Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5e9361fc-bffa-3e9f-968c-42867c7374c9.roa
File:                     5e9361fc-bffa-3e9f-968c-42867c7374c9.roa (raw, json)
Hash identifier:          QZizgMK4Za2ecMEgd+yW+pX+HiWQKrsO6b9id26FV34=
Subject key identifier:   4F:9E:2E:D2:28:14:8B:BA:09:46:8C:D7:31:B5:1A:FF:78:A9:4E:62
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B94422B66C2C238A76A27C1E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5e9361fc-bffa-3e9f-968c-42867c7374c9.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     401152
IP address blocks:        23.27.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:2b:66:c2:c2:38:a7:6a:27:c1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=49fc6c6c-d504-4b71-a054-9538d1b4b044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:c9:d5:54:fa:32:52:b8:36:75:06:f5:90:
                    10:eb:c3:1a:51:21:44:f6:ee:16:c3:38:8d:42:e7:
                    2c:a7:24:5c:dc:df:34:62:00:7f:ca:e4:1d:a1:29:
                    28:a5:b4:b4:92:7c:ba:4e:0c:c2:73:71:79:2b:64:
                    3c:34:f8:a0:f6:c0:15:16:e7:c7:ba:d9:86:f0:50:
                    fd:12:56:65:a6:48:95:7b:c4:fe:a5:9f:1e:de:5d:
                    8a:68:7e:f9:79:81:f7:d6:bb:85:41:65:00:86:4a:
                    ca:87:61:da:a6:94:20:23:ac:c5:4a:e3:da:5a:2b:
                    38:3d:99:91:fe:96:d8:d0:17:79:c2:ef:6e:ac:6a:
                    7d:9a:bd:09:93:84:03:b3:ad:45:c1:4b:8e:1f:d1:
                    19:9d:e3:4b:ff:14:16:55:f1:a6:9e:c1:d9:d9:b5:
                    7b:e3:0f:fc:a7:10:0c:c6:eb:62:12:1d:17:3d:0c:
                    85:5b:22:2a:07:2d:3c:8e:e2:54:a5:05:6e:cc:d2:
                    50:89:67:d7:33:01:f7:89:86:be:50:df:b3:7e:df:
                    98:80:03:8b:b1:7c:82:4b:d2:27:fb:d8:d1:fe:87:
                    6e:1d:cf:26:e7:d5:5c:dd:9d:06:bd:49:90:10:d2:
                    c6:67:37:9a:a0:1a:88:06:2a:c7:29:ec:6f:f5:f1:
                    3b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9E:2E:D2:28:14:8B:BA:09:46:8C:D7:31:B5:1A:FF:78:A9:4E:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5e9361fc-bffa-3e9f-968c-42867c7374c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:78:b4:a3:6d:e9:32:cb:68:45:38:9e:96:26:66:87:31:0d:
         3e:da:c5:2d:69:65:03:fa:fa:ff:2f:de:f4:72:67:1a:97:83:
         5e:38:e1:b5:26:ca:b6:58:ab:43:2f:8f:ed:59:1a:67:35:88:
         1b:c4:6d:32:77:26:be:2d:8e:3b:1d:9a:b4:9a:f7:91:7b:83:
         01:05:ac:56:f4:88:ad:11:ba:2e:5f:35:42:51:b3:e3:72:3b:
         3e:0c:a4:f9:11:07:b4:ee:c6:9e:cf:f2:3f:d0:6c:6c:a1:be:
         27:67:0a:25:ef:8e:70:4d:68:75:eb:34:fd:12:cd:b2:e4:22:
         f5:4e:33:04:48:6b:ba:04:91:07:f1:83:4b:f3:7e:7b:c7:7f:
         45:a3:bf:b4:3c:4a:79:c9:da:15:a4:e2:42:eb:c3:b6:80:b9:
         cc:cf:0c:e7:64:37:00:53:32:c2:b8:7c:8a:2b:28:03:4d:93:
         09:7f:c9:b8:19:81:b9:e3:a4:3f:ac:eb:cb:8c:68:88:84:c0:
         8a:fc:9e:aa:a4:2e:2f:0d:2f:fd:c1:87:36:14:51:ce:92:18:
         83:29:ba:4a:89:48:b6:27:1a:e8:1c:4b:dd:83:1c:57:42:d9:
         d6:d4:90:90:f8:ff:06:7a:1b:10:c8:91:26:5f:fd:ea:11:c4:
         c3:03:f7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:48:51 2025 by rpki-client