Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/acf69d96-56e5-352f-a8b1-4375645fec96.roa
File:                     acf69d96-56e5-352f-a8b1-4375645fec96.roa (raw, json)
Hash identifier:          Tp/1X9orbhYVq1SXRQoxYt+tpOfX+LYMPzk1EgdhyIM=
Subject key identifier:   34:27:31:FC:F8:9A:D5:E4:78:3D:A0:BC:F7:AA:D0:4D:34:C0:8E:0F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DEC7B2EDBC984E6E0691D1580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/acf69d96-56e5-352f-a8b1-4375645fec96.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     206092
IP address blocks:        23.27.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:2e:db:c9:84:e6:e0:69:1d:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=8c7fec1d-e70f-4993-bd98-6e59054b8b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:ee:22:89:dc:8b:44:38:9f:5b:13:77:b8:
                    f3:e5:ad:f6:00:c0:c7:6f:8f:82:81:84:6e:26:5c:
                    dd:7f:f1:e2:72:5a:a3:ae:2f:f0:76:76:d6:0c:d6:
                    b4:12:30:bf:fc:b2:26:85:d8:27:5c:9f:8e:d5:9a:
                    4c:11:68:6e:bb:52:f0:7f:56:30:72:db:e8:39:ad:
                    99:dc:c9:72:67:cd:da:a7:92:03:cc:30:61:be:92:
                    63:92:fd:3b:c8:fb:f2:29:dc:98:d3:a5:66:c7:7d:
                    94:c3:89:9b:ca:8c:e6:a4:ff:1c:c7:ec:ae:0e:24:
                    1d:f5:66:c7:dd:75:bf:ac:07:f2:5a:fa:61:cb:66:
                    77:cf:9b:f3:0e:f3:72:30:a5:f5:68:2c:32:1b:78:
                    31:e4:57:08:f9:63:fa:40:61:f6:87:26:fb:2f:8d:
                    c3:60:fe:0f:9d:11:19:d3:f2:35:be:22:f5:f3:86:
                    69:2f:4e:fc:c1:aa:5a:1e:60:85:d4:93:24:55:12:
                    72:fa:9f:a8:48:09:aa:76:1c:ef:25:a0:50:53:1b:
                    bb:5a:ff:bd:87:14:4d:f5:b9:b0:f0:d3:89:47:34:
                    0a:90:22:f5:95:25:78:b6:e9:80:10:80:00:b6:6b:
                    6a:15:6a:78:1f:f7:ad:66:71:6b:65:16:6e:31:ce:
                    e2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:27:31:FC:F8:9A:D5:E4:78:3D:A0:BC:F7:AA:D0:4D:34:C0:8E:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/acf69d96-56e5-352f-a8b1-4375645fec96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:1c:cd:be:05:99:c3:b2:c9:9c:7a:dd:1b:95:03:44:25:66:
         6f:80:ee:fd:43:25:0b:f4:ff:78:74:01:ee:ee:a5:6d:bf:47:
         81:af:66:8b:7f:e6:4e:e4:12:18:1a:a9:e8:b5:2e:ec:33:b2:
         01:37:7d:04:cf:6e:c6:3d:97:96:a0:5d:81:dc:85:d1:bf:5b:
         a0:6c:f4:76:31:07:4e:1f:0d:d4:11:6d:54:fe:e4:f0:66:2b:
         6b:71:2c:0e:03:f4:90:5e:78:f3:ba:1d:5d:55:e9:0f:ee:b7:
         22:3f:d1:de:90:d3:98:f7:3d:f5:38:b0:6b:6d:4f:1d:7c:a9:
         6e:68:67:4c:b2:51:75:b2:de:17:2f:64:1e:09:bf:6a:24:44:
         3f:53:ef:13:07:d7:67:cf:b5:31:2d:3a:c7:aa:e3:bd:e3:13:
         07:9a:53:23:26:f4:14:06:0b:26:f8:1f:2a:d7:a5:7f:20:27:
         94:91:1f:ea:b9:99:b2:72:50:61:0d:59:60:eb:e8:26:e9:26:
         b5:37:ed:2c:02:c8:a8:3b:90:eb:b7:bb:5f:78:28:88:da:79:
         21:4a:02:62:22:b4:08:6d:77:76:0a:8f:e2:85:47:5b:27:81:
         66:e3:1f:8a:60:ad:c3:d5:07:e5:e5:e4:d3:62:23:a9:7c:a9:
         ae:e3:0a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:15:02 2026 by rpki-client