Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/161aedde-15a1-3db6-9c64-c6df5f9a0cae.roa
File:                     161aedde-15a1-3db6-9c64-c6df5f9a0cae.roa (raw, json)
Hash identifier:          /0C+ubSoOT2msgF2YMAKnpmj9rnFwdDq1hjw/VhvuEs=
Subject key identifier:   4B:A2:68:81:06:EC:E7:5D:58:30:C3:C1:33:12:A4:FA:17:63:F9:16
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DFF2FF0F2EB048C355E3F6480
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/161aedde-15a1-3db6-9c64-c6df5f9a0cae.roa
Signing time:             Fri 29 May 2026 17:49:18 +0000
ROA not before:           Fri 29 May 2026 17:49:18 +0000
ROA not after:            Thu 27 Aug 2026 17:49:18 +0000
asID:                     402507
IP address blocks:        23.27.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ff:2f:f0:f2:eb:04:8c:35:5e:3f:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 29 17:49:18 2026 GMT
            Not After : Aug 27 17:49:18 2026 GMT
        Subject: CN=cf990006-f144-426f-99c6-4cfddd128abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:45:5e:6c:4a:4a:d0:5a:62:13:d7:bb:8d:80:
                    66:88:ac:56:36:fe:b8:57:1f:e1:89:9d:27:1d:f3:
                    1a:fb:a0:30:53:df:26:62:c0:89:56:79:e3:7a:0a:
                    24:1c:93:2a:13:f1:dc:31:31:25:9c:da:6b:6e:4a:
                    34:3c:7f:b2:4b:a5:41:ab:43:e9:22:96:4e:40:17:
                    cc:49:b0:44:7a:ed:98:be:93:23:b3:2b:fd:a0:47:
                    a9:f1:c0:18:91:15:32:5a:7e:58:5d:9a:c4:26:13:
                    df:3a:7e:30:d5:a0:5c:e1:25:1c:c7:58:e6:6b:7e:
                    cf:df:7e:8c:49:97:96:de:77:d2:00:ce:4b:4b:bc:
                    a7:ab:cb:22:5e:92:60:6c:85:31:7b:e0:5d:07:96:
                    36:29:6e:d9:80:62:f9:a9:28:51:a7:57:65:aa:7d:
                    44:b7:54:ed:6f:ae:3c:78:61:7c:95:df:7c:9e:ac:
                    e1:e3:4c:9f:a5:9a:bb:73:14:dc:18:dd:16:72:3a:
                    7b:ec:ce:38:7e:82:45:41:fa:80:4d:76:da:cb:44:
                    dc:57:c9:ac:d5:93:04:46:9f:e6:19:0e:b1:1a:3b:
                    78:1f:72:7c:f8:fe:c7:ca:34:67:54:84:bb:f6:21:
                    c0:4b:b8:9e:ad:11:1e:77:21:16:6d:ff:92:70:af:
                    bf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A2:68:81:06:EC:E7:5D:58:30:C3:C1:33:12:A4:FA:17:63:F9:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/161aedde-15a1-3db6-9c64-c6df5f9a0cae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:61:fc:c8:95:f5:c6:f3:76:53:85:2b:c9:ec:59:a5:92:44:
         87:45:1f:0c:54:3a:a2:b5:a3:4d:50:94:b2:49:95:51:b0:af:
         3e:4f:4c:f7:b6:d5:90:03:c0:95:1f:17:bf:d5:7f:10:61:d0:
         f9:cd:8f:0d:27:07:30:dd:51:2f:51:2b:b4:aa:92:fd:a7:3c:
         fb:b1:be:97:87:16:f0:e5:99:12:09:48:da:63:b9:2c:18:f8:
         bc:df:42:05:a0:be:ae:c8:91:3f:d0:10:b7:04:8b:8c:2e:76:
         ce:fd:b0:e5:1e:37:d5:88:77:0e:cc:9f:17:0b:18:bd:53:ad:
         f2:65:6f:d6:9e:cb:a0:77:2c:ca:4b:be:6d:5d:b5:6c:60:d0:
         15:ee:ee:1e:12:bf:4c:65:59:f0:87:fc:e2:38:5c:b9:45:6a:
         92:be:cb:6f:7c:62:b4:bc:18:43:31:61:e2:33:30:4e:25:be:
         2c:f7:5b:39:bc:f2:72:0b:ad:99:7d:e5:f2:c5:f3:ff:95:94:
         e3:a3:fb:54:ea:b1:30:1d:1a:c1:98:df:96:a3:32:da:8f:d9:
         fe:ed:7e:14:ad:7d:66:70:ec:26:34:3a:db:34:58:dd:dd:20:
         dd:14:01:48:ae:73:c3:ec:f0:8e:ba:20:3a:7a:13:4d:a4:a2:
         76:33:37:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 20:10:03 2026 by rpki-client