Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/736e2157-1e63-338f-a63a-466ec44a8a29.roa
File:                     736e2157-1e63-338f-a63a-466ec44a8a29.roa (raw, json)
Hash identifier:          POHtU+c/CrAbla1e2Tl5r2fZ8CJfeVSP/huJhTrvsKU=
Subject key identifier:   7B:CB:4D:F4:77:65:92:E6:22:9E:A2:4F:68:4F:98:3B:47:12:3D:89
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E15E4A48115C89AE7E002FFC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/736e2157-1e63-338f-a63a-466ec44a8a29.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     401152
IP address blocks:        23.27.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:a4:81:15:c8:9a:e7:e0:02:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=6d8bb03c-ef1d-4865-b9a5-1ceca28d6cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:54:5e:67:bc:18:3b:c0:9d:5e:d3:6b:c7:10:
                    31:2e:0e:34:24:d5:24:70:89:29:98:5a:5f:ec:4d:
                    ca:ff:d7:70:09:f0:6f:3d:03:75:5f:8e:c1:33:66:
                    01:e1:7e:88:96:dc:96:4b:84:07:7a:5e:f2:63:3a:
                    38:13:ec:03:cb:59:4c:7b:01:a4:54:cf:03:82:cf:
                    01:5a:c9:b5:00:58:61:53:13:01:dc:ce:9d:03:fe:
                    79:68:f7:69:1c:ce:38:f4:c5:c9:33:03:2c:7b:96:
                    f9:98:d0:72:a6:76:cc:72:2a:3e:45:c3:f0:28:51:
                    46:7c:82:33:61:39:c8:33:d5:af:21:aa:9c:a4:b0:
                    9b:cf:b7:37:d5:13:d7:b1:c8:8f:bc:6b:79:37:7e:
                    62:53:77:39:8a:ac:b5:c1:5d:e1:f9:bb:73:d4:64:
                    82:dd:be:c2:06:9d:e4:c5:ae:3d:0f:27:d5:6e:b7:
                    85:41:c0:63:0e:b0:8c:94:2d:9c:31:82:c7:d5:ae:
                    26:ef:a3:9d:24:25:21:dd:20:c7:9e:5a:f9:24:75:
                    b8:0c:8b:88:ad:95:49:a5:b6:e7:34:58:56:8f:8c:
                    a0:ab:2b:39:99:58:82:b4:32:47:4c:dd:a2:ea:ec:
                    54:27:ba:bd:cf:8d:12:2f:b5:eb:b5:c8:1f:8c:40:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CB:4D:F4:77:65:92:E6:22:9E:A2:4F:68:4F:98:3B:47:12:3D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/736e2157-1e63-338f-a63a-466ec44a8a29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a2:6f:80:b7:c7:90:b7:4d:80:73:72:b0:40:4f:48:7b:ce:
         60:08:a6:b8:6a:93:99:0e:56:00:3a:05:f1:a7:a2:0b:16:04:
         bc:f2:0e:ed:76:1e:82:f5:9f:b1:44:59:2c:7b:34:30:86:22:
         62:88:dc:a2:7c:12:9e:97:bc:43:a6:ff:2d:23:63:e7:91:18:
         d5:48:3c:0a:b0:fc:49:79:a7:d7:a7:31:e6:a4:e5:b5:60:7e:
         46:0a:a1:0f:2f:cf:c1:97:93:18:36:d2:88:01:a4:02:f0:36:
         e5:79:24:98:78:3d:28:10:a1:cd:28:2b:7f:81:92:50:4f:d2:
         95:07:16:ad:8e:df:3a:3d:67:b0:0e:d3:ee:6d:9d:32:7b:45:
         b1:12:02:d6:98:8b:3c:f7:27:af:61:85:07:01:2e:12:82:7b:
         29:5f:80:47:6e:4b:83:95:77:16:04:01:35:2e:44:ac:05:5f:
         f9:ca:d7:3d:0c:ec:7e:23:2b:33:82:fb:bd:a6:e3:e7:43:71:
         56:c6:c9:46:0f:af:59:3d:e7:1a:a9:ec:d4:4a:21:84:e9:66:
         a2:76:2d:5e:be:77:df:7a:a2:2b:f7:d0:09:39:2c:a1:e4:40:
         b7:23:57:2e:5a:eb:d7:cd:33:9e:b9:87:3d:b1:dc:2d:21:b9:
         42:31:72:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:38:49 2026 by rpki-client