0a:40:e2:0d:f3:
         b7:18:e8:bd:b9:de:27:a4:93:5a:41:2d:ef:83:91:7e:8e:71:
         32:1e:c6:c6:02:90:56:a5:8d:5f:1a:ab:8e:bb:05:20:97:01:
         d7:7a:28:41:c2:e5:9c:a6:a6:07:19:fe:0f:d4:ca:81:4e:20:
         ce:5a:8c:65:3d:11:a3:3a:28:c4:b4:91:49:3b:f8:1b:df:68:
         9d:cc:f0:14:14:74:ee:5d:f2:8d:a7:d8:48:17:81:a6:47:44:
         e4:44:d4:05:d0:5b:77:7b:ff:8a:7c:20:e4:15:21:42:88:8e:
         50:d0:81:97:26:d1:e0:94:5f:80:e4:9c:39:e2:de:0f:f7:99:
         16:74:29:54:35:a8:d3:84:5d:92:43:ee:1a:a7:43:f6:dd:ee:
         af:3c:26:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:22 2025 by rpki-client