Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/956593cc-f2c3-388a-99d5-f11a2ce24419.roa
File:                     956593cc-f2c3-388a-99d5-f11a2ce24419.roa (raw, json)
Hash identifier:          TJ5fMO9lm0bbGwmrJl7WX9FHV0NyGQm5KWdpBVSBDOE=
Subject key identifier:   42:DE:ED:CB:62:80:CE:CD:FC:80:DE:E5:CD:AD:D6:04:C4:ED:3B:07
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DE6E5D8DAA9F5B1C1849D9660
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/956593cc-f2c3-388a-99d5-f11a2ce24419.roa
Signing time:             Thu 21 May 2026 01:00:25 +0000
ROA not before:           Thu 21 May 2026 01:00:25 +0000
ROA not after:            Wed 19 Aug 2026 01:00:25 +0000
asID:                     18779
IP address blocks:        23.27.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:e5:d8:da:a9:f5:b1:c1:84:9d:96:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 21 01:00:25 2026 GMT
            Not After : Aug 19 01:00:25 2026 GMT
        Subject: CN=5ac68dd9-e1e9-47ee-ae02-71fb23af1e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:d1:65:79:61:c5:11:eb:4a:41:22:04:72:
                    3f:e5:a5:3e:8e:83:2b:b3:71:b3:fd:23:fe:05:63:
                    d1:e8:66:1e:00:ec:ef:53:2b:b8:18:1c:ba:c2:e4:
                    6b:c1:20:05:6d:f3:7e:a1:f5:f6:b1:28:0d:2f:28:
                    97:67:f3:aa:75:05:a1:5e:70:bb:d7:e3:c7:dc:4c:
                    35:25:5b:74:96:f2:63:54:8c:eb:46:53:77:31:68:
                    57:9c:ba:a2:af:40:fb:54:29:4d:e0:fd:69:3c:b7:
                    1f:4d:eb:fd:45:30:f7:43:dd:67:8a:8a:c3:fc:a8:
                    73:a4:94:f6:a9:d3:a5:3c:eb:3e:d2:89:98:07:d2:
                    a1:39:3a:94:f3:34:9d:4b:69:60:4c:de:39:a2:12:
                    c6:d5:65:81:32:79:bd:e4:ee:b8:59:ff:e1:95:18:
                    b8:11:fa:54:19:ce:d7:30:fb:15:43:d8:3c:3d:94:
                    f0:43:b9:d7:28:53:7b:54:ce:7c:bd:a5:47:f9:1f:
                    d3:25:c3:e3:6d:c7:e3:52:a1:89:29:e7:fa:bf:5c:
                    8c:f5:8b:d6:af:5e:00:c0:8c:c1:ba:05:09:0c:9a:
                    bb:ac:e2:be:18:59:6a:3e:d7:98:62:cb:2c:40:86:
                    f3:1d:c1:45:3e:eb:af:5e:c7:88:db:32:6b:ac:ba:
                    8d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DE:ED:CB:62:80:CE:CD:FC:80:DE:E5:CD:AD:D6:04:C4:ED:3B:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/956593cc-f2c3-388a-99d5-f11a2ce24419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:06:75:43:5e:62:9c:ce:c4:a2:fe:05:2f:1d:e3:b7:f5:06:
         ac:5e:3a:dc:f0:76:fc:b8:17:66:e8:92:e5:0a:09:78:26:3f:
         ee:a6:39:7d:ab:c9:6f:37:84:a7:fd:c7:d4:8e:8a:fb:ad:9a:
         16:09:97:6e:1e:3c:5a:ab:0e:44:d4:5c:fd:6e:29:49:69:52:
         61:cc:bd:53:cb:7a:6c:e4:79:46:83:33:26:6e:29:45:d3:33:
         36:d6:71:26:77:c8:53:ad:52:5c:7e:8d:91:d4:36:a8:1e:33:
         29:0c:f3:b5:4a:4f:d0:a5:d0:ed:ed:07:0f:b7:b8:e1:29:8f:
         56:34:ca:8f:27:49:ae:a5:b9:b0:e4:3a:63:a2:39:19:21:fb:
         52:4a:cd:5b:d1:ad:5f:df:5d:8d:4a:2b:8a:58:98:5a:8f:8a:
         92:4d:24:fb:57:22:28:c9:a8:63:ff:db:db:e0:f8:c9:1d:14:
         24:58:01:3a:36:37:86:0d:9a:a1:38:dd:64:1d:cb:45:18:b3:
         27:b5:7c:2a:ca:cf:9d:f4:4c:e3:b8:72:f1:dd:3b:13:55:2c:
         87:d1:45:cd:b6:e9:c2:f1:7e:a8:a0:39:4c:59:23:01:a7:1c:
         d1:c0:3a:cc:e7:2d:84:77:ee:aa:c5:6a:10:d2:e2:c9:d1:87:
         3e:53:e2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:53:21 2026 by rpki-client