Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/437924d6-9ff5-3e28-b22a-d74eb6db7cea.roa
File:                     437924d6-9ff5-3e28-b22a-d74eb6db7cea.roa (raw, json)
Hash identifier:          QLBCHPPSbTP/j8/wy1Di/ni8UcUcQgo4PWYjImjHw7E=
Subject key identifier:   B3:6F:15:23:4E:CC:CA:58:FA:25:D6:F7:A8:06:91:9D:F5:D5:98:55
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E6F3AC0ED6F9E932F3785EC09
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/437924d6-9ff5-3e28-b22a-d74eb6db7cea.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     149440
IP address blocks:        23.27.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:c0:ed:6f:9e:93:2f:37:85:ec:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=5eed4d01-b611-4008-b342-9d8bf8916a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:16:ad:99:df:57:b7:61:51:48:fe:39:18:
                    f8:73:6f:c8:14:34:d1:4f:98:11:87:6b:5b:f7:fc:
                    b6:ef:39:2f:39:f2:89:e9:2b:f4:2f:25:e7:8a:f7:
                    7f:8f:de:22:21:22:fc:f0:26:e3:62:e7:c4:c2:8a:
                    79:cd:3e:2a:7e:63:c3:41:8e:f3:13:1a:af:7d:51:
                    19:c5:36:7b:12:82:9a:07:8b:7c:a0:7e:6d:a3:20:
                    5e:94:dc:13:cf:af:db:17:eb:72:6b:92:4a:f2:fb:
                    9d:94:4a:ca:fe:52:6f:06:f9:dd:f6:57:0d:a2:dc:
                    60:10:60:1c:15:5f:15:57:b3:d4:e4:a5:b6:66:d5:
                    a3:93:ab:3b:c4:9d:21:e6:b1:05:c6:a7:6a:4f:50:
                    f4:4a:73:1d:1c:3c:7c:85:60:1f:07:1d:90:ba:39:
                    7f:23:d5:c4:ce:98:13:ee:76:6b:86:9b:b6:c1:7d:
                    a2:b7:2b:fe:c5:52:79:e2:34:16:50:cd:60:bf:59:
                    ff:42:c6:70:4c:cc:dc:00:4d:45:15:62:f1:87:70:
                    17:05:ac:a4:ce:96:5d:af:6d:87:6f:32:39:48:52:
                    ab:eb:60:c7:94:35:36:e6:da:d5:4c:24:9e:4e:85:
                    7a:bf:8a:12:62:ed:e0:db:dc:f7:66:d7:bb:29:4e:
                    49:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6F:15:23:4E:CC:CA:58:FA:25:D6:F7:A8:06:91:9D:F5:D5:98:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/437924d6-9ff5-3e28-b22a-d74eb6db7cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:30:18:12:02:ce:77:80:6a:ba:d7:a8:8c:7a:19:d6:9c:3f:
         66:d9:fe:30:ba:c7:25:50:9a:fb:0f:40:e0:fb:a3:bc:f4:6b:
         ae:30:75:02:fa:16:55:9c:1a:29:a9:8a:8b:69:60:34:60:1a:
         98:24:c0:a5:64:c9:c6:66:83:78:f3:09:9c:7b:06:f8:a7:4f:
         9c:e7:93:76:d3:9c:9b:f2:a6:a6:77:7b:ac:24:07:95:9a:47:
         79:52:31:ac:72:9c:06:90:52:e3:4d:ce:f7:ed:e9:2b:d2:ae:
         2a:01:0b:c6:af:1b:5a:1b:f0:3a:fc:ef:ac:4d:53:f5:2c:1d:
         83:a9:a9:0b:97:00:a3:9d:f9:ac:a4:04:2e:cb:f6:c8:dd:36:
         b5:21:98:b7:e5:a8:5d:1b:b2:3e:8c:27:a0:ba:5c:46:a9:5c:
         72:f2:3c:d1:5a:f1:fa:fc:61:ce:f9:e0:96:86:36:e7:48:d8:
         8d:29:de:22:b6:3b:5e:0b:1f:97:c2:bf:40:24:4c:61:3d:2e:
         59:02:78:02:22:ad:83:00:9a:b5:c1:94:d2:8b:ff:0b:8f:da:
         0d:f8:d4:2f:fb:33:93:80:e1:32:fe:a3:8c:48:85:19:bc:93:
         24:d0:97:2b:dc:27:c0:c0:f2:c3:d8:95:87:79:57:59:1d:9e:
         9b:6a:b8:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOsDtb56TLzeF7AkwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
NWVlZDRkMDEtYjYxMS00MDA4LWIzNDItOWQ4YmY4OTE2YTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtkWrZnfV7dhUUj+ORj4c2/IFDTRT5gRh2tb
9/y27zkvOfKJ6Sv0LyXnivd/j94iISL88CbjYufEwop5zT4qfmPDQY7zExqvfVEZ
xTZ7EoKaB4t8oH5toyBelNwTz6/bF+tya5JK8vudlErK/lJvBvnd9lcNotxgEGAc
FV8VV7PU5KW2ZtWjk6s7xJ0h5rEFxqdqT1D0SnMdHDx8hWAfBx2Qujl/I9XEzpgT
7nZrhpu2wX2ityv+xVJ54jQWUM1gv1n/QsZwTMzcAE1FFWLxh3AXBaykzpZdr22H
bzI5SFKr62DHlDU25trVTCSeToV6v4oSYu3g29z3Zte7KU5JywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLNvFSNOzMpY+iXW96gGkZ311ZhVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDM3OTI0ZDYtOWZmNS0z
ZTI4LWIyMmEtZDc0ZWI2ZGI3Y2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIwGBICzneAarrXqIx6GdacP2bZ/jC6xyVQmvsPQOD7o7z0a64wdQL6
FlWcGimpiotpYDRgGpgkwKVkycZmg3jzCZx7BvinT5znk3bTnJvypqZ3e6wkB5Wa
R3lSMaxynAaQUuNNzvft6SvSrioBC8avG1ob8Dr876xNU/UsHYOpqQuXAKOd+ayk
BC7L9sjdNrUhmLflqF0bsj6MJ6C6XEapXHLyPNFa8fr8Yc754JaGNudI2I0p3iK2
O14LH5fCv0AkTGE9LlkCeAIirYMAmrXBlNKL/wuP2g341C/7M5OA4TL+o4xIhRm8
kyTQlyvcJ8DA8sPYlYd5V1kdnptquHA=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:34:27 2026 by rpki-client