Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d86346d-cd14-35ef-b0a4-985b0d9f8cc5.roa
File:                     6d86346d-cd14-35ef-b0a4-985b0d9f8cc5.roa (raw, json)
Hash identifier:          D2XnUl9gcKSHdW1gYqbQk3ISpmMZWIYUk7UfTCBVe30=
Subject key identifier:   6E:5D:5B:D4:64:67:AE:31:14:03:0B:89:A9:94:E2:6B:5F:22:E7:5F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EB8476AB0C6AD88C3BBEEE0D0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d86346d-cd14-35ef-b0a4-985b0d9f8cc5.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     401152
IP address blocks:        23.27.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:6a:b0:c6:ad:88:c3:bb:ee:e0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=d9db0224-8c63-4cad-bacd-fa43636a7ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f3:e9:08:35:92:00:9a:fe:41:32:57:e9:42:
                    c9:f5:7d:7d:92:99:55:0a:64:83:1b:5a:a7:45:a4:
                    2d:8a:72:dd:cc:78:a6:bc:34:6f:45:57:08:39:05:
                    ea:35:17:09:ec:9a:57:1a:85:4f:78:ef:c3:a7:a8:
                    0c:c4:f6:5f:f5:c4:5b:fc:7a:09:1b:89:ac:3a:56:
                    4d:e5:92:2d:af:6c:3f:be:10:f2:46:dd:45:7a:e1:
                    d9:49:ed:24:78:74:cf:47:28:64:e0:5a:46:40:2c:
                    17:6d:d3:19:0f:2b:62:07:43:6d:fe:8f:27:a2:47:
                    52:43:21:e9:2a:4b:bc:33:96:c6:8f:cc:4d:6d:ae:
                    bc:47:86:22:64:87:51:e2:1e:69:0d:0a:80:fb:de:
                    9c:d8:90:89:2d:38:7e:75:17:d9:53:7f:90:8c:c4:
                    c1:ca:98:cf:ef:8a:56:18:31:de:d8:b5:83:ec:72:
                    dd:f9:70:53:31:82:a2:40:e4:e2:e0:86:e6:41:af:
                    37:b0:8d:69:7c:42:1e:7a:a5:33:20:51:f9:81:86:
                    d3:61:e9:52:d4:a6:c5:c9:1d:94:05:d1:91:e9:61:
                    ca:9c:10:f7:4e:02:b9:7e:bd:ef:6d:38:1e:5f:14:
                    cb:de:b3:5d:00:74:8f:7e:9d:44:28:e9:8d:de:a2:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5D:5B:D4:64:67:AE:31:14:03:0B:89:A9:94:E2:6B:5F:22:E7:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d86346d-cd14-35ef-b0a4-985b0d9f8cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a2:a1:8c:09:a9:94:c6:5d:b7:97:20:cb:62:8c:2c:20:aa:
         37:d6:c9:c0:4f:31:bd:48:ca:ee:9f:89:e1:71:89:69:84:21:
         39:ed:03:f0:ee:0b:f0:09:4b:9b:69:6e:ae:13:7a:dc:61:bd:
         fa:4b:ed:c2:2f:02:b9:8a:54:db:8b:7d:98:4d:93:50:2e:0e:
         58:a2:bc:06:7a:02:0f:4f:bd:e2:35:5a:51:65:39:d2:b4:5b:
         c1:db:53:9b:e8:0b:f0:88:bd:92:3a:cc:f2:14:63:82:0a:ee:
         90:2c:ff:ae:1e:54:66:c5:4b:13:8e:be:42:46:d5:59:f3:64:
         3d:56:2e:0c:56:37:62:23:c9:04:34:ce:ac:9d:d6:47:42:41:
         f3:11:6b:36:15:fd:87:87:62:42:42:50:fc:3c:9a:4f:1e:0e:
         cc:89:1a:a8:c9:7b:d0:6d:2c:ac:76:af:c9:84:b4:9c:ec:2c:
         fd:b1:97:6a:be:62:b2:ba:a2:10:2d:1f:9c:86:b9:87:a3:71:
         b8:97:b9:31:2b:6f:31:3a:6c:f6:b7:d5:fa:cb:22:b5:9a:6b:
         24:2c:a2:42:6f:d0:31:ce:80:36:2d:64:69:5a:f1:aa:5e:4e:
         42:14:47:4a:6c:da:eb:7f:27:dd:bd:9a:e1:2e:38:fe:c3:3a:
         e9:85:11:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 09:26:43 2026 by rpki-client