Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c7bad2e-b2ae-3c59-b276-3af2a83d776c.roa
File:                     5c7bad2e-b2ae-3c59-b276-3af2a83d776c.roa (raw, json)
Hash identifier:          e7VIOtpeCzdzOt5t0lWbT+nX6sEEDkxVFwa3p6B8qLo=
Subject key identifier:   0A:93:2C:51:25:73:6A:5E:A6:D9:E4:8B:60:F3:B6:06:D3:0F:F5:36
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EED522440AADA5DE03BFBF100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c7bad2e-b2ae-3c59-b276-3af2a83d776c.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     149440
IP address blocks:        23.27.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:24:40:aa:da:5d:e0:3b:fb:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=8f34ca49-5037-46d5-9150-6b01053281cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:fb:d8:23:93:2e:7f:87:ff:49:a2:be:3b:
                    87:c3:c7:b0:6c:06:31:6e:cf:2f:5f:5b:30:bb:5a:
                    1d:75:ea:f9:0f:68:ce:64:34:23:59:4b:b7:91:46:
                    6a:4b:be:c7:62:7e:3b:d5:fe:ce:48:5a:8d:98:f2:
                    9e:74:aa:8d:f0:bb:c3:97:27:42:a7:7a:bc:06:8d:
                    e6:41:88:f3:10:54:fb:e1:f0:4d:39:8f:5a:60:11:
                    95:3d:9b:8a:85:c5:b4:25:97:18:fe:9a:96:0c:d5:
                    f8:a7:4d:eb:55:74:8e:ad:75:66:07:5a:e2:5e:a1:
                    24:d1:05:f1:e0:ae:ee:44:7e:bb:be:2c:bb:03:e6:
                    6b:34:5f:83:a7:74:6a:99:a8:d8:a8:fb:c9:6f:b8:
                    15:b0:00:98:42:75:54:70:89:98:9c:fa:50:06:f1:
                    77:bc:d1:07:b2:57:f5:9d:cb:3e:be:e5:cf:1a:02:
                    89:01:ab:1f:c9:61:70:10:8f:25:41:1e:c3:99:ad:
                    af:10:f9:56:74:9c:6d:f3:0e:3d:bf:a2:a4:66:7e:
                    bc:a3:07:e7:5d:0d:71:e5:4f:aa:89:55:ec:a3:cb:
                    f7:91:68:ad:4b:2b:01:5a:bd:4c:26:58:f7:ea:8b:
                    63:f2:9d:d3:da:4c:dd:dd:94:fa:3c:56:4b:a9:6a:
                    9d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:93:2C:51:25:73:6A:5E:A6:D9:E4:8B:60:F3:B6:06:D3:0F:F5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c7bad2e-b2ae-3c59-b276-3af2a83d776c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:90:66:fa:8a:96:3e:2e:7e:d2:b1:f9:ee:b7:22:15:4b:7b:
         3f:bc:12:cd:ec:85:05:24:a3:1f:ca:3a:1a:93:6a:c9:bb:12:
         73:b7:33:9c:49:e2:0a:05:4f:9f:a3:d1:59:9c:a0:c6:f8:e5:
         8e:e6:18:a6:22:11:0e:bd:59:56:46:72:a6:1f:0e:e1:55:bf:
         2e:a6:16:06:63:01:cc:53:a5:e9:bc:49:04:e5:0e:19:e9:4a:
         93:06:d4:4d:99:35:64:69:ef:ce:75:0a:58:bd:e3:3d:1f:e1:
         e5:18:b0:c4:41:7c:6b:09:69:54:61:1d:84:20:88:33:57:6d:
         ea:1a:4f:46:0d:fd:f1:f8:45:44:ce:7e:bb:d9:1e:83:a6:f5:
         aa:ee:3e:cb:2c:73:85:a4:28:51:af:27:8e:9f:ef:82:c8:7a:
         8c:d9:96:70:77:16:54:61:bd:4a:e6:a4:b9:e7:72:19:1e:cc:
         93:07:19:15:1a:81:58:5f:82:ea:58:9c:ba:86:d9:3c:67:7d:
         f6:fb:07:a8:b0:dd:25:21:c4:c4:48:2a:28:2c:26:7b:cc:7b:
         d2:1d:99:43:6a:17:69:a4:0c:b1:f8:b0:b5:5a:48:e1:20:da:
         e6:3e:d5:5d:0c:db:4b:3b:dd:44:ec:c0:4b:e0:62:b5:1f:ba:
         60:0c:66:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 13:17:29 2026 by rpki-client