Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1da46410-92a2-32b4-8f2c-1177b343c5c7.roa
File:                     1da46410-92a2-32b4-8f2c-1177b343c5c7.roa (raw, json)
Hash identifier:          1WfnG/eIP6gz5rB8rsm9BkckcTn0gQfGY9b6NXsark0=
Subject key identifier:   6D:6A:C0:F3:9A:B9:A6:DB:6E:92:C3:AE:81:51:72:0A:B5:36:24:BA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B94422B5346E53549268BEB80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1da46410-92a2-32b4-8f2c-1177b343c5c7.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     401152
IP address blocks:        23.27.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:2b:53:46:e5:35:49:26:8b:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=22e6b1b0-eb1c-4a5c-b6cd-b0a0121648dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4f:88:b2:4a:c5:1e:17:b1:e0:2c:65:8a:53:
                    f3:72:73:59:7f:d3:a7:de:d6:26:a4:15:e8:f7:c4:
                    de:81:2a:75:28:a8:8b:08:2f:9d:70:00:a4:56:85:
                    db:f8:d8:fc:4a:ad:bc:b6:12:f3:de:49:6c:2a:7d:
                    8d:51:ce:af:eb:7f:43:bd:41:3b:ba:a5:c3:cd:44:
                    97:28:88:37:3c:96:46:ab:bd:a8:13:51:16:55:2a:
                    a9:e6:c0:7d:92:a0:15:93:9a:90:ea:2d:41:27:1a:
                    84:fc:cc:8a:22:d9:f0:de:69:a2:8d:56:87:a5:0b:
                    eb:62:85:12:b2:c2:68:d6:e4:75:16:56:62:d4:ce:
                    cf:e0:10:05:50:cc:92:6e:f8:db:f1:c7:33:3f:d5:
                    1d:1c:b2:09:3d:31:07:91:2b:ab:b3:10:c8:94:88:
                    a6:1f:2e:cc:bd:15:55:70:11:ea:af:a7:6c:83:8f:
                    83:0b:f0:5d:84:62:e0:18:90:1e:57:41:8a:95:16:
                    11:17:65:80:06:f6:11:8c:b8:0d:61:3b:a7:6c:d0:
                    9e:aa:44:3f:67:b7:43:39:7e:5e:a7:4b:07:b6:84:
                    61:3a:dd:99:25:d9:16:f6:7c:34:31:5f:f3:1a:06:
                    92:f5:94:4b:1d:e2:bf:4c:19:a8:ec:b6:e2:ac:63:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6A:C0:F3:9A:B9:A6:DB:6E:92:C3:AE:81:51:72:0A:B5:36:24:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1da46410-92a2-32b4-8f2c-1177b343c5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ee:03:a7:9a:15:cf:12:87:48:7a:21:65:ff:b6:28:80:54:
         c3:5a:ff:01:56:9e:36:c5:5d:10:fb:6a:7b:b3:01:ce:49:32:
         58:4c:6e:b8:75:0a:04:44:e8:40:5e:7d:58:30:02:8e:25:e9:
         bd:aa:bc:aa:88:ce:fa:1e:11:49:da:9c:5d:23:1a:e5:1a:e9:
         ec:e2:dd:95:fe:1b:6e:a7:f5:5b:2f:7b:5e:dc:4e:d8:71:01:
         71:4b:bf:33:bf:6a:ac:21:6f:8a:e9:af:e0:d6:e3:bf:01:51:
         b9:bc:9c:50:82:b5:91:7e:9e:6c:e3:41:4c:df:0d:7a:44:b4:
         19:2d:b7:6c:32:d6:d4:a1:c7:79:1f:5e:4a:d9:29:24:9d:bf:
         6e:96:cb:f7:ae:2c:c6:10:4c:c3:71:c1:ef:54:d6:b9:b3:a8:
         51:5b:18:0a:36:04:57:ff:9b:d9:a5:d5:ae:2a:48:d1:ad:39:
         a3:5b:4e:bb:93:e1:1b:44:b1:85:5f:1e:05:b0:5e:1a:dc:81:
         b7:7e:24:30:06:af:4a:2e:c2:bf:83:e6:fc:f7:63:7d:cb:91:
         91:6b:a8:72:6b:79:28:d8:5d:8e:9c:72:ac:82:b7:f6:b3:88:
         8e:cd:d6:10:41:74:38:3a:eb:4b:94:1a:3b:df:e2:ac:0b:49:
         f1:b7:8c:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQitTRuU1SSaL64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk
MjJlNmIxYjAtZWIxYy00YTVjLWI2Y2QtYjBhMDEyMTY0OGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40+IskrFHhex4CxlilPzcnNZf9On3tYmpBXo
98TegSp1KKiLCC+dcACkVoXb+Nj8Sq28thLz3klsKn2NUc6v639DvUE7uqXDzUSX
KIg3PJZGq72oE1EWVSqp5sB9kqAVk5qQ6i1BJxqE/MyKItnw3mmijVaHpQvrYoUS
ssJo1uR1FlZi1M7P4BAFUMySbvjb8cczP9UdHLIJPTEHkSursxDIlIimHy7MvRVV
cBHqr6dsg4+DC/BdhGLgGJAeV0GKlRYRF2WABvYRjLgNYTunbNCeqkQ/Z7dDOX5e
p0sHtoRhOt2ZJdkW9nw0MV/zGgaS9ZRLHeK/TBmo7LbirGMKVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG1qwPOauabbbpLDroFRcgq1NiS6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWRhNDY0MTAtOTJhMi0z
MmI0LThmMmMtMTE3N2IzNDNjNWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxu2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF7uA6eaFc8Sh0h6IWX/tiiAVMNa/wFWnjbFXRD7anuzAc5JMlhMbrh1
CgRE6EBefVgwAo4l6b2qvKqIzvoeEUnanF0jGuUa6ezi3ZX+G26n9Vsve17cTthx
AXFLvzO/aqwhb4rpr+DW478BUbm8nFCCtZF+nmzjQUzfDXpEtBktt2wy1tShx3kf
XkrZKSSdv26Wy/euLMYQTMNxwe9U1rmzqFFbGAo2BFf/m9ml1a4qSNGtOaNbTruT
4RtEsYVfHgWwXhrcgbd+JDAGr0ouwr+D5vz3Y33LkZFrqHJreSjYXY6ccqyCt/az
iI7N1hBBdDg660uUGjvf4qwLSfG3jHY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:58:31 2025 by rpki-client