Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b0f6550-5cde-34d7-ae94-da593abf4681.roa
File:                     5b0f6550-5cde-34d7-ae94-da593abf4681.roa (raw, json)
Hash identifier:          2GtdvxEygwpVRdyycEP+gCyQFnUZVKdvW0enUReEmv8=
Subject key identifier:   73:B3:3F:65:1A:30:31:D0:B6:F8:7A:4F:61:8A:32:87:86:49:F4:7A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E6F3AC0E3269F81B946F82D80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b0f6550-5cde-34d7-ae94-da593abf4681.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     149440
IP address blocks:        23.27.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:c0:e3:26:9f:81:b9:46:f8:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=bf4ac87d-4a82-493c-8ecf-7cd115dd83f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:da:6e:3f:6c:b5:35:4c:34:b2:0d:24:e4:69:
                    d9:46:ec:9b:2c:28:e1:b9:6b:1b:0b:79:ff:62:11:
                    16:0d:31:55:e7:80:52:50:80:49:fe:9f:f6:64:01:
                    ce:93:7a:a0:46:61:93:ac:8a:11:55:64:81:1c:92:
                    66:a8:81:91:c6:56:9e:5e:b3:af:60:28:8a:18:51:
                    bd:d4:4d:34:e6:4f:f4:65:42:41:e9:06:1f:db:61:
                    e9:fd:62:1f:04:bc:14:75:9f:01:8a:2a:84:2e:04:
                    bf:e4:ef:dd:d1:22:5b:9c:01:97:a4:37:89:0c:dd:
                    5c:1c:b2:fd:69:98:89:29:b9:13:a9:22:da:ca:3b:
                    55:b3:18:9c:6f:e5:1f:bd:49:9e:1c:a6:b0:84:60:
                    0f:cd:04:87:fd:a1:81:2b:56:76:0f:2c:01:55:b8:
                    ff:f7:ec:e4:d6:23:a6:de:54:ca:71:67:75:51:7f:
                    e1:88:3a:bd:f2:83:33:ec:fe:29:f0:fe:47:2b:e4:
                    2f:86:31:91:f7:1f:e7:64:91:a3:bc:bd:cf:b1:26:
                    91:0d:59:49:ed:dc:8f:ba:d2:72:72:1d:af:b5:1d:
                    e1:08:f9:98:f5:55:70:47:77:b5:fb:6c:88:07:65:
                    c2:4f:f7:06:1e:ed:77:51:de:53:f5:ec:e3:fa:26:
                    60:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B3:3F:65:1A:30:31:D0:B6:F8:7A:4F:61:8A:32:87:86:49:F4:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b0f6550-5cde-34d7-ae94-da593abf4681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:0e:2b:f3:cc:95:3b:69:09:aa:37:e7:e1:aa:b1:ec:70:3f:
         7f:fd:69:f7:b5:b4:7a:97:6e:61:00:55:ed:16:58:49:70:d8:
         03:8c:6a:e1:bb:b4:8e:83:a3:dd:29:a8:58:7c:e6:fd:26:a0:
         0c:0a:c7:17:a7:5f:5d:18:96:66:39:93:cc:d9:44:64:67:f9:
         18:7f:83:03:16:ac:0a:fc:04:8a:2f:47:ce:76:e3:ba:ef:04:
         f7:41:04:4e:fb:63:e5:e9:15:f0:64:0f:b2:07:c3:78:59:78:
         9f:fd:ed:c8:69:a7:af:8e:c7:13:be:6f:9d:59:84:c3:3c:92:
         b9:c3:13:b8:46:6c:7a:d3:02:74:ef:5a:f2:93:3c:5a:9e:12:
         1b:2d:21:72:07:d4:b7:10:62:a2:ff:ec:b1:a0:c4:9a:98:65:
         f1:5c:b2:c5:8e:91:b8:87:c9:0e:08:8e:71:0c:3a:18:3d:1f:
         ef:1b:4c:b9:9b:d2:32:2c:43:18:00:93:53:42:ec:1c:98:f5:
         f3:ae:69:5e:aa:48:d8:bf:06:12:d1:d2:9a:e8:73:ef:3a:d4:
         39:06:14:06:91:46:8d:b8:ad:ae:d0:6a:ad:97:54:25:f7:4c:
         28:ae:6d:c3:c8:b7:be:d3:3e:d1:9c:c7:6e:a2:9f:7c:40:b4:
         6a:49:c3:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOsDjJp+BuUb4LYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
YmY0YWM4N2QtNGE4Mi00OTNjLThlY2YtN2NkMTE1ZGQ4M2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtpuP2y1NUw0sg0k5GnZRuybLCjhuWsbC3n/
YhEWDTFV54BSUIBJ/p/2ZAHOk3qgRmGTrIoRVWSBHJJmqIGRxlaeXrOvYCiKGFG9
1E005k/0ZUJB6QYf22Hp/WIfBLwUdZ8BiiqELgS/5O/d0SJbnAGXpDeJDN1cHLL9
aZiJKbkTqSLayjtVsxicb+UfvUmeHKawhGAPzQSH/aGBK1Z2DywBVbj/9+zk1iOm
3lTKcWd1UX/hiDq98oMz7P4p8P5HK+QvhjGR9x/nZJGjvL3PsSaRDVlJ7dyPutJy
ch2vtR3hCPmY9VVwR3e1+2yIB2XCT/cGHu13Ud5T9ezj+iZg1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHOzP2UaMDHQtvh6T2GKMoeGSfR6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWIwZjY1NTAtNWNkZS0z
NGQ3LWFlOTQtZGE1OTNhYmY0NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEoOK/PMlTtpCao35+GqsexwP3/9afe1tHqXbmEAVe0WWElw2AOMauG7
tI6Do90pqFh85v0moAwKxxenX10YlmY5k8zZRGRn+Rh/gwMWrAr8BIovR85247rv
BPdBBE77Y+XpFfBkD7IHw3hZeJ/97chpp6+OxxO+b51ZhMM8krnDE7hGbHrTAnTv
WvKTPFqeEhstIXIH1LcQYqL/7LGgxJqYZfFcssWOkbiHyQ4IjnEMOhg9H+8bTLmb
0jIsQxgAk1NC7ByY9fOuaV6qSNi/BhLR0proc+861DkGFAaRRo24ra7Qaq2XVCX3
TCiubcPIt77TPtGcx26in3xAtGpJwyA=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:35:43 2026 by rpki-client