Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2dfc8f41-0081-3988-9be7-157a95bf0e33.roa
File:                     2dfc8f41-0081-3988-9be7-157a95bf0e33.roa (raw, json)
Hash identifier:          OPhJQ427av3lg1bzveW58NWC40yinaGgQCZ3nvzXUy0=
Subject key identifier:   23:C5:DD:39:40:D4:4D:89:A1:47:AB:F7:53:07:D6:A0:C5:9F:47:06
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F5A331C0FC331702CD9C63608
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2dfc8f41-0081-3988-9be7-157a95bf0e33.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     401152
IP address blocks:        23.27.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:1c:0f:c3:31:70:2c:d9:c6:36:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=ced60cda-c5bf-4b90-bbc4-f67a78965280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f7:c6:7b:91:d3:3f:0f:43:05:2a:47:b1:d0:
                    47:b0:fa:f2:da:35:18:b8:3f:a0:eb:08:08:fc:19:
                    16:b9:8c:3e:71:c5:32:56:cf:23:47:42:5a:51:1e:
                    69:df:4a:8f:aa:97:d9:37:af:e6:55:f5:f3:83:6b:
                    2d:f0:9e:61:84:de:de:05:d9:1b:9a:26:f9:e9:d9:
                    c4:47:9e:9f:0e:2b:55:d4:63:06:b1:1b:00:8a:b4:
                    be:c3:15:67:b9:1c:db:5a:1d:61:18:27:b3:b1:56:
                    de:0a:74:e7:df:4e:00:a6:11:80:19:e6:26:15:b1:
                    b6:5a:37:a2:ba:a6:c7:4b:64:2e:aa:7c:f5:7f:6a:
                    96:2e:5d:76:56:f4:ce:d1:11:91:bb:74:84:0a:ee:
                    af:76:25:31:41:f5:5e:9b:90:56:19:a5:7b:5d:49:
                    44:21:14:e2:9f:b1:b1:0d:3a:25:3f:fc:06:55:18:
                    44:72:01:72:ae:d6:ed:ed:54:2d:a3:62:a4:94:b7:
                    f7:4c:a6:fd:dc:9f:95:5d:2b:b7:21:86:2c:86:2e:
                    34:00:7c:6b:6e:65:38:b2:50:fa:7c:3a:38:ac:d5:
                    f3:ae:10:d8:8f:3b:8b:5e:7f:43:5d:51:c7:95:f1:
                    fd:b6:2e:70:18:06:93:49:e2:a8:bd:b6:32:a2:70:
                    cf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C5:DD:39:40:D4:4D:89:A1:47:AB:F7:53:07:D6:A0:C5:9F:47:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2dfc8f41-0081-3988-9be7-157a95bf0e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:dd:12:b8:d0:7e:e2:b3:90:7e:46:38:b5:96:46:94:34:54:
         5c:fb:4d:fb:5b:a6:5e:b8:9b:04:9d:82:69:bc:c0:c5:09:c0:
         f5:da:14:f1:60:ae:44:08:de:3d:6b:ec:d8:25:32:b6:ba:2d:
         a9:42:65:da:12:df:86:32:83:af:c4:2d:2d:7a:b3:b4:2d:18:
         ef:07:9e:74:d1:33:7e:6c:ed:e4:bf:28:02:36:d8:c6:07:1f:
         ba:44:dd:a5:ee:18:59:cb:ed:bd:bb:a4:39:e3:e6:6b:39:ab:
         40:2f:e1:e3:7c:d7:2c:60:31:d7:6b:3c:d6:9b:3b:f7:c0:7f:
         52:6a:79:54:24:92:d4:18:69:c1:95:63:32:94:c3:bb:ab:80:
         ec:f2:bd:5a:06:13:ee:76:51:86:37:f3:28:9f:06:02:8d:d9:
         67:54:07:58:7b:ba:5e:e0:2e:2c:77:0d:1b:a5:6e:2d:ef:1c:
         74:a5:5e:19:91:1f:ff:ff:43:16:1f:8e:9b:1c:74:67:53:4d:
         99:62:44:75:dc:d2:e2:4c:76:f7:48:4c:df:20:80:37:15:3c:
         db:66:2d:6d:8e:29:8d:11:b5:60:d3:2e:97:43:69:0b:49:be:
         92:78:36:fa:86:00:22:31:c0:c2:f5:3c:b9:04:00:23:5b:89:
         db:ac:9c:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMxwPwzFwLNnGNggwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2VkNjBjZGEtYzViZi00YjkwLWJiYzQtZjY3YTc4OTY1MjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPfGe5HTPw9DBSpHsdBHsPry2jUYuD+g6wgI
/BkWuYw+ccUyVs8jR0JaUR5p30qPqpfZN6/mVfXzg2st8J5hhN7eBdkbmib56dnE
R56fDitV1GMGsRsAirS+wxVnuRzbWh1hGCezsVbeCnTn304AphGAGeYmFbG2Wjei
uqbHS2Quqnz1f2qWLl12VvTO0RGRu3SECu6vdiUxQfVem5BWGaV7XUlEIRTin7Gx
DTolP/wGVRhEcgFyrtbt7VQto2KklLf3TKb93J+VXSu3IYYshi40AHxrbmU4slD6
fDo4rNXzrhDYjzuLXn9DXVHHlfH9ti5wGAaTSeKovbYyonDPeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPF3TlA1E2JoUer91MH1qDFn0cGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmRmYzhmNDEtMDA4MS0z
OTg4LTliZTctMTU3YTk1YmYwZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/dErjQfuKzkH5GOLWWRpQ0VFz7Tftbpl64mwSdgmm8wMUJwPXaFPFg
rkQI3j1r7NglMra6LalCZdoS34Yyg6/ELS16s7QtGO8HnnTRM35s7eS/KAI22MYH
H7pE3aXuGFnL7b27pDnj5ms5q0Av4eN81yxgMddrPNabO/fAf1JqeVQkktQYacGV
YzKUw7urgOzyvVoGE+52UYY38yifBgKN2WdUB1h7ul7gLix3DRulbi3vHHSlXhmR
H///QxYfjpscdGdTTZliRHXc0uJMdvdITN8ggDcVPNtmLW2OKY0RtWDTLpdDaQtJ
vpJ4NvqGACIxwML1PLkEACNbidusnFg=
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:41:48 2026 by rpki-client