Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/160f6655-162c-360a-8661-6bc94969d627.roa
File:                     160f6655-162c-360a-8661-6bc94969d627.roa (raw, json)
Hash identifier:          bQDgdeOrFcX03jaHLGopbFrf9k1KO6WKq2vHE7J7QGY=
Subject key identifier:   5C:61:C3:16:25:DB:B0:57:CD:CF:F6:84:DA:9B:A2:A2:BE:04:70:74
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DB4A5931C397FE8BEA903AF80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/160f6655-162c-360a-8661-6bc94969d627.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     9009
IP address blocks:        23.27.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:93:1c:39:7f:e8:be:a9:03:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=06b054a4-e768-4cb6-8195-b647688ad304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8b:41:92:33:69:2d:a9:88:c2:3d:68:29:fe:
                    64:02:02:fa:e6:9d:29:e6:d9:71:50:7e:f1:f0:5a:
                    5f:a6:2e:37:3c:29:77:c9:c6:6a:68:d7:4c:cc:76:
                    a8:3b:fe:e1:27:91:2b:35:01:07:ad:f7:5f:e4:2d:
                    e9:3c:b7:72:9e:a0:e6:3b:5d:61:86:66:e2:c4:25:
                    82:13:28:5c:db:f1:7e:a4:00:8f:d0:d8:d8:3f:ba:
                    b7:f7:22:3a:b3:49:33:db:e0:1d:8a:7f:a9:90:76:
                    94:08:ea:c2:39:31:52:dd:c3:1a:92:f5:c9:0e:fe:
                    05:c6:42:0c:06:18:ad:64:16:a4:27:49:87:d4:86:
                    42:5e:6e:09:13:d5:03:11:ad:02:30:dc:45:8d:d9:
                    f3:e9:b2:c0:6b:ac:c5:ac:c3:23:c0:22:a0:e5:28:
                    18:67:73:9c:f3:97:5a:ce:c3:8a:a2:4e:99:e5:0a:
                    55:41:f3:8d:90:7e:29:03:b7:eb:73:11:90:53:a9:
                    cd:d4:55:5c:46:f8:22:f9:b5:fe:1e:1c:0b:b5:24:
                    da:dc:8d:fe:6d:f9:22:68:52:0b:ed:ed:bb:cd:55:
                    31:17:24:4e:87:e5:a1:27:c9:11:c1:9b:36:8a:f1:
                    33:f9:89:73:16:b5:99:ab:b2:b1:17:d4:59:14:d0:
                    1d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:61:C3:16:25:DB:B0:57:CD:CF:F6:84:DA:9B:A2:A2:BE:04:70:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/160f6655-162c-360a-8661-6bc94969d627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:93:69:bc:42:1f:5e:ff:b7:c9:31:92:a6:cf:5f:8e:5a:21:
         da:b7:76:bc:d6:86:dc:bc:c4:fb:ef:88:2f:67:df:94:ec:9c:
         d7:a5:53:fc:2e:24:7e:77:5f:81:e5:8c:9f:0b:b2:62:ff:b7:
         bc:de:a1:bf:5f:62:b2:9f:49:1e:26:9a:6d:4c:6f:89:a9:f7:
         bc:5b:2e:9f:8b:2e:2c:67:37:26:99:f7:83:6a:b4:34:c9:9b:
         60:35:bc:d9:42:02:b4:52:74:d1:96:43:dc:fb:1f:ea:8e:7c:
         c9:64:9f:c9:87:dc:86:70:61:06:45:74:73:13:10:a1:f1:c2:
         21:f0:d8:f5:70:cd:f4:65:f0:51:60:ab:32:80:19:49:8c:d1:
         3b:16:91:40:a8:46:60:4e:41:82:ab:36:a5:12:19:a9:7b:eb:
         ed:9e:cc:66:0a:7b:72:9d:17:93:14:0d:64:33:ce:d1:26:9d:
         d1:78:00:52:2d:b9:05:df:84:19:cb:b9:7d:e6:20:a0:df:60:
         a4:76:3f:74:37:a9:05:27:07:42:19:cc:0f:42:64:85:45:59:
         62:a6:78:42:bb:c0:34:82:e1:47:42:4e:f0:95:ed:24:ea:18:
         2a:19:a3:db:4c:2a:b3:42:b0:df:0e:d1:19:e0:74:b0:46:f3:
         71:95:87:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pZMcOX/ovqkDr4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
MDZiMDU0YTQtZTc2OC00Y2I2LTgxOTUtYjY0NzY4OGFkMzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmotBkjNpLamIwj1oKf5kAgL65p0p5tlxUH7x
8Fpfpi43PCl3ycZqaNdMzHaoO/7hJ5ErNQEHrfdf5C3pPLdynqDmO11hhmbixCWC
Eyhc2/F+pACP0NjYP7q39yI6s0kz2+Adin+pkHaUCOrCOTFS3cMakvXJDv4FxkIM
BhitZBakJ0mH1IZCXm4JE9UDEa0CMNxFjdnz6bLAa6zFrMMjwCKg5SgYZ3Oc85da
zsOKok6Z5QpVQfONkH4pA7frcxGQU6nN1FVcRvgi+bX+HhwLtSTa3I3+bfkiaFIL
7e27zVUxFyROh+WhJ8kRwZs2ivEz+YlzFrWZq7KxF9RZFNAd1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFxhwxYl27BXzc/2hNqboqK+BHB0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTYwZjY2NTUtMTYyYy0z
NjBhLTg2NjEtNmJjOTQ5NjlkNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKTabxCH17/t8kxkqbPX45aIdq3drzWhty8xPvviC9n35TsnNelU/wu
JH53X4HljJ8LsmL/t7zeob9fYrKfSR4mmm1Mb4mp97xbLp+LLixnNyaZ94NqtDTJ
m2A1vNlCArRSdNGWQ9z7H+qOfMlkn8mH3IZwYQZFdHMTEKHxwiHw2PVwzfRl8FFg
qzKAGUmM0TsWkUCoRmBOQYKrNqUSGal76+2ezGYKe3KdF5MUDWQzztEmndF4AFIt
uQXfhBnLuX3mIKDfYKR2P3Q3qQUnB0IZzA9CZIVFWWKmeEK7wDSC4UdCTvCV7STq
GCoZo9tMKrNCsN8O0RngdLBG83GVh1I=
-----END CERTIFICATE-----
Generated at Wed May 13 14:18:29 2026 by rpki-client