Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0139e1e-b38c-3fe4-914e-b2be68c66ca5.roa
File:                     f0139e1e-b38c-3fe4-914e-b2be68c66ca5.roa (raw, json)
Hash identifier:          n952i+zSgLGICRxssvrVJNcuUENegtAHqDmGJhxHTew=
Subject key identifier:   1E:07:1C:56:15:5F:AD:F7:2D:BD:F3:19:BB:26:DE:0C:56:8B:05:DF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A9D30FBD3191E7569C1696EC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0139e1e-b38c-3fe4-914e-b2be68c66ca5.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     149440
IP address blocks:        23.27.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:fb:d3:19:1e:75:69:c1:69:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=a30279a5-b549-42bc-8680-31be8b56ef19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:0f:9a:f6:a6:fe:5d:9e:61:03:9e:60:ff:
                    36:31:23:1c:4c:f4:96:1f:69:2d:54:d2:ca:dc:b1:
                    41:89:5a:09:f3:39:41:fe:5e:18:17:5c:08:f9:0c:
                    f3:8e:85:c1:ae:e3:06:11:4e:3e:c9:e0:e4:af:da:
                    0f:d6:d7:79:d8:41:ce:eb:e4:4a:63:d4:d2:01:ea:
                    95:bf:1e:47:20:d0:32:f1:96:8a:ab:b6:75:4f:c5:
                    ed:e7:78:f3:a4:03:d3:f0:85:5d:86:d7:d6:c2:48:
                    f0:05:7e:67:0e:59:c7:36:d2:1d:95:70:25:98:90:
                    8f:54:82:9f:5f:23:5f:c6:7a:d8:b0:e5:7b:7c:58:
                    95:73:1b:d6:01:6c:16:16:82:0f:3a:6f:6d:44:95:
                    16:8a:d2:8c:4d:66:e9:9f:9e:03:d7:fb:0b:30:d9:
                    d8:e4:5b:f3:d5:a6:f0:80:70:d2:83:08:10:20:7e:
                    87:b0:e5:d2:ea:e4:64:5f:6f:25:c6:ee:44:36:96:
                    c2:bf:41:0a:ce:f6:46:b9:56:1f:f9:50:38:8e:79:
                    ab:82:cb:8a:9e:97:b8:2a:6e:9b:76:89:ef:03:e5:
                    b0:e4:01:57:97:11:09:4e:e8:64:ab:73:61:2a:66:
                    33:96:5f:8e:dd:1a:15:76:d0:1c:0c:e0:6f:1b:32:
                    3d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:07:1C:56:15:5F:AD:F7:2D:BD:F3:19:BB:26:DE:0C:56:8B:05:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0139e1e-b38c-3fe4-914e-b2be68c66ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:31:b1:ac:9a:0a:17:89:9e:dd:61:96:c9:35:85:84:fe:21:
         5c:8f:76:50:5d:f2:c0:bb:80:16:18:ec:d1:26:a2:91:02:b1:
         d7:bc:9b:51:b0:17:b6:57:f2:d6:ca:6d:b2:b8:7d:56:a0:44:
         34:eb:1a:3c:b5:18:89:b8:f7:2a:63:c7:7d:f3:85:c5:25:2a:
         91:80:70:da:3a:d8:79:98:90:0f:c0:af:74:36:05:e4:21:57:
         86:0f:17:cf:a8:b5:5a:74:b9:cd:66:ad:f9:81:48:10:f2:02:
         29:ed:c4:8b:e1:03:e3:e4:b7:91:5f:1e:b8:36:87:79:76:c5:
         a2:04:ed:d2:57:29:b2:02:e8:07:12:df:d9:a3:47:5b:81:22:
         b6:ea:9f:af:2b:55:ba:a0:6c:3a:e4:f8:8d:54:a4:37:95:be:
         09:74:c2:e1:d0:d3:37:54:88:6f:ba:fc:a2:8c:4b:4e:20:c9:
         d3:bb:30:1c:20:54:87:6c:58:5b:d9:4e:1c:af:cc:b3:99:88:
         09:ee:6d:4a:ec:55:e6:06:65:06:37:e2:17:78:ef:38:02:79:
         4d:03:9d:f8:0a:e9:7a:d7:cb:89:5d:ad:93:a4:eb:cc:63:dc:
         b2:8a:8e:56:4b:86:68:97:ed:30:72:67:52:04:ac:5b:7b:ca:
         40:20:82:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:49:30 2025 by rpki-client