Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/27c6c150-4348-3c20-90f5-4786f24b2bff.roa
File:                     27c6c150-4348-3c20-90f5-4786f24b2bff.roa (raw, json)
Hash identifier:          wVd1Lp4ltJsYnV420El0XAudq8jnGnJwYl6tcywNdiM=
Subject key identifier:   C4:89:56:D0:50:44:A9:B1:23:24:54:64:E7:BC:8C:B5:33:C3:61:0E
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584ED9C75A44D9C1BE9D78E9F500
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/27c6c150-4348-3c20-90f5-4786f24b2bff.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     28753
IP address blocks:        23.19.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:5a:44:d9:c1:be:9d:78:e9:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=19fc9823-4fbe-4fd1-998f-1f75395246fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ef:f2:cb:c5:a4:45:64:db:97:33:a7:c1:1c:
                    eb:19:f2:b8:59:cf:72:36:5f:41:ef:1d:8e:d3:4a:
                    62:b2:d2:32:e2:69:76:33:d9:84:04:1e:35:d1:c5:
                    a0:b5:60:9f:f5:2f:33:08:e7:f6:56:f7:e1:70:08:
                    54:ef:48:84:7d:50:6d:52:19:43:84:70:25:b8:cb:
                    bf:44:ac:d3:58:d3:e2:a0:71:dc:2b:ec:a1:c6:da:
                    c1:f0:37:df:a1:a2:ad:f0:a5:b9:09:35:87:ed:7c:
                    db:fb:de:03:cf:68:d6:fa:5e:9f:c4:0a:be:c4:3e:
                    c7:cf:ef:ad:45:c3:06:46:e3:14:0f:96:af:8e:d7:
                    17:24:ba:35:e2:f5:85:fe:69:63:5a:29:40:d1:7e:
                    54:06:c1:ef:9e:f3:27:5d:20:be:48:9b:b7:5d:8a:
                    3a:7f:ba:e7:1f:e4:0f:4d:f3:90:37:c3:da:e1:71:
                    19:b9:1c:c2:0d:d0:af:e9:b8:c3:12:50:c1:df:5c:
                    ef:48:a5:bb:2c:bc:34:e0:cb:42:0b:51:f0:cd:8e:
                    f4:7b:ec:14:cd:e4:52:36:df:39:84:8e:77:92:3a:
                    49:25:07:28:73:ed:16:ac:1b:48:0c:0f:53:28:c6:
                    5f:97:c4:93:ad:0d:67:11:d7:53:3f:a9:49:e2:20:
                    fc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:89:56:D0:50:44:A9:B1:23:24:54:64:E7:BC:8C:B5:33:C3:61:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/27c6c150-4348-3c20-90f5-4786f24b2bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:52:c8:91:72:4d:dd:a7:ee:25:a0:c4:39:ba:6d:9e:6d:8d:
         06:4a:0b:44:8a:c7:ab:0b:2b:34:e2:e4:17:52:5f:da:7c:76:
         fc:ee:dc:19:48:4b:7c:6e:3c:8c:03:bc:b3:26:b5:2e:4f:89:
         2f:7e:d7:4e:8b:0e:a0:ef:8f:45:5b:1f:45:b5:32:fb:c6:70:
         70:2b:6b:52:d8:02:32:1b:66:b8:2d:93:4d:26:a1:cf:59:7d:
         3b:70:ec:75:a4:36:4f:09:64:49:7e:d3:02:21:5c:b1:2c:9b:
         1d:e3:88:04:83:25:54:96:d3:86:80:0a:fd:ad:95:4e:3e:37:
         94:d2:f0:72:56:37:72:09:0b:5e:fb:f1:c5:68:b8:94:cf:be:
         1f:81:82:db:2f:85:89:14:9a:d4:8b:6e:05:11:0b:1e:28:eb:
         b0:e2:3b:81:95:51:79:88:fc:ba:0d:3d:42:85:3c:b4:81:b4:
         f7:30:93:fa:93:51:15:01:64:21:3a:d2:8a:29:94:d6:8f:e6:
         08:d2:a2:46:85:74:08:3f:b6:1e:e9:12:f9:0e:f5:96:3e:a1:
         b1:1c:7c:43:55:34:c9:51:9a:a3:f4:6f:3c:7f:c2:dc:13:88:
         b7:4b:f8:fc:1b:85:7d:87:aa:92:26:d8:f4:3d:e2:b9:c0:e4:
         d6:33:fb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:23:49 2026 by rpki-client