Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4e7d620-51e5-3d01-8872-c5f8bc1f7c3e.roa
File:                     b4e7d620-51e5-3d01-8872-c5f8bc1f7c3e.roa (raw, json)
Hash identifier:          WBX93oxmupi7tQU8FgTqw1uH0kiu2oiUuBBwuKsYFYk=
Subject key identifier:   E5:98:F4:88:71:A1:24:0F:10:0B:61:09:03:F4:CE:14:AC:57:6A:62
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EC0A7558AFAFAEB4BE8DA2900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4e7d620-51e5-3d01-8872-c5f8bc1f7c3e.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     149440
IP address blocks:        23.27.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:55:8a:fa:fa:eb:4b:e8:da:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=6338f842-e7dd-4cd1-abc6-390b2b34b88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:7c:bf:ed:ef:39:0f:01:74:b0:10:1f:21:
                    2d:8e:7f:80:73:cc:c3:29:92:c9:b6:7c:b5:de:ff:
                    8b:1d:b7:5f:26:8e:34:61:76:da:c6:2f:b9:ff:93:
                    f0:18:f8:a2:2b:8e:6e:04:61:9a:ab:25:09:42:2a:
                    eb:61:04:ca:dd:b1:02:9f:78:a6:7e:4e:19:2f:78:
                    be:0a:b8:a0:16:69:29:64:ff:4e:9b:4a:f3:a5:58:
                    e2:11:86:ee:a2:2b:b6:d4:f4:f4:0a:da:7b:6a:17:
                    45:bc:d3:1f:ee:f0:4f:02:88:da:e8:4b:e0:b0:bc:
                    8a:29:9e:d0:ce:bf:de:bc:bf:5c:83:b6:61:ee:29:
                    85:b4:97:b6:be:35:f4:a9:86:90:a7:49:52:d4:ad:
                    f2:6a:4c:98:93:f9:0f:f9:46:72:38:c5:c4:1c:1e:
                    b8:5d:a4:3b:ea:7c:60:4f:6b:5f:77:2d:06:e4:96:
                    ff:0b:ad:80:9c:49:bf:73:b5:61:fd:3b:95:48:9a:
                    bd:7d:8e:e7:55:24:33:a3:6e:c0:5f:0e:b5:3c:45:
                    77:69:08:c2:fd:b6:e3:eb:e2:e9:5d:bb:ec:52:a6:
                    9d:df:2b:0c:84:46:e0:48:8c:f1:bb:4d:da:a7:51:
                    11:59:44:df:c8:c2:d4:2a:e7:5f:25:46:2f:10:c3:
                    e2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:98:F4:88:71:A1:24:0F:10:0B:61:09:03:F4:CE:14:AC:57:6A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4e7d620-51e5-3d01-8872-c5f8bc1f7c3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:dd:8d:36:3c:c8:b1:01:fe:42:d9:b3:39:e3:e4:94:a3:e7:
         08:1f:14:c9:24:c0:88:48:41:7c:41:03:21:2d:88:cf:2b:cf:
         d4:80:97:53:06:01:75:81:8a:48:d7:0d:f4:4a:75:94:7e:7b:
         de:70:55:72:16:78:f6:0c:49:4b:ec:e9:28:6c:72:67:1d:3b:
         d7:bd:57:d4:8c:51:41:a6:9e:65:a6:21:33:66:8d:40:56:e8:
         aa:31:cc:c2:8d:53:a6:ee:7c:08:93:9a:10:26:58:d0:83:94:
         75:c8:33:89:90:80:59:61:1a:60:79:86:96:57:37:b2:88:50:
         c1:7a:e5:f3:56:51:42:8e:ea:33:29:6c:5f:dc:9c:0c:08:bd:
         48:da:b9:0d:0b:03:cd:e2:34:0c:9a:5d:02:6a:20:d3:91:d6:
         91:94:2f:19:b8:59:71:53:23:0f:5e:a9:19:e6:30:67:df:0d:
         1b:fc:78:b5:1b:d6:e4:61:b6:22:2e:c5:4e:9f:0c:e6:52:94:
         15:96:1f:21:0f:32:f9:d0:ab:4b:52:9d:32:cc:10:8e:07:40:
         62:27:2d:e1:26:fd:70:f2:e0:97:75:22:f9:e3:d3:22:3f:a4:
         14:49:bd:c4:df:fb:21:b1:a4:f1:7f:29:89:9b:59:96:52:61:
         6d:ad:fd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:15:17 2026 by rpki-client