Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e739d35-2e00-3836-be1e-c5c52d818c55.roa
File:                     2e739d35-2e00-3836-be1e-c5c52d818c55.roa (raw, json)
Hash identifier:          AWt6Ozj2dY0KpF2r8J9oqQMR1Z8dx8+lzr2Nx0EA4Eo=
Subject key identifier:   BF:BD:3C:EE:F0:55:32:E3:AD:3B:AB:ED:53:97:BB:18:9A:51:29:3B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A4DA053AE5A15AD4E512F0680
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e739d35-2e00-3836-be1e-c5c52d818c55.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     214238
IP address blocks:        23.27.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:53:ae:5a:15:ad:4e:51:2f:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=8be061d1-e203-45ca-9f69-0321f62fec97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c9:f7:8f:d9:62:1d:dd:db:65:bf:05:5e:3b:
                    34:d0:de:a9:24:6f:51:5e:d9:ed:6b:80:db:ce:cb:
                    46:b4:33:14:10:fc:8c:24:97:a4:66:7f:5e:39:ec:
                    da:9f:e9:d6:d1:93:b9:fd:bf:6c:20:26:1c:12:a7:
                    39:cb:ea:ec:83:98:7e:78:cd:c0:54:88:f5:03:3e:
                    fb:13:67:a6:c7:0a:e2:d5:d2:50:80:8d:6e:10:49:
                    77:81:d7:17:0c:15:26:ed:1e:18:55:a8:86:dd:dc:
                    49:1a:7e:3b:76:a1:fa:91:50:74:2b:0e:39:fd:38:
                    c9:5d:80:8a:96:c3:d3:2f:a4:ff:38:4d:a2:f5:21:
                    ce:6b:1e:58:37:72:e6:be:04:4c:09:9f:f1:6a:56:
                    97:72:5d:3f:06:93:a2:74:97:9f:00:21:61:58:43:
                    e3:97:da:ae:5f:9e:10:30:c5:68:f7:dc:36:8b:33:
                    59:a6:e1:49:1e:13:62:66:de:9e:da:ca:47:c7:6a:
                    62:b6:ae:00:d7:3e:4f:af:fc:ac:ce:30:9c:44:51:
                    e3:88:b5:73:9a:f4:a9:0f:c5:9f:48:3b:61:75:16:
                    6b:16:9b:7e:ff:0c:8d:fe:9b:de:34:eb:42:ed:83:
                    bb:07:e7:ca:91:7a:40:3e:37:81:66:94:a4:49:93:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BD:3C:EE:F0:55:32:E3:AD:3B:AB:ED:53:97:BB:18:9A:51:29:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e739d35-2e00-3836-be1e-c5c52d818c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:54:9b:ff:82:82:10:b5:c5:a8:b4:38:fb:b3:73:4b:8f:7a:
         b0:ba:1a:a5:b3:49:e7:d5:f0:ae:e4:1a:60:63:bf:38:74:a8:
         60:da:5e:1b:a7:93:8d:ed:61:95:db:33:32:68:5b:77:c9:f0:
         30:47:50:6a:6a:07:4a:84:54:b2:e8:94:d7:e5:11:18:3a:24:
         9c:b8:85:79:94:55:3c:7d:4c:ae:83:e9:4a:d5:43:cd:79:b7:
         c6:1d:3f:81:e3:96:c4:4c:30:73:1b:77:51:dc:45:30:77:4c:
         60:ee:f3:d5:3d:0d:20:14:9b:ba:9a:d2:4a:49:0d:ba:25:22:
         40:b4:89:4e:f4:cf:9b:e8:14:8a:30:12:22:98:1d:71:17:f9:
         9f:64:96:66:9b:a1:86:7d:c5:82:39:b8:24:39:c5:fb:09:fb:
         5f:50:04:22:bf:0a:bf:b6:d9:e3:71:94:41:f9:6c:36:bf:e4:
         de:0a:48:be:f7:cb:8d:df:c5:1c:14:b5:66:ea:ff:84:04:94:
         05:f2:01:bc:ab:aa:4e:c4:34:b1:cd:d5:4b:df:6f:16:ff:5e:
         dc:c8:6b:fd:76:56:9a:be:27:bb:6b:01:6c:cd:44:fe:91:39:
         2e:39:83:d6:74:90:ec:81:60:5c:80:ff:98:3e:8a:b3:b3:1a:
         d5:da:2d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:14:35 2025 by rpki-client