Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/83f464d1-fd20-3acf-bf73-8e735f4fb35d.roa
File:                     83f464d1-fd20-3acf-bf73-8e735f4fb35d.roa (raw, json)
Hash identifier:          XkWCgDEdrR7YgJzA2dn7DsxFHjTGcrDTotULNhDJll0=
Subject key identifier:   6E:A0:36:ED:06:3B:3E:C1:9B:64:2B:FF:CD:F8:19:56:CF:E2:74:C9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584ADA9BD1A1164BC162D3653C60
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/83f464d1-fd20-3acf-bf73-8e735f4fb35d.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     40676
IP address blocks:        23.27.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:d1:a1:16:4b:c1:62:d3:65:3c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=88acd12a-d82c-4ce3-b972-b3d7d9bf70a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:46:b5:2f:8d:99:91:c5:61:39:8c:dc:68:4a:
                    16:88:62:42:8a:42:fc:99:ce:af:74:17:31:f0:e3:
                    3c:7c:76:7f:83:4c:7d:28:14:00:b9:9d:82:eb:75:
                    3a:f4:fe:bd:e6:fc:d7:a1:d3:86:f4:e8:a1:01:e7:
                    e7:57:52:46:68:82:fe:94:83:ea:ee:7d:38:b1:ff:
                    16:10:d8:34:79:d0:bc:d3:df:e4:ae:a9:11:e1:18:
                    25:b3:cd:61:12:ac:cf:c8:bb:90:b5:ef:64:6c:02:
                    5e:7e:11:20:e8:55:e4:a1:d1:f0:97:11:81:ff:f5:
                    aa:71:a5:db:b2:e2:32:31:93:18:d7:13:bb:f6:ce:
                    31:c1:76:73:48:52:dc:ae:38:ab:bb:75:0c:50:ca:
                    ba:a9:93:de:33:e4:c3:a7:af:6b:b8:ed:72:ce:74:
                    4a:0a:46:56:d7:67:6b:1a:90:32:54:55:ee:9e:80:
                    5d:d5:c2:2c:97:6b:d0:52:bb:3b:29:b8:ea:dd:04:
                    f7:3d:6f:ec:95:cb:fd:c8:71:46:1c:ea:80:9c:e5:
                    7d:95:3d:30:c1:51:12:5d:c7:62:d6:43:73:f1:9e:
                    da:5d:80:0c:1b:5c:78:d2:72:33:6d:62:b5:43:68:
                    84:ed:25:17:23:dd:81:b8:e9:31:cf:10:3b:ec:b6:
                    06:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A0:36:ED:06:3B:3E:C1:9B:64:2B:FF:CD:F8:19:56:CF:E2:74:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/83f464d1-fd20-3acf-bf73-8e735f4fb35d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8e:70:dd:7a:47:a6:e2:57:3b:23:00:69:51:81:dc:92:d2:
         9c:51:28:7b:c3:50:f8:97:be:51:1d:7d:f6:0f:7c:92:1b:3b:
         9b:df:18:af:82:fd:91:a4:c5:e3:88:dc:3a:93:a0:9d:82:0b:
         a4:22:a6:87:f7:dd:51:76:2a:6a:3d:c8:13:33:51:4e:dd:8c:
         c6:53:91:a3:33:1a:2d:33:9d:30:bd:7a:fd:29:c5:b8:13:60:
         16:04:01:3b:29:80:f2:0e:0e:dd:f3:b1:47:cd:04:7d:cc:bb:
         65:2d:72:8b:6b:d8:ee:11:f7:bc:99:9d:11:2d:59:2f:2d:ca:
         72:43:82:20:13:0a:b2:48:e2:5d:58:50:ea:df:8c:ad:5f:2a:
         b5:d0:dd:0a:60:47:27:c8:2f:4c:b9:a8:b3:f8:b9:b2:2e:ab:
         80:d9:12:e5:6c:6d:5b:6d:2a:42:fe:c6:b2:8d:38:fc:0b:87:
         3f:b7:da:ec:22:a6:27:b4:70:37:bd:d4:44:bb:9d:3f:ec:2c:
         f7:ba:9b:b8:63:c6:09:e3:90:31:46:53:b4:c9:7b:af:76:41:
         e3:24:46:01:2e:f1:a2:68:3b:7c:1b:34:e4:be:30:7e:b4:16:
         eb:0d:79:3d:81:bb:cd:2f:4a:dd:7e:8b:28:72:12:54:e7:0b:
         b1:5e:1c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:53:33 2025 by rpki-client