Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d8bdaa8c-3b57-323f-aec6-d16ca9b9be95.roa
File:                     d8bdaa8c-3b57-323f-aec6-d16ca9b9be95.roa (raw, json)
Hash identifier:          FPI2cr+/DUJd/v+0Y4AHhlpVf9RuoQy5t2hQU1o0rjY=
Subject key identifier:   E9:8B:A5:90:D2:8C:9C:0D:11:E7:ED:93:97:69:6A:08:C2:DE:DB:F5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DEF45F06AC9F1B4F59D549800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d8bdaa8c-3b57-323f-aec6-d16ca9b9be95.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     18779
IP address blocks:        23.27.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:f0:6a:c9:f1:b4:f5:9d:54:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=349a10c5-bc27-480a-9239-a31a7b4a146c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:e4:81:c9:63:1c:4b:0a:63:a2:75:ea:a4:
                    0a:f8:07:9c:3c:60:8b:28:56:d9:7c:8f:7f:bf:c4:
                    f4:68:3e:21:33:8d:9d:f1:69:fa:94:90:83:13:66:
                    28:e0:0b:6c:fa:06:6d:f2:2b:d0:63:8e:41:3f:9f:
                    99:fa:bd:0d:da:5e:da:69:27:3a:38:a1:83:f8:fb:
                    3d:b7:dc:88:2d:c8:ab:9a:c6:ac:e0:08:e9:c2:0c:
                    6c:65:cd:84:bd:40:1f:34:5e:fa:8e:10:b1:4b:30:
                    b5:6c:17:00:1d:4f:28:aa:7d:4e:ef:3b:4d:3e:34:
                    8d:25:dc:2f:e8:55:6a:78:3a:a5:18:3d:3a:ec:88:
                    18:85:a1:1e:59:29:c3:e7:db:e9:c6:98:85:90:99:
                    da:ed:24:37:53:24:9f:da:38:30:9e:0a:6b:65:e6:
                    b6:81:63:49:10:99:41:77:89:7b:bb:f3:1b:03:eb:
                    f8:bb:3e:b6:8a:b4:d9:1c:f8:cb:64:40:e3:98:30:
                    09:71:11:3b:49:de:20:b3:da:10:5e:9d:88:81:00:
                    b6:b1:bc:5e:92:a1:30:a0:7c:06:e0:18:ee:eb:bd:
                    a8:6f:8c:2e:38:60:12:e5:2a:3c:6d:82:b4:38:db:
                    29:ce:26:80:54:af:21:8e:c6:cc:d4:21:fc:0b:bd:
                    d1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:8B:A5:90:D2:8C:9C:0D:11:E7:ED:93:97:69:6A:08:C2:DE:DB:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d8bdaa8c-3b57-323f-aec6-d16ca9b9be95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ec:95:bc:82:56:2e:72:c4:fc:9c:cf:04:0f:0e:a6:e3:a8:
         a8:5e:b5:6d:81:0f:ea:57:c1:e5:14:9a:3e:09:2d:21:fc:60:
         21:9d:2a:62:60:9e:19:02:f4:f7:e7:4e:aa:88:24:4e:01:2f:
         8a:29:e1:f8:b5:72:be:74:61:c8:78:82:4d:b2:e0:80:71:5f:
         4d:54:cd:fa:22:d4:91:4d:d7:ee:f4:62:dc:74:fd:34:3c:42:
         27:b4:d8:9e:c5:6a:d6:b6:b6:0c:3a:ea:ea:ec:f6:54:1d:f5:
         33:4e:0d:01:b4:76:f0:8d:e1:eb:ab:bd:69:2d:17:b4:82:15:
         59:18:3d:1d:2e:e8:a2:bf:98:d6:84:ef:8e:88:43:9e:fb:ac:
         54:5e:3d:66:21:e7:74:26:b0:e1:8a:26:b1:d3:e9:1f:10:cf:
         bb:18:ce:d7:08:c0:70:91:29:41:1f:cb:cc:3d:44:d8:63:93:
         15:96:79:53:2f:d6:e8:fd:bc:83:e0:06:a2:56:00:d1:ad:e4:
         59:df:71:6b:f7:c5:c4:f5:75:5d:28:0c:6f:c8:bd:6d:1f:ae:
         f7:85:c7:0c:05:ee:65:60:40:88:df:b6:8a:91:23:30:e2:7f:
         4c:3f:d9:65:f2:ed:9e:63:2e:d2:95:be:52:15:2b:9e:44:12:
         3f:bd:c5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:13:24 2026 by rpki-client