Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1028bf3c-c833-39e2-9b37-6e79dc58d4b7.roa
File:                     1028bf3c-c833-39e2-9b37-6e79dc58d4b7.roa (raw, json)
Hash identifier:          eVlirDxFrIsQonKrtPBdwDFPRMqXL5AkXD94aLuRj1E=
Subject key identifier:   47:CC:94:F2:C6:A7:80:0F:4B:F9:10:1D:66:00:74:72:9F:6E:51:76
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285849E7BA8AC1D90E6ACDCD75B2C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1028bf3c-c833-39e2-9b37-6e79dc58d4b7.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     149440
IP address blocks:        23.27.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:8a:c1:d9:0e:6a:cd:cd:75:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=2c0f6e45-23ea-4c41-b314-dd94baf87fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1a:d8:13:e3:b2:a3:8c:f3:b6:cf:c8:f7:e7:
                    b1:66:2d:3e:7a:80:d6:f1:61:51:3a:42:c0:57:cf:
                    e6:98:fb:50:12:78:fb:a0:e3:cc:ee:01:9c:b1:f8:
                    7a:28:b9:32:cd:91:d8:8a:8b:1f:5b:f9:fb:64:6f:
                    bf:dc:d9:dc:db:af:19:1c:26:ac:d4:dc:80:ff:44:
                    c6:3c:2a:31:55:8d:c1:39:82:2b:f4:eb:f5:fe:8f:
                    32:1c:6d:f6:cd:96:b1:74:be:f3:87:ec:bc:dd:ac:
                    70:a6:31:9b:8f:94:25:41:32:71:d0:95:fe:19:99:
                    0f:f8:2f:1c:a1:a0:04:97:d6:03:4d:13:ff:79:c1:
                    cc:e3:db:5c:6e:68:60:6b:59:9f:6f:0c:9f:d7:ad:
                    4b:e5:90:f0:0b:a9:39:7a:d3:cd:79:f8:4b:7e:a0:
                    8f:b7:fa:b7:b4:28:d2:00:e6:63:f2:0e:ce:d6:c3:
                    ae:e9:72:a4:d5:53:ef:80:d6:5f:53:23:6a:4d:ce:
                    fd:df:fa:a4:14:ee:b3:85:10:fa:37:16:ce:70:37:
                    c1:1a:98:d1:77:2d:aa:b6:bb:fe:2d:0b:d8:b3:ee:
                    e2:a8:17:da:f9:40:50:bc:87:43:9e:95:48:2a:51:
                    0b:ad:64:de:65:38:98:c1:17:02:d3:cc:74:86:08:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CC:94:F2:C6:A7:80:0F:4B:F9:10:1D:66:00:74:72:9F:6E:51:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1028bf3c-c833-39e2-9b37-6e79dc58d4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:bd:6c:1e:00:74:4a:b2:b5:74:59:ad:f3:09:6d:c3:65:18:
         04:74:25:2f:07:6f:9b:27:c4:fa:b1:37:49:0f:12:ef:80:04:
         f8:4d:6e:42:57:07:a9:54:6c:ba:54:ae:92:2e:d8:19:c8:b8:
         65:52:ad:2f:f5:18:cf:ee:42:a6:6d:5e:f5:fd:91:63:be:19:
         a5:88:36:84:4b:14:92:d2:29:21:36:70:b8:24:d7:1f:57:18:
         4d:b5:ca:a5:6f:a7:0b:11:30:bb:86:0b:31:27:6c:d7:03:e6:
         82:cc:94:f4:4f:6e:4a:a6:22:f4:0e:ad:35:69:1b:e7:2d:ee:
         82:3f:4f:0b:ad:a7:e6:bd:ee:3e:32:64:f0:9c:84:69:ce:1a:
         1e:47:d7:b7:42:1b:f7:5d:86:48:33:b4:3c:30:a4:e7:d0:ac:
         33:50:bc:e7:bf:bc:7c:c7:61:20:54:89:c9:8e:39:e9:b6:cc:
         23:55:bd:0f:5d:06:b7:c3:9f:6a:b0:2d:74:bf:fc:11:bb:a4:
         0b:ee:af:79:7c:f9:dd:0a:98:c5:d8:e7:1e:9c:b2:30:b4:b1:
         ec:d5:ec:18:0a:a2:29:48:44:ff:b0:b5:9a:05:f2:59:b7:f0:
         a5:09:d1:5f:f5:0d:4f:51:79:31:cb:ef:b6:6e:9f:7b:72:1f:
         83:6e:a5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:21:18 2025 by rpki-client