Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cca37dd8-4f6f-3e89-bc1f-20991a2be174.roa
File:                     cca37dd8-4f6f-3e89-bc1f-20991a2be174.roa (raw, json)
Hash identifier:          ufzuFvHESPSHJOauNhNxAOVp2xM1/WBS62VClKU6R6M=
Subject key identifier:   9F:B9:3E:45:5C:8E:75:EA:46:DF:66:7B:27:0C:CD:CD:16:19:8F:B9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A5292F450176E00131C45F180
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cca37dd8-4f6f-3e89-bc1f-20991a2be174.roa
Signing time:             Thu 26 Jun 2025 19:33:09 +0000
ROA not before:           Thu 26 Jun 2025 19:33:09 +0000
ROA not after:            Wed 24 Sep 2025 19:33:09 +0000
asID:                     11404
IP address blocks:        23.27.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:52:92:f4:50:17:6e:00:13:1c:45:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 26 19:33:09 2025 GMT
            Not After : Sep 24 19:33:09 2025 GMT
        Subject: CN=4afc088a-ea16-42e0-afac-d89ae9c21540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:83:9d:8d:75:a0:1d:25:c2:1a:02:af:e4:
                    8c:9a:92:0f:c2:4a:27:76:10:2a:e6:ed:d2:b6:22:
                    83:a0:e8:c0:af:dc:1c:89:9b:26:27:99:f0:06:83:
                    b8:70:31:fa:6e:d3:86:72:1a:47:65:89:15:a0:dd:
                    0a:3c:b0:54:d1:4a:c1:2d:a3:cd:68:b0:68:f6:37:
                    dc:64:c1:33:1e:09:d8:69:c2:48:1a:b2:6f:c7:e4:
                    27:7d:91:91:15:07:76:ae:96:e8:f5:4d:f1:72:90:
                    ff:01:81:87:ea:ba:00:38:94:ed:d1:84:9d:27:a3:
                    8c:6f:a5:b5:3e:8b:8f:50:71:0e:65:f4:18:df:a0:
                    48:eb:fb:6d:9f:9c:41:79:81:f3:24:66:25:52:42:
                    b6:fb:bd:10:08:78:9c:fe:da:38:97:31:86:f9:60:
                    71:8f:61:cb:ba:03:f0:b7:75:75:18:26:f5:c6:99:
                    86:cb:e7:d8:02:76:e2:6d:43:5d:30:8a:30:e4:66:
                    0a:b6:78:f4:f5:34:21:d1:57:fe:02:39:d6:0d:fc:
                    55:6c:71:2d:86:84:8e:99:74:64:3f:22:f5:e5:d1:
                    6c:f9:0c:af:5e:2e:d2:80:d6:b3:9d:6e:bc:23:99:
                    d7:43:7d:95:00:d3:ff:43:17:04:d9:6c:71:b6:6a:
                    2e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B9:3E:45:5C:8E:75:EA:46:DF:66:7B:27:0C:CD:CD:16:19:8F:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cca37dd8-4f6f-3e89-bc1f-20991a2be174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:fc:06:18:e2:ef:8e:11:6f:73:5f:7e:c9:bb:26:7f:3e:d5:
         5f:20:de:7b:92:5a:cd:66:6c:ea:2f:31:86:18:bc:0a:d4:91:
         63:39:f4:0a:ee:35:be:cb:a7:e1:34:6b:0d:18:ac:fa:8f:a4:
         e5:2f:b0:23:ab:ef:fc:b7:f2:79:06:9b:cb:9d:82:90:4d:11:
         6f:10:29:bb:d5:d9:72:f0:b7:09:c9:8f:61:6a:2e:88:60:91:
         5b:25:cf:14:40:d7:9d:7e:92:8d:bc:81:7b:52:0d:33:08:43:
         31:59:fd:73:8d:8b:a6:91:fa:01:3c:dd:f0:e8:6a:e3:1d:c8:
         d4:7e:06:8e:dd:ea:f6:37:ca:b3:ab:98:86:b7:c3:7f:a4:9d:
         bb:48:bd:ed:e1:91:67:f5:c8:e5:0f:76:d7:8a:41:54:32:c2:
         2f:65:49:78:43:8e:94:8d:3f:04:e2:c4:06:53:79:64:9f:61:
         91:e9:cd:6d:b0:43:61:42:83:8f:1f:6f:36:e3:ee:2a:53:74:
         e1:d0:c0:59:f0:63:80:00:97:68:c5:39:12:af:ee:24:7d:db:
         a4:98:eb:21:40:87:48:cd:9d:f6:86:f8:54:7e:a2:9a:84:20:
         a8:0e:8e:e2:d9:49:e1:dc:b5:96:5e:50:aa:90:07:89:b0:46:
         45:b7:c5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:46:49 2025 by rpki-client