Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5661823c-d071-31b7-8174-63611c8fe768.roa
File:                     5661823c-d071-31b7-8174-63611c8fe768.roa (raw, json)
Hash identifier:          etAlUjDOx+8/5LiSj21Myv64sqNeN2qHLtsgJRVWisk=
Subject key identifier:   FE:F0:5B:DF:B9:E9:4E:93:17:3F:8D:2D:36:3F:B7:26:49:F9:C2:F6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B4E772C7E702C45471F8D2E40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5661823c-d071-31b7-8174-63611c8fe768.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     18779
IP address blocks:        23.27.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:2c:7e:70:2c:45:47:1f:8d:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=d96e6b11-e586-4c82-8423-873e2d2267e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:65:2f:38:a5:64:2d:f3:d3:f7:a7:a2:35:48:
                    9d:21:a5:68:71:dc:e8:b2:69:de:b9:7e:7c:62:55:
                    3a:db:48:e5:0e:7a:d5:20:35:03:a9:cb:f1:fe:86:
                    a7:72:5a:18:f0:51:d0:6d:7e:a7:b6:17:b1:24:2a:
                    f2:06:b4:d9:8a:c7:1c:d3:c2:3a:29:42:e8:77:08:
                    60:da:9b:9a:32:91:22:4d:af:ef:33:2f:3b:5e:ae:
                    11:84:0a:82:ac:cc:58:c4:b3:69:4b:9c:54:3e:c9:
                    58:a7:2f:2d:c6:8b:8a:26:60:f6:2f:5e:8b:ba:d1:
                    69:80:06:c7:3c:15:1c:25:dc:80:fd:3f:ea:91:d1:
                    df:0e:96:b4:c8:0b:44:14:3b:cd:90:2f:91:59:00:
                    d9:fc:15:5b:85:59:60:25:ef:70:62:6d:d8:62:7f:
                    7b:44:a0:a5:6c:28:b7:f2:27:fb:8c:72:a3:61:35:
                    85:92:6a:45:19:0a:1b:ba:23:b7:7a:d4:33:12:19:
                    9d:1f:ba:0f:bd:20:78:12:be:54:42:34:2d:58:87:
                    74:a4:59:b2:cc:98:60:10:75:cb:0d:63:f4:89:b7:
                    c3:eb:10:59:f7:b3:ae:e1:ac:18:c0:75:e0:85:0a:
                    37:14:32:24:39:5a:9c:8b:52:d2:49:a0:0b:34:72:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F0:5B:DF:B9:E9:4E:93:17:3F:8D:2D:36:3F:B7:26:49:F9:C2:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5661823c-d071-31b7-8174-63611c8fe768.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:46:da:74:db:e5:0b:78:42:97:cd:00:cc:bf:83:80:fa:02:
         96:b1:6f:da:9b:12:c6:a2:5c:1c:21:df:6d:6c:52:25:1c:bf:
         4a:49:d5:1e:f1:fe:a7:04:76:7c:03:19:0d:c5:df:2e:4a:c3:
         62:3d:40:a4:41:23:b0:e6:a2:fc:7a:2e:65:e4:e6:db:c0:39:
         e6:8d:3f:9d:4b:3f:0a:06:22:4b:03:ce:8f:3c:b6:3a:92:e0:
         cd:c5:60:3b:8a:0b:6a:6a:82:3a:ee:2d:41:e0:05:8d:a3:47:
         80:ab:93:20:4c:6b:70:cf:e6:39:8a:ed:d6:86:01:8c:b7:8b:
         fa:cf:ff:61:19:9e:c4:3c:c5:cd:17:da:18:f2:89:b7:72:0c:
         5c:8e:fc:57:03:0d:33:0c:93:07:bc:36:dc:15:4e:84:53:5a:
         c4:91:33:9c:fb:c8:d4:ba:79:83:63:71:7b:4f:66:c0:eb:c0:
         70:aa:5b:5f:6b:cc:8f:c8:34:07:81:d5:ee:af:14:fc:d3:d3:
         5c:28:cd:c6:1d:83:38:13:af:71:1d:95:57:bf:21:ec:5d:57:
         14:eb:43:44:5a:b6:7c:b8:a5:69:7d:57:99:f8:1f:33:50:46:
         4a:33:76:b8:d8:25:a3:6a:ad:a5:4d:f2:80:b4:9d:0c:ad:89:
         c1:c4:fe:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:31 2025 by rpki-client