Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23a187ef-e44e-39ef-868a-9fdb97e66cd1.roa
File:                     23a187ef-e44e-39ef-868a-9fdb97e66cd1.roa (raw, json)
Hash identifier:          GFqDRXF19ddO0kT+6tyiriJPkaQkBxhWvCyk4N/qrjE=
Subject key identifier:   8F:FA:A8:D8:5D:D9:52:DA:59:F0:D2:D3:CB:E2:FB:68:55:8B:8B:13
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E640FD536AE69CC327DE4A660
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23a187ef-e44e-39ef-868a-9fdb97e66cd1.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     2856
IP address blocks:        23.27.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:d5:36:ae:69:cc:32:7d:e4:a6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=c33fd4d6-880e-4c75-ab05-4e84f83e8d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:3f:dd:94:16:2b:03:b1:82:f8:5a:cd:f4:
                    72:12:a3:74:94:1e:19:82:f4:22:7b:38:10:0a:fc:
                    ef:e9:f4:a2:07:f1:4c:09:02:40:3c:76:7c:66:53:
                    5d:16:f1:c2:b2:39:9f:ff:84:9f:bd:3a:52:03:8d:
                    d3:61:46:9d:90:b5:16:5f:47:ab:f3:98:ee:c2:79:
                    50:a2:3f:ef:2d:16:8e:39:02:c6:bf:4d:2f:1e:41:
                    aa:d7:79:aa:c8:50:48:4e:73:41:90:fd:b3:b0:d4:
                    46:ee:a9:75:25:84:d4:d8:d2:b7:06:09:ae:f5:a2:
                    da:f9:c6:3b:ff:7a:15:af:a2:1c:7b:e0:58:3f:f9:
                    ed:96:ca:15:6d:ea:18:57:83:6e:ec:b6:a3:1b:5e:
                    93:a7:ce:ac:f6:1f:ae:c9:14:77:0d:94:e8:d8:66:
                    d6:7f:99:0a:45:6e:e1:37:18:9f:2a:43:29:47:b0:
                    db:13:3a:1e:df:18:73:17:fd:21:34:b8:2d:f5:33:
                    ce:15:07:09:ad:72:9f:24:01:53:b8:4d:68:b5:e1:
                    27:9b:6e:f3:05:72:60:9e:a1:5b:52:0d:c9:7e:c1:
                    49:b4:f4:d5:30:fa:4e:17:83:8b:29:a6:a1:3a:ee:
                    62:2e:6d:c9:2c:9e:43:72:af:e6:0b:ba:8e:8a:ee:
                    c7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FA:A8:D8:5D:D9:52:DA:59:F0:D2:D3:CB:E2:FB:68:55:8B:8B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23a187ef-e44e-39ef-868a-9fdb97e66cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:7b:71:ab:7f:d6:ee:46:4a:cf:5c:ca:29:7d:13:9d:f8:
         58:8e:55:59:c1:09:c3:16:87:4b:6f:79:60:a0:8f:ba:f1:9f:
         95:86:b0:1f:de:0a:3f:5f:bc:8a:d2:ee:7b:bb:41:5b:e4:35:
         e8:7c:4e:fc:84:19:09:81:19:34:fd:8b:f4:6e:97:20:52:74:
         d3:47:63:24:e1:04:29:5e:7e:0b:c1:c3:9b:f4:7f:99:b6:94:
         3e:0c:eb:00:41:fd:05:de:3a:07:ae:bb:e3:ba:c8:ae:04:14:
         55:5b:0b:34:15:de:1f:b7:54:32:e2:a8:eb:8a:eb:b1:3c:72:
         8a:96:29:c8:6b:10:b7:d9:1f:f4:76:f5:3e:0b:ad:92:4b:ba:
         95:cb:1c:17:21:4c:00:70:01:31:ae:ae:8f:33:22:73:a6:bc:
         c5:e0:66:eb:05:d6:fe:27:b4:b3:fd:26:07:2b:b3:9d:95:52:
         e5:e4:b0:82:00:7b:9d:6b:9b:6c:4a:e8:4d:cf:4d:8b:80:a3:
         30:92:a1:76:04:1d:7e:bc:fd:57:e5:8d:1b:1a:73:14:55:d4:
         bb:87:ad:e6:70:a6:6d:85:64:68:04:95:48:d6:d4:c7:f2:c5:
         9c:62:b3:d6:85:0f:1f:9a:f4:1f:f0:a9:26:47:ee:fb:50:dd:
         4b:cf:46:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:36:17 2026 by rpki-client