Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/defde584-58c1-3c30-98f5-5394d9659811.roa
File:                     defde584-58c1-3c30-98f5-5394d9659811.roa (raw, json)
Hash identifier:          axXMU9su28bBAF8tBCXaTGAAp7DWzri9bB7dbpm65js=
Subject key identifier:   55:93:AA:58:72:34:29:F1:5C:12:C0:08:9D:C0:86:97:77:99:E0:A7
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584A1F90553AE3B6ABA9F9CEE400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/defde584-58c1-3c30-98f5-5394d9659811.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     2914
IP address blocks:        23.27.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:55:3a:e3:b6:ab:a9:f9:ce:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=ff1a7991-db54-40db-b34f-c0bcd4da0ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6e:aa:42:4a:75:c5:28:69:be:21:bc:3d:b7:
                    f7:0f:1e:28:77:31:ed:49:be:cf:fa:1f:d8:5f:bf:
                    17:b0:7e:e0:33:f1:70:8f:fe:90:18:41:2e:1d:3c:
                    fe:e1:40:5f:7b:09:f3:9a:2b:b6:58:b2:d2:7f:9c:
                    22:a4:dd:96:54:a9:0b:95:76:ec:75:c7:43:11:e6:
                    e4:2f:20:a5:d5:b7:bd:fd:ad:bf:d5:b1:8e:15:87:
                    2d:26:6d:38:49:73:f1:55:87:a9:ff:b0:dd:53:f8:
                    a8:42:6f:b3:91:93:8a:f1:c0:04:eb:27:0e:85:a3:
                    e9:5f:b4:92:54:e7:c5:6c:72:bd:e4:84:ae:d3:93:
                    af:06:4b:93:56:da:3b:58:b4:a9:2e:95:20:e0:86:
                    a8:51:a0:7a:4b:1b:43:96:15:2c:c6:53:e9:6e:76:
                    74:bf:43:cb:6d:14:e5:87:97:74:27:b0:bb:64:b8:
                    35:1c:86:d3:cc:63:9a:5c:ee:17:71:1b:ea:84:3f:
                    95:c6:a0:f0:f3:97:03:da:97:e5:a6:80:51:93:d2:
                    7e:f5:87:36:4e:8f:fe:ea:6f:e5:cf:fd:8e:ff:1c:
                    71:35:91:1f:ec:2b:81:eb:fd:b7:3b:34:14:70:d1:
                    96:dc:16:58:70:d0:7d:2f:34:56:b4:6f:9f:45:90:
                    c9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:93:AA:58:72:34:29:F1:5C:12:C0:08:9D:C0:86:97:77:99:E0:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/defde584-58c1-3c30-98f5-5394d9659811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:af:86:9b:fc:14:db:e3:8b:5f:35:24:53:73:32:13:17:5d:
         92:40:24:11:84:31:d5:0e:08:7d:1a:32:3e:b0:87:16:f2:2e:
         c9:5f:e2:69:64:20:03:48:ef:0f:27:27:60:3a:56:81:8b:c0:
         a9:63:88:39:5f:4f:d8:a3:e0:a6:d4:9c:d2:8b:97:3e:13:68:
         99:f0:2d:65:88:9e:f3:aa:d0:8c:80:2b:b8:67:dd:3f:73:ed:
         4d:1d:f7:f4:e8:70:92:bc:5b:7b:93:47:df:3d:77:55:3e:97:
         5b:b0:c6:2b:a9:49:ae:ce:9a:69:cb:86:eb:e9:36:f9:5c:3d:
         44:5a:58:fa:51:12:a5:c7:11:5b:4d:28:d2:00:59:28:40:9a:
         a5:06:1b:dd:d1:44:c6:d6:0a:a4:44:17:37:84:b7:14:05:d8:
         eb:47:ac:d8:89:e2:a3:5b:d1:9f:4d:07:05:3e:14:fc:47:8d:
         a2:61:59:b8:62:9a:1a:b0:f5:c6:72:37:9d:21:df:28:95:8f:
         4d:c0:d4:25:14:32:6f:db:c1:85:82:82:5f:5c:0c:8a:00:41:
         2f:d0:db:2c:a0:4b:61:6f:2e:ec:e0:dc:d8:59:fd:fd:58:7d:
         66:42:ab:d2:dd:a2:52:6b:e7:9e:2c:e8:37:30:24:73:a3:fb:
         94:c7:e8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:12:23 2025 by rpki-client