Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e2121a55-d681-39f8-8d3f-b0431be271f9.roa
File:                     e2121a55-d681-39f8-8d3f-b0431be271f9.roa (raw, json)
Hash identifier:          99cf6DSDjC94lDCGYcO3F6GYGWMidxFoTyHHoGbabcM=
Subject key identifier:   25:40:80:41:E0:B0:6E:34:74:37:C6:09:17:73:66:79:68:8F:05:AE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AB7B637ADA2AC75CDBC8C1B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e2121a55-d681-39f8-8d3f-b0431be271f9.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     7385
IP address blocks:        23.27.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:37:ad:a2:ac:75:cd:bc:8c:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=d53f3b59-3b5c-4d9b-ae63-ee528a78b2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c5:28:d6:10:a3:f1:35:3b:0d:71:ca:7a:2f:
                    82:78:67:9f:b1:0b:f8:08:e1:07:1a:b3:26:41:82:
                    9e:d6:28:c6:5a:60:94:b9:17:fd:b1:0c:43:25:e5:
                    9d:17:99:4e:c5:31:c6:cb:26:02:d2:e9:4a:a1:c6:
                    a0:ce:4a:a0:fe:cf:6c:06:13:ce:a7:96:75:e8:44:
                    ee:a2:2a:d7:f4:4d:c9:ab:25:a3:7e:1c:7c:6c:57:
                    71:83:6c:ce:82:87:e8:a2:37:d3:81:71:ba:10:1b:
                    cf:a7:cd:2c:b1:a3:22:b7:e1:03:66:a1:45:a5:91:
                    30:14:14:56:af:e1:24:61:fb:05:1f:36:6d:12:7b:
                    2a:aa:1b:bf:67:ad:41:3a:db:e1:dc:3c:2b:78:20:
                    3e:86:78:b7:1b:5e:fb:25:88:45:1c:32:72:8c:a1:
                    d2:fe:91:2e:69:bf:f4:61:72:d4:0b:24:71:dc:e5:
                    2d:78:af:ea:3f:a7:9e:fb:31:13:36:44:15:93:98:
                    06:32:fe:53:6b:d7:f1:72:0f:4e:1b:8f:4b:a2:6a:
                    17:fc:9f:7f:1e:7d:a3:38:b9:8d:25:6e:f7:80:1c:
                    9b:25:1f:cb:bd:07:ff:16:f9:5b:c7:57:44:da:b1:
                    ca:a3:e9:6b:60:42:e8:56:13:f6:68:d6:ee:9e:60:
                    a2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:40:80:41:E0:B0:6E:34:74:37:C6:09:17:73:66:79:68:8F:05:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e2121a55-d681-39f8-8d3f-b0431be271f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d1:7b:70:1f:cb:40:f8:7f:75:c4:bb:b6:0a:76:eb:a0:fd:
         25:17:6e:71:dd:0f:30:63:83:8b:3e:81:d9:6d:f1:fb:20:73:
         c0:82:3b:f1:89:51:89:fa:0c:f2:57:f6:ff:71:e1:a7:75:80:
         9e:6d:c4:fc:73:2e:28:96:92:97:71:25:08:75:6e:ed:41:b6:
         4f:61:a8:83:e1:fd:d6:48:cd:93:50:98:7d:30:d9:71:ba:1e:
         d7:79:e8:59:ee:56:de:70:f2:80:b1:37:9b:62:2c:41:dd:e5:
         6c:20:6d:2f:59:b6:3f:33:eb:a2:b6:95:38:03:22:64:e4:3b:
         00:37:00:5e:b4:34:17:95:71:02:77:b2:20:04:da:ea:85:ef:
         05:b2:05:3d:a3:84:28:52:8a:f3:58:3d:00:f7:04:e8:4a:a5:
         c7:8d:54:a7:46:78:0c:81:e5:51:ed:1f:8f:58:31:17:8e:3c:
         e8:b8:e3:68:1d:e6:88:0c:1c:49:8f:5d:94:59:8d:90:20:65:
         99:40:79:ff:81:bb:b3:09:7c:dc:f5:4b:a0:50:79:0d:ff:9a:
         50:57:7b:83:8a:cb:7b:77:c8:80:67:80:c8:97:97:4f:15:6b:
         d5:bb:a5:78:d0:bf:00:6e:91:09:b6:24:fe:36:77:04:6c:41:
         38:11:48:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:52:41 2025 by rpki-client