Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9c9ec827-482c-38d7-87a0-e10ed6b1229a.roa
File:                     9c9ec827-482c-38d7-87a0-e10ed6b1229a.roa (raw, json)
Hash identifier:          xTZX1Wv6oBLzCQ75j1U22O53VOgyQcUtM8OylQ5x15o=
Subject key identifier:   F9:4D:D7:EB:51:06:C6:CD:FD:9A:A6:B8:AB:E5:4D:97:6B:07:70:E4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E640FD556B537A0BF9E608E80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9c9ec827-482c-38d7-87a0-e10ed6b1229a.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     2856
IP address blocks:        23.27.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:d5:56:b5:37:a0:bf:9e:60:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=ec51f586-613d-4411-8332-cff438966a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:97:43:52:d2:ca:b8:fa:13:c9:eb:90:79:ca:
                    ff:c1:88:c1:e3:38:cc:a0:b3:7c:95:1e:cf:4e:a1:
                    51:c3:ba:d4:42:70:97:ba:19:71:38:05:f4:d8:32:
                    c5:84:55:45:fb:ec:91:a8:fd:e1:91:49:8b:07:72:
                    ab:71:07:06:d6:ae:8b:b9:0a:8e:4a:0b:9c:45:1d:
                    6c:8d:04:e4:bc:15:de:4d:5f:bc:b1:b4:a3:0c:73:
                    d7:26:8d:f0:41:f4:ad:a2:e3:5e:b9:3f:cb:67:49:
                    53:1d:29:32:b6:b3:0d:b6:8d:4f:37:d8:5b:ca:fc:
                    d3:bb:59:41:5b:ef:8d:a0:f4:a3:06:8f:2f:e9:9e:
                    64:11:54:20:02:ca:71:d5:69:39:4b:7d:cf:e8:1f:
                    dc:60:b6:57:14:5e:56:31:84:6b:f5:33:67:bf:b7:
                    7c:59:f4:76:cc:64:65:a2:fe:fd:21:d2:92:37:4b:
                    1a:15:e2:33:3e:90:9f:86:fd:aa:26:0c:a3:70:60:
                    5f:76:d2:9a:90:70:fc:40:6a:06:34:3c:2c:a2:7b:
                    9e:07:aa:d5:52:82:95:67:6d:28:b7:85:09:18:c3:
                    17:f2:96:46:7b:79:c1:ad:2f:49:5a:2a:17:72:f4:
                    9b:10:19:2e:fc:c0:56:32:4c:b5:b1:bc:bc:09:7c:
                    a3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4D:D7:EB:51:06:C6:CD:FD:9A:A6:B8:AB:E5:4D:97:6B:07:70:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9c9ec827-482c-38d7-87a0-e10ed6b1229a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:f4:fb:07:92:65:24:03:36:7d:cb:2e:75:be:cc:77:c9:9a:
         86:be:18:6b:9b:0f:55:7d:39:ce:0d:94:ef:9a:d0:22:11:54:
         c5:60:87:20:43:ec:3b:a7:12:cd:43:08:bb:0d:2d:77:8e:6f:
         e7:95:51:90:4a:fd:5b:65:0b:1b:42:1d:9a:87:bd:e4:98:8b:
         93:9a:ff:a0:5e:67:74:a5:f8:d2:fc:a3:52:ea:aa:f2:8c:fa:
         a0:da:99:6f:b8:49:03:a8:fe:b3:74:d3:94:9b:a3:e6:06:0d:
         07:c4:66:12:d0:fa:ca:4f:24:e3:17:6b:a3:8e:3f:1f:99:16:
         b4:ae:06:b8:a3:61:15:b3:35:33:3b:1a:87:f2:91:7d:12:44:
         3b:e3:a1:3f:d6:55:10:db:f9:a0:d3:7e:7a:5f:11:11:d6:72:
         04:f0:53:55:4d:de:d5:9d:c2:7e:3d:2a:ea:5b:57:76:26:c3:
         9a:ba:3f:36:58:1f:37:4f:d2:d3:52:e8:bd:eb:12:8b:74:dc:
         e3:0c:d8:c2:a8:66:bd:5d:36:0d:4d:d2:28:94:37:a0:fd:c4:
         0d:a3:0e:8f:ed:20:f7:ed:60:c3:9e:93:f4:8d:93:8b:f5:76:
         b1:39:b6:a1:95:a2:35:f0:94:fc:52:03:cb:81:c5:6b:64:07:
         f8:6c:04:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:34:49 2026 by rpki-client