Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6b87c0e0-2ef0-350b-a332-7df9dcef7a33.roa
File:                     6b87c0e0-2ef0-350b-a332-7df9dcef7a33.roa (raw, json)
Hash identifier:          CKDpyISjVH/VJ6QfRQa9/ZJD56ZefZLgX0xU6vAC/RE=
Subject key identifier:   DB:28:B6:35:2A:FB:4B:76:0D:8A:99:2B:B4:53:1A:B1:3E:41:A8:BD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E640FD5617FC806F06AB160C8
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6b87c0e0-2ef0-350b-a332-7df9dcef7a33.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     2856
IP address blocks:        23.27.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:d5:61:7f:c8:06:f0:6a:b1:60:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=7c95d9a0-5c0f-4c27-8685-6388f10354ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:33:cb:4c:94:df:27:87:16:0d:8b:a1:d0:ad:
                    31:a5:d0:3d:96:81:d5:72:44:bd:9f:64:10:e1:82:
                    ed:9c:8e:5c:b2:33:a1:a6:28:c5:a4:ba:94:e5:7f:
                    c6:a9:22:88:be:aa:37:c2:4f:10:39:d2:95:9a:91:
                    2a:80:31:3a:4d:6f:2b:1f:dd:ba:28:fb:a3:66:45:
                    db:d2:c8:9b:be:a7:26:31:11:00:eb:2a:e0:2f:9c:
                    7c:08:bb:2c:8b:df:13:94:81:53:86:e3:5b:4f:e8:
                    e8:c6:17:01:6d:d9:73:10:0a:01:de:5c:b8:13:d4:
                    41:8e:50:08:ac:e1:9f:a4:99:3b:56:e4:2e:96:52:
                    91:40:2c:49:cd:22:60:40:d9:a3:af:f3:d5:6c:88:
                    88:db:c2:00:7e:e2:64:21:28:11:d6:27:f8:03:c4:
                    a1:6c:44:32:c5:9f:2b:f1:4b:00:d7:40:23:65:20:
                    de:30:79:27:4d:fd:4a:0e:07:be:8f:b7:1f:15:36:
                    83:5a:0f:ed:73:48:eb:d4:75:c4:21:f0:64:58:22:
                    52:6a:b0:fa:f9:25:a7:5c:ee:35:1d:5c:71:e0:37:
                    ea:86:7d:94:29:6c:67:fb:ff:70:54:f6:72:20:0d:
                    f5:85:73:fc:4b:7f:01:9c:7d:0a:fb:91:3f:5c:e1:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:28:B6:35:2A:FB:4B:76:0D:8A:99:2B:B4:53:1A:B1:3E:41:A8:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6b87c0e0-2ef0-350b-a332-7df9dcef7a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:09:86:c3:1f:db:47:3c:94:83:a1:3f:f4:b7:85:53:ad:18:
         43:db:39:ce:b9:33:67:87:e3:14:6a:f9:ea:d6:d3:71:b5:8d:
         6a:e9:4d:c9:7c:7d:c4:13:22:a2:97:33:8b:1e:9b:0e:3c:3a:
         a5:c3:b2:d7:19:bc:ce:79:f9:55:b8:9f:84:ad:2f:c4:77:85:
         8e:e3:50:26:5c:e4:02:81:50:7f:e1:ec:59:6e:23:95:09:ab:
         d2:fc:08:96:fe:d2:19:19:dc:42:70:bb:49:15:a2:56:fd:bb:
         5c:23:8e:b7:d2:72:e8:a3:95:d8:87:07:b6:c2:95:50:7c:8c:
         39:fb:ae:2b:8b:47:46:ac:2f:07:34:b8:95:9a:d3:11:d7:74:
         3c:ca:d4:96:54:7d:54:4a:62:fe:56:83:60:80:48:92:66:13:
         f1:fa:2c:be:8e:d4:48:3b:06:74:b3:6a:85:94:cb:c2:fc:40:
         cc:34:e3:44:81:4a:71:8c:cf:0b:03:2b:00:ad:a1:bf:da:25:
         77:17:05:72:f9:43:e8:2b:0d:be:20:fe:9b:4a:02:02:5c:63:
         3c:0f:93:11:21:ec:6c:ad:8c:b4:d7:28:d2:24:62:ef:82:17:
         66:d2:e5:a5:c1:86:6a:f5:81:86:ab:c9:28:20:ad:18:a1:01:
         36:ac:05:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD9Vhf8gG8GqxYMgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
N2M5NWQ5YTAtNWMwZi00YzI3LTg2ODUtNjM4OGYxMDM1NGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjPLTJTfJ4cWDYuh0K0xpdA9loHVckS9n2QQ
4YLtnI5csjOhpijFpLqU5X/GqSKIvqo3wk8QOdKVmpEqgDE6TW8rH926KPujZkXb
0sibvqcmMREA6yrgL5x8CLssi98TlIFThuNbT+joxhcBbdlzEAoB3ly4E9RBjlAI
rOGfpJk7VuQullKRQCxJzSJgQNmjr/PVbIiI28IAfuJkISgR1if4A8ShbEQyxZ8r
8UsA10AjZSDeMHknTf1KDge+j7cfFTaDWg/tc0jr1HXEIfBkWCJSarD6+SWnXO41
HVxx4Dfqhn2UKWxn+/9wVPZyIA31hXP8S38BnH0K+5E/XOFlfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNsotjUq+0t2DYqZK7RTGrE+Qai9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNmI4N2MwZTAtMmVmMC0z
NTBiLWEzMzItN2RmOWRjZWY3YTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIwJhsMf20c8lIOhP/S3hVOtGEPbOc65M2eH4xRq+erW03G1jWrpTcl8
fcQTIqKXM4semw48OqXDstcZvM55+VW4n4StL8R3hY7jUCZc5AKBUH/h7FluI5UJ
q9L8CJb+0hkZ3EJwu0kVolb9u1wjjrfScuijldiHB7bClVB8jDn7riuLR0asLwc0
uJWa0xHXdDzK1JZUfVRKYv5Wg2CASJJmE/H6LL6O1Eg7BnSzaoWUy8L8QMw040SB
SnGMzwsDKwCtob/aJXcXBXL5Q+grDb4g/ptKAgJcYzwPkxEh7GytjLTXKNIkYu+C
F2bS5aXBhmr1gYarySggrRihATasBQE=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:34:16 2026 by rpki-client