Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eb14dd2d-b254-3351-8044-7d850033b9b1.roa
File:                     eb14dd2d-b254-3351-8044-7d850033b9b1.roa (raw, json)
Hash identifier:          yiI/0Jf6nyn0rgQQlx33ejvqFiv1iYqK0obPaT4XUjM=
Subject key identifier:   EC:DD:C7:F5:FC:A9:B5:61:62:B0:EF:F3:81:13:39:9E:54:B8:E6:3A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A94D0E64A588EBDD4D5A8CC80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eb14dd2d-b254-3351-8044-7d850033b9b1.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     7018
IP address blocks:        23.27.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:e6:4a:58:8e:bd:d4:d5:a8:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=29324579-e708-46c2-ba08-53b0d1df94ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:7b:e5:14:24:8d:e7:5c:2a:2a:b4:d9:0d:
                    b3:3e:78:7a:1b:38:85:57:5b:bb:fc:ad:89:e4:20:
                    a5:ef:4b:81:fd:10:4c:c5:11:19:05:82:ee:2c:0b:
                    01:4b:cb:fe:8f:db:a1:7d:e2:99:5c:d7:67:52:50:
                    91:ea:f7:56:ad:48:ef:42:39:72:70:74:cc:07:76:
                    c5:7d:99:cb:95:fc:dc:e9:7f:2b:ab:24:3a:86:3f:
                    08:2e:cf:7e:76:37:bb:12:07:b3:e7:fb:35:ab:6d:
                    d5:59:8c:f2:8f:21:f3:29:d9:ae:34:54:47:59:0a:
                    22:13:21:bf:ee:d9:a0:cb:20:4b:44:ea:b0:ac:d2:
                    e7:61:39:6f:10:f4:c4:65:07:db:21:65:c3:82:35:
                    70:5f:42:f9:0b:4c:e2:24:83:d3:63:44:cc:0c:c3:
                    c4:db:52:bb:31:6f:6d:ac:7a:d7:f0:3c:9e:8b:b6:
                    ca:1e:21:64:9f:a5:5c:cd:9f:ba:b5:45:ed:e6:cf:
                    56:05:68:43:ac:28:ec:b1:ae:56:af:e0:92:dc:c3:
                    1a:cf:8e:bb:da:80:e3:76:a9:98:ab:3e:21:7f:50:
                    b1:a3:bb:f4:5b:19:34:ff:97:97:cc:fd:9d:64:b9:
                    70:fa:b1:c5:c9:fd:4e:10:8a:da:d7:dc:44:66:9c:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DD:C7:F5:FC:A9:B5:61:62:B0:EF:F3:81:13:39:9E:54:B8:E6:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eb14dd2d-b254-3351-8044-7d850033b9b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f8:76:6f:6d:76:ca:2d:7a:0a:f3:47:46:e2:d7:d8:ba:bc:
         a4:2b:16:6c:ab:84:20:b4:7f:8a:7b:4f:e6:ff:44:c3:41:29:
         b1:16:06:37:be:3d:a8:8b:a5:8e:30:0b:10:c5:c3:8a:46:67:
         0f:ef:9c:0b:cd:24:e8:16:b6:5a:07:ef:c8:b8:30:68:91:1e:
         4f:77:4c:bb:c7:7c:23:4b:b9:95:e2:6d:2c:2d:14:14:84:b1:
         5a:69:2a:14:07:15:90:5b:f6:cf:08:15:bb:53:d0:48:a5:5e:
         72:8c:41:d6:0e:f2:a5:cd:06:38:a3:70:75:ef:b3:f5:7b:0d:
         5c:bc:ff:20:4e:2a:f8:22:4c:58:b6:bb:b1:50:51:d7:7f:0a:
         0f:d5:69:66:d2:dd:75:fa:7f:e6:14:7b:9e:ee:5f:e8:08:08:
         6a:15:73:1a:a4:24:8d:9d:90:4d:88:8b:fd:2c:d7:93:75:42:
         de:1a:30:fe:e9:e2:eb:3c:60:97:a6:e4:2a:d5:96:a0:13:d4:
         c3:f1:18:fb:0c:37:39:18:d6:e9:75:00:c6:6f:39:7d:2b:30:
         03:3e:16:66:01:a0:ce:b8:cf:e1:c4:e2:6f:10:c5:43:83:62:
         e1:d7:d5:30:cc:54:ac:f9:b2:91:9c:d7:84:94:68:bd:13:64:
         9e:64:e0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:10:11 2025 by rpki-client