Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2002e01-b864-3372-b58a-74934cc8439c.roa
File:                     f2002e01-b864-3372-b58a-74934cc8439c.roa (raw, json)
Hash identifier:          BdcYHC4GlunSLc54N6fYp1oM9+z8pZIjYladqxZtL/U=
Subject key identifier:   A0:D9:F9:3D:50:5D:9F:15:57:31:D1:07:66:CF:80:63:EE:E1:32:3F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AECC20681818F9B4C821EF480
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2002e01-b864-3372-b58a-74934cc8439c.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     149440
IP address blocks:        23.27.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c2:06:81:81:8f:9b:4c:82:1e:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=0d133d30-56b7-4db1-9038-a0bcb53e99b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:c3:da:a6:2d:a3:b8:20:fc:80:08:86:c9:
                    b2:e5:c5:5b:7b:02:ac:21:63:32:14:b6:ae:c0:b2:
                    59:16:42:a7:8e:7c:cb:15:eb:c7:ab:df:89:22:ca:
                    bd:db:f5:49:d3:c1:b4:56:e4:82:a4:b9:54:eb:c3:
                    13:d8:4b:96:c5:e6:94:14:ec:dd:26:70:b6:dd:a5:
                    0d:e3:86:7a:51:b1:aa:3a:a1:f6:4b:68:22:22:44:
                    52:88:06:ed:18:81:b5:a4:0b:c5:cf:ad:bb:ae:40:
                    ee:2e:74:77:6e:30:84:88:0c:d1:08:4f:84:6d:ef:
                    e8:34:29:d6:50:27:1d:13:ad:ea:77:cd:7e:18:ec:
                    d9:27:bc:f6:9a:c8:b7:30:8d:6b:b3:c8:a9:ff:6e:
                    af:26:3e:dd:5b:d2:74:ee:de:36:7b:50:b7:8b:b3:
                    64:73:76:20:d8:05:e4:8c:4e:d6:28:95:53:90:2a:
                    7c:15:90:f3:76:c2:c6:48:7e:48:ea:8d:ff:72:af:
                    24:ed:c6:ab:62:fd:af:ac:e4:4f:f5:c1:6d:51:e7:
                    a9:c0:84:55:f6:fc:53:ab:d2:45:25:27:08:63:ad:
                    86:7d:3f:c5:a7:95:90:4c:33:d3:fa:d5:b8:b5:14:
                    d9:ae:5d:c0:94:bb:16:cf:6d:49:9a:5b:a7:3b:89:
                    dd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D9:F9:3D:50:5D:9F:15:57:31:D1:07:66:CF:80:63:EE:E1:32:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2002e01-b864-3372-b58a-74934cc8439c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:77:c3:0b:14:8a:81:53:e1:4b:18:ca:74:a8:5a:22:d6:
         32:ae:8a:65:43:fb:50:38:44:c0:41:b5:40:10:0e:91:26:62:
         f9:a5:52:78:b8:ca:2f:80:b1:37:b5:99:3b:86:87:59:ee:28:
         c9:d0:da:88:2b:fd:48:ce:56:12:d3:52:3c:2a:36:d3:95:e8:
         3a:a4:a3:b1:ce:26:60:76:9d:7e:4e:bf:ef:66:47:25:3c:37:
         2a:5a:03:51:cf:75:96:c3:81:88:d1:3c:8b:95:63:cb:b9:75:
         46:43:5e:07:6a:a6:31:7a:26:3c:6a:cf:90:9b:f9:0d:a1:b5:
         d1:f4:9a:2b:a2:c7:da:b5:66:e6:12:19:a1:88:b8:4f:e7:f7:
         3a:7d:13:fd:8c:4e:39:42:d1:35:a5:3e:ee:a1:fa:12:e6:05:
         fe:45:5b:39:39:94:64:ef:22:79:bd:cc:ef:1c:82:9a:eb:98:
         2b:26:1a:e1:2b:7e:e7:3b:50:4c:b1:20:41:28:2c:e7:3f:83:
         28:44:ec:b8:27:6c:da:51:96:c9:82:84:b1:1c:74:dc:6e:13:
         55:16:7b:f3:4e:4d:53:76:51:bb:71:b0:18:8f:4a:66:d1:36:
         f2:88:3f:78:9d:f9:8a:3e:6c:d2:bb:74:17:87:75:89:30:06:
         38:90:e5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:09:21 2025 by rpki-client