Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e26c34e2-804a-34cf-a79c-8dd3c37e2160.roa
File:                     e26c34e2-804a-34cf-a79c-8dd3c37e2160.roa (raw, json)
Hash identifier:          qosvvez3P9G+3ictCHbN9BID8wxlyowA99mh5HjGxrw=
Subject key identifier:   07:5D:51:8C:08:E2:1D:C3:23:CE:60:90:1B:80:5E:1B:7F:B5:9B:47
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AB7B636A630BC2F6BAE619600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e26c34e2-804a-34cf-a79c-8dd3c37e2160.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     7385
IP address blocks:        23.27.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:36:a6:30:bc:2f:6b:ae:61:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=b2a9b601-c534-47e7-a426-b980e928f20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:13:19:87:02:b1:e8:bd:78:fc:bf:c4:a1:a7:
                    d6:39:ad:ee:bb:e1:8d:cf:56:de:29:ca:96:0b:7c:
                    bc:a1:0f:8d:d8:11:ae:47:dd:f5:3a:2f:c5:ff:b5:
                    1d:0e:9b:3d:ad:dd:bc:e0:96:71:47:3b:af:8d:75:
                    78:d6:3c:33:69:5e:0d:2b:95:e9:23:12:d1:ae:34:
                    07:da:85:fc:5b:6a:a3:92:9a:65:7f:8e:95:47:1c:
                    2d:cd:63:ad:fd:ee:b7:54:3e:20:e5:4d:a2:d4:6c:
                    72:8b:67:76:87:53:8c:15:3e:dc:03:78:0e:71:30:
                    d2:31:c4:78:f1:bb:6f:c6:1f:3f:40:26:f4:0b:57:
                    a8:77:02:bc:76:4c:43:47:e9:c0:43:00:30:83:aa:
                    d0:7f:5e:a7:cd:a1:5e:dd:ed:54:96:0a:6a:93:1c:
                    b4:03:65:72:91:14:9a:f7:d9:71:99:b5:91:30:be:
                    21:1f:10:15:98:c6:34:77:09:97:60:c3:7c:ea:35:
                    56:42:21:31:c7:dc:2b:63:6b:ca:44:3b:9f:7d:df:
                    c1:9f:f2:81:42:db:8a:71:c9:7f:c2:ef:d0:a2:4a:
                    2e:7a:91:7f:e5:1e:da:35:64:02:ac:7e:f1:30:51:
                    eb:a7:c7:b8:7f:97:43:9e:ce:17:4c:7d:4f:17:af:
                    62:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5D:51:8C:08:E2:1D:C3:23:CE:60:90:1B:80:5E:1B:7F:B5:9B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e26c34e2-804a-34cf-a79c-8dd3c37e2160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f3:24:6e:9f:c8:77:2f:13:a7:96:0b:10:0c:84:e4:4b:3c:
         c6:07:98:ad:63:05:90:98:13:3e:90:08:b0:84:32:e9:15:bf:
         15:9e:eb:53:49:75:59:bb:d6:0b:61:b8:b1:bf:75:65:22:c4:
         f7:5c:7a:ab:28:c1:fd:c5:08:c6:82:54:71:2b:be:1f:fb:ea:
         ba:24:91:60:de:c0:52:07:cf:04:6b:c8:0c:a8:c3:c1:f1:d3:
         a1:12:89:02:ea:b9:33:cb:24:e3:5e:e2:df:6b:2f:05:ca:56:
         ad:0e:b5:6d:a8:f6:50:9b:62:7f:ab:17:b3:fe:8a:62:1a:3e:
         09:c0:ce:46:7f:8c:57:f3:dc:bd:c1:6b:6d:1e:aa:4c:b4:3b:
         ea:58:ee:1b:d4:16:85:68:ba:4c:ae:10:52:d8:19:b0:a6:da:
         e5:2c:5b:fa:7b:49:09:ab:2b:83:a2:5b:d4:c0:9d:c9:40:bf:
         5c:b4:0e:5c:7f:9e:4b:4f:00:82:84:70:ee:f3:f5:38:d0:2a:
         dc:34:08:51:ed:e7:b0:24:56:e2:42:7b:41:03:77:30:6d:8a:
         bf:06:eb:a3:fc:f8:66:ab:0a:28:93:4f:c3:70:5b:73:ac:e2:
         47:94:87:ae:c3:bb:7f:b6:cf:3d:6d:78:f2:f1:6c:98:ef:b3:
         86:c1:53:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:22 2025 by rpki-client