Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0a002e19-67cb-3678-b29f-414acfc73d74.roa
File:                     0a002e19-67cb-3678-b29f-414acfc73d74.roa (raw, json)
Hash identifier:          iDGIsYh/uZrCQQoJlNTquowR/iEPw0394+6MFYlo5r8=
Subject key identifier:   29:E5:BE:32:67:43:D0:98:50:C7:AB:AC:A8:59:2D:6B:7C:6E:02:44
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F49886E56B65E8D32F734CC00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0a002e19-67cb-3678-b29f-414acfc73d74.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7018
IP address blocks:        23.27.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:6e:56:b6:5e:8d:32:f7:34:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f86d726d-d7ca-4249-a70c-68973b0f571b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:91:65:3d:80:11:1a:38:08:42:ad:83:86:
                    c3:ad:9c:7f:ea:24:81:92:e1:f4:65:e8:9f:42:90:
                    7a:89:01:5d:6c:08:bc:a0:40:25:53:b9:66:81:04:
                    b9:7a:f7:ac:dd:8a:34:b0:93:82:6d:7d:43:6a:89:
                    95:c7:be:ec:af:09:a5:8d:29:d4:94:f3:43:37:d0:
                    45:e3:dd:b6:79:9d:98:eb:37:59:6b:61:d7:c9:8b:
                    36:e2:19:f5:0c:84:9d:71:2f:49:e1:f3:9e:d2:68:
                    73:b8:90:ff:07:09:62:97:cd:22:bb:b3:37:00:bf:
                    04:dd:fb:fd:97:14:07:7d:39:da:78:cd:a1:d9:cd:
                    a0:96:40:0e:87:eb:95:ac:0e:05:03:47:99:29:35:
                    8d:7e:4c:f1:31:7e:23:58:77:4a:f0:c5:ca:d6:93:
                    e5:96:2d:26:58:8c:4e:1a:2d:f9:c0:1d:7d:3a:15:
                    1d:84:a0:28:0f:8c:f7:e9:12:65:5b:9b:7b:54:16:
                    06:6c:41:f4:c7:23:40:ca:0d:b2:c2:e7:26:d4:29:
                    69:b0:c0:56:29:e9:b6:cb:63:b2:b2:f9:8a:72:74:
                    0c:0b:0f:57:b3:ab:ee:e8:e7:05:c6:f4:76:f5:c8:
                    17:72:1f:2e:2d:f0:a7:15:ff:15:65:69:a5:ed:cf:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E5:BE:32:67:43:D0:98:50:C7:AB:AC:A8:59:2D:6B:7C:6E:02:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0a002e19-67cb-3678-b29f-414acfc73d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:13:51:64:a2:47:56:b4:c9:30:d5:93:2d:22:3c:a0:9d:cf:
         07:7a:ac:f8:19:38:19:be:bb:28:09:9b:e8:6c:61:01:0c:82:
         26:11:00:d9:50:bd:3d:50:24:23:2a:bd:a6:15:27:c5:61:03:
         19:a0:9e:7f:93:a7:76:e1:2b:80:a5:8e:fb:fd:53:aa:15:24:
         cc:75:e9:24:14:dc:fd:20:39:57:da:41:c2:7f:e9:c7:08:0d:
         33:05:ec:5b:74:e4:c0:7c:44:57:44:91:d4:f6:06:18:05:60:
         6a:05:91:c1:39:12:c8:22:01:38:5d:bb:b8:2b:93:ae:c9:d1:
         88:a5:cc:c3:8f:2a:3e:2c:b7:2e:fa:1b:67:a4:93:df:3c:0d:
         2c:8e:df:0c:85:ff:2f:0c:17:c0:8d:02:09:55:83:b5:f6:e3:
         2a:04:00:80:b3:af:b3:d5:ee:05:1c:60:5a:5d:d9:a4:d5:e2:
         e5:a6:3a:23:f6:d3:20:d8:fc:65:9e:e2:dd:f4:e5:dd:a7:70:
         f7:07:e9:f3:8e:7a:5d:b1:20:f3:91:56:d2:30:23:c8:3a:32:
         86:29:73:a7:4e:5f:94:73:d0:5b:38:94:ac:0d:d3:c6:dc:7a:
         a6:66:28:d6:29:91:f7:ea:00:da:88:3e:2c:bb:c4:4c:48:81:
         b2:bb:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:08:36 2026 by rpki-client