Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa
File:                     b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa (raw, json)
Hash identifier:          H1GFPmE0vRI/v3ExQXoO8eYYANXVfNOU63gGA1oRGn4=
Subject key identifier:   25:E0:81:24:0E:85:44:CC:7B:E1:FB:21:EB:78:3E:82:1B:32:26:82
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E3E5F4AC148E8F28F17CBF940
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     134351
IP address blocks:        23.27.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:4a:c1:48:e8:f2:8f:17:cb:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=802bf423-bc75-432b-94b9-64bbfa8301da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cb:8a:86:43:1e:27:ea:9f:7a:aa:8d:f6:0a:
                    2d:af:6f:c0:be:2a:8e:cf:8c:ff:04:75:a8:92:a9:
                    33:8a:d7:be:cd:cb:2c:79:41:47:bc:36:91:59:89:
                    ed:88:5a:5f:c3:f8:2e:b8:9d:db:db:73:77:6d:2a:
                    c8:ab:26:5b:94:1e:9f:59:3a:bb:14:cd:27:c1:83:
                    b0:02:07:0d:4c:3c:4a:d1:d7:b6:53:d1:23:22:be:
                    52:e0:82:59:1b:92:9e:b8:ed:dc:5c:12:39:ca:9a:
                    f1:6e:7f:86:12:26:1e:7c:f9:08:6f:de:6f:e2:86:
                    84:da:44:d8:98:82:94:8e:b9:47:51:2e:47:a2:37:
                    e5:89:5a:8a:c1:f8:38:f4:76:77:35:5b:e5:ae:09:
                    ee:d4:1f:b1:03:70:45:ae:38:a0:ad:2f:80:33:05:
                    95:a6:86:30:da:f2:1c:79:e6:ef:72:f3:8e:36:98:
                    d2:44:03:e0:3b:35:eb:48:e5:8c:e9:f4:c9:a5:12:
                    fb:09:03:3d:93:c3:aa:51:d3:4b:a8:d3:ea:20:a8:
                    d6:e0:04:db:43:6d:6a:57:7e:10:9a:10:89:ef:f9:
                    d4:1d:42:61:7a:7f:66:94:6b:96:fb:f5:91:48:14:
                    ee:d0:1c:41:6b:c5:92:90:e5:ef:f8:9d:55:f4:0b:
                    cb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E0:81:24:0E:85:44:CC:7B:E1:FB:21:EB:78:3E:82:1B:32:26:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:dc:3c:91:4b:cb:2b:c6:fa:2b:63:b6:be:d0:28:74:5e:70:
         ee:ee:d1:f6:bb:e3:a1:3a:b9:c7:21:b2:1b:60:c4:6d:8f:18:
         88:97:d8:85:74:f2:a7:76:82:39:11:9a:de:fd:f1:60:c6:2d:
         8a:e5:b0:a8:6a:53:c9:09:5a:e1:2f:35:38:4a:95:41:69:94:
         f9:df:1a:f0:f8:df:f0:de:fb:f4:76:bd:4c:3b:78:7c:08:48:
         38:8b:66:82:59:a8:06:50:80:0e:6e:63:d7:48:e0:2d:00:c7:
         06:16:c0:8e:ed:17:3b:f7:61:4a:9b:76:09:91:c8:a2:e7:99:
         96:52:50:fb:1f:e8:f1:be:95:73:95:a8:0b:80:ea:bc:14:9e:
         af:5c:6e:cf:50:77:fb:9b:d6:80:0e:cc:71:f7:d6:ef:61:dc:
         c0:f9:23:57:06:d0:74:cc:89:c0:ac:09:d9:15:38:3f:ab:c5:
         31:b4:52:11:a0:e3:a9:a0:c2:7d:c2:18:69:ab:af:9b:8d:b5:
         9d:fd:a2:3e:c7:87:8b:09:82:c0:b2:3a:7f:0d:41:5e:f8:ba:
         18:7e:e2:9d:01:28:08:9c:c2:a7:fd:d0:16:25:20:29:d1:b3:
         55:68:9a:2c:df:cf:2a:ff:d6:58:b2:f9:bf:14:71:a5:3e:c9:
         81:71:9d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:33:50 2026 by rpki-client