Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/55559af7-a29e-3df7-a059-2c0bf5eb4252.roa
File:                     55559af7-a29e-3df7-a059-2c0bf5eb4252.roa (raw, json)
Hash identifier:          5GM+Ozwuq5Cf2vqM1U+n9l5oDsuF/7X9cgVd2Bp8v0w=
Subject key identifier:   C0:40:30:A8:94:85:DD:27:EF:4A:B2:40:B3:73:D1:F4:73:9C:4C:12
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AD3A1281E205F4632C90D0B00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/55559af7-a29e-3df7-a059-2c0bf5eb4252.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     49770
IP address blocks:        23.27.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:28:1e:20:5f:46:32:c9:0d:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=5d8a2cb1-8336-49d8-84f4-bacc9eebb66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:61:94:14:1d:35:64:29:22:50:b1:56:ed:
                    1f:b9:6a:92:38:1e:57:90:c7:b0:f2:08:b7:7c:52:
                    68:5e:9b:27:5c:c0:0a:de:d0:8e:46:fb:ff:b8:44:
                    d2:fc:28:9c:c6:71:25:d1:a1:8f:76:a6:25:8a:ba:
                    16:c0:01:26:0d:e9:df:c9:03:5c:1d:15:ff:0b:10:
                    a9:3f:77:51:a9:36:dc:4f:1e:cf:4e:af:26:73:ec:
                    f4:e3:f9:92:cd:f5:12:77:73:e4:23:dc:c7:d0:bc:
                    1f:79:16:ce:b2:e5:f0:d9:18:3e:cc:fc:b9:1f:d0:
                    98:2f:9b:31:c3:6e:95:e5:fc:10:44:d1:0b:6c:9e:
                    68:89:99:c4:c7:3e:de:77:0f:f6:0e:7d:56:b4:c6:
                    05:69:1f:b2:95:7d:84:10:19:ca:80:2d:9b:03:65:
                    12:90:5e:df:5c:d5:37:12:55:93:26:d7:1c:f0:c4:
                    a1:e8:2b:63:a2:4b:d9:e2:67:d6:a7:71:00:74:10:
                    db:ae:ee:d9:86:61:16:e4:c1:e5:82:cd:2e:e2:72:
                    19:e2:06:ed:20:00:81:ab:01:15:59:dd:41:2b:9c:
                    02:71:69:2b:65:e2:b4:0c:84:ac:4b:a8:84:62:01:
                    66:30:f7:9b:41:97:70:b6:da:f3:78:07:4e:49:46:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:40:30:A8:94:85:DD:27:EF:4A:B2:40:B3:73:D1:F4:73:9C:4C:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/55559af7-a29e-3df7-a059-2c0bf5eb4252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:df:2a:4b:f1:15:11:68:21:5d:0e:d3:46:e6:2f:93:95:7c:
         b8:ad:23:b9:c0:1e:e8:63:49:84:93:39:b9:b7:1d:66:72:5b:
         2c:c2:75:0c:d4:2f:07:d9:7c:c8:88:d9:40:be:87:5e:f1:27:
         d7:b4:80:af:a2:dc:37:a2:2b:57:0a:ca:83:68:1c:ff:fe:26:
         77:cb:6d:2e:40:3b:18:00:05:60:2f:16:91:dc:c0:1a:67:86:
         85:09:35:b0:5b:ec:9c:cb:6f:bf:4b:a6:77:26:30:28:cf:f9:
         0b:7d:b0:ae:a6:95:d0:76:f0:c4:05:77:55:dc:a6:ef:19:a1:
         14:fc:ad:10:58:da:1c:2a:84:60:b0:9c:e9:4e:d8:f7:c2:f2:
         4c:7a:d4:8b:c8:e3:1e:e4:2b:80:7b:cd:f5:f5:d0:61:34:f5:
         30:5e:39:70:be:b5:43:37:7a:c5:23:71:55:6e:83:ee:93:cf:
         81:ae:b1:4c:12:46:58:0b:15:c4:e0:80:0b:86:10:66:67:68:
         8e:f3:5b:2b:e4:86:63:55:cb:21:66:3f:d1:2f:eb:57:2d:6b:
         c6:5f:50:6a:0d:ee:2f:9a:ca:71:7a:a8:1d:ab:5c:22:20:1e:
         d6:d7:eb:b1:0d:22:25:8e:f6:d0:9b:e3:89:98:0e:2e:d2:49:
         c5:3f:c0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:46:26 2025 by rpki-client