Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d294797e-5b16-30a2-94a8-d834f3712c91.roa
File:                     d294797e-5b16-30a2-94a8-d834f3712c91.roa (raw, json)
Hash identifier:          AogzcvEqoZf6htzMzrCsCGn1OeCB0ue8m5eKfyYJfzc=
Subject key identifier:   B9:81:E1:C0:6B:0D:85:75:51:D6:D4:9E:82:6D:FB:97:5A:A6:FB:2E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B91777F887D83DD244799FD40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d294797e-5b16-30a2-94a8-d834f3712c91.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     44477
IP address blocks:        23.27.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:7f:88:7d:83:dd:24:47:99:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=97bb5ec1-60e7-4728-9a74-8faa3402831b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:34:91:c0:24:58:bf:af:c4:cc:1b:8e:ec:1e:
                    ed:f8:e8:78:c5:69:ca:22:db:af:81:d0:3c:c3:85:
                    87:df:c7:b5:5d:57:03:a3:89:c5:da:fb:aa:ce:64:
                    13:a9:d7:fa:ca:92:f6:2d:82:6d:e9:85:28:5f:87:
                    b4:46:9b:87:a1:7b:5f:3a:b9:c4:00:d9:d7:c6:cc:
                    34:99:da:21:c2:c7:24:90:15:be:55:e4:44:99:c5:
                    48:99:a7:2a:46:b3:2a:e2:5f:b1:a7:21:61:3b:25:
                    17:66:91:b8:ad:89:a4:e6:3a:9c:02:f1:f7:8a:43:
                    e9:f9:3f:ab:48:3c:f1:bd:13:0e:eb:ca:08:c9:f0:
                    95:0f:85:e1:65:dd:bd:18:89:3a:44:0c:8d:c2:60:
                    29:44:0b:c6:1f:f0:51:4c:cc:2e:5d:a1:f9:d2:6a:
                    47:7b:9f:d7:3a:ff:ac:32:14:e6:dc:92:12:64:c7:
                    5a:1c:15:b1:a9:ab:d0:84:05:46:ee:20:35:5d:63:
                    80:d2:26:ca:79:71:f4:ad:6b:34:3c:3c:d0:06:85:
                    61:a4:bf:87:5e:7a:c0:0b:dd:dc:3c:5a:21:5d:5b:
                    70:89:1b:21:9d:82:1d:90:69:b5:32:a7:60:86:45:
                    07:8a:4e:82:85:de:94:6b:e2:d5:c3:da:49:fe:ee:
                    3f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:81:E1:C0:6B:0D:85:75:51:D6:D4:9E:82:6D:FB:97:5A:A6:FB:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d294797e-5b16-30a2-94a8-d834f3712c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:58:d1:6e:4a:ee:44:ef:0f:20:ff:6f:6a:d4:f1:b2:97:31:
         59:9d:9a:46:b8:14:e6:1c:54:67:a4:96:c5:48:1e:33:01:3e:
         e7:7d:69:1e:30:07:c8:e3:fb:4c:f9:82:98:1b:73:b8:03:55:
         57:04:c3:68:de:55:c6:08:0c:10:aa:5d:75:d0:e2:83:a1:cd:
         ad:c8:aa:19:98:3e:a6:ee:08:39:96:b3:33:0a:0f:c3:3d:9d:
         67:5f:f2:36:53:f2:0c:da:77:82:da:ba:b6:91:97:5b:a1:13:
         ba:7f:ed:8d:d2:94:bd:e9:d8:52:77:4f:38:32:c7:74:f8:eb:
         62:d6:6e:33:04:e7:9b:06:20:2c:ab:06:a5:76:1c:a4:fd:ed:
         08:c0:5a:52:c8:6b:29:af:73:89:e8:b0:d1:c1:8d:06:54:21:
         a8:91:fd:4a:35:ac:73:78:1a:77:ae:ca:2c:75:17:25:be:f7:
         76:fe:41:91:4b:30:f8:ca:ef:eb:0a:a2:ae:cd:bf:53:cc:07:
         9c:c2:9e:fe:af:50:64:c8:bd:56:e2:8b:a8:2b:06:19:b4:e3:
         68:0c:3d:dd:e6:4e:a7:a4:c2:5b:f2:bd:cb:e9:12:b1:5b:c3:
         22:d0:89:33:66:de:28:48:17:da:7c:48:2c:11:72:d9:8e:f7:
         27:63:9d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:26:10 2025 by rpki-client