Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/24389646-f33e-3ab4-8e45-b731e4365860.roa
File:                     24389646-f33e-3ab4-8e45-b731e4365860.roa (raw, json)
Hash identifier:          Gpy5lydGHKmdWVAjlNkOazdyaL+M2NHybhVumPgc5vc=
Subject key identifier:   5B:7F:A0:46:C2:15:A1:E1:16:B1:A8:8E:6D:F8:ED:E3:70:8A:0E:FB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D2644A150983149815A5F1B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/24389646-f33e-3ab4-8e45-b731e4365860.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     201106
IP address blocks:        23.27.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:a1:50:98:31:49:81:5a:5f:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=23f255ca-866d-41b8-87df-a0e60536ffc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a8:f7:6a:46:b4:bb:96:b1:40:12:be:95:71:
                    12:6e:e4:60:54:85:54:ad:b6:1a:0a:d6:b7:be:e9:
                    d1:32:a8:9e:91:7a:03:ef:0f:c8:b6:a5:f7:3f:e3:
                    0d:7a:dc:11:b8:8d:e2:78:89:15:8a:76:d6:a6:a2:
                    7e:fe:c1:d7:13:0a:c5:9e:31:b4:20:26:d6:3e:88:
                    22:2b:76:b1:00:c0:fc:b0:04:07:7a:5d:f2:e1:93:
                    b6:7c:a9:7b:b4:7f:20:d9:0a:b1:75:db:69:36:e1:
                    89:ce:83:a0:ab:5d:69:be:11:ce:2b:97:24:9d:0b:
                    0c:6b:0d:1d:45:7a:b6:87:3a:05:1e:d2:1a:50:b2:
                    22:04:71:5d:c3:40:b1:b0:30:83:2b:c0:a1:49:27:
                    f3:ea:b1:2e:a2:6f:3c:19:ae:c2:f8:10:3f:44:b3:
                    4f:8b:cc:ee:16:1d:f0:c3:43:10:a2:59:9f:85:9b:
                    65:25:2d:62:5d:32:08:a3:2f:85:63:97:73:ec:f1:
                    16:a5:12:d8:6e:a0:1b:d5:29:a3:51:ce:38:6c:dc:
                    25:a2:62:ea:a9:f9:5b:2c:b8:81:71:77:49:d2:fc:
                    14:40:4e:07:03:29:af:48:42:14:9a:0c:ca:ae:c1:
                    d6:ac:7c:6f:0d:3f:80:bf:f1:ae:6b:92:67:9f:61:
                    8d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7F:A0:46:C2:15:A1:E1:16:B1:A8:8E:6D:F8:ED:E3:70:8A:0E:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/24389646-f33e-3ab4-8e45-b731e4365860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:09:15:ca:2a:5e:2c:d1:63:4d:8c:1c:b8:de:21:33:33:1e:
         eb:47:51:ea:9f:3b:62:a8:03:17:69:5c:2f:fe:04:51:25:52:
         a8:2a:c1:72:62:31:c3:f9:9c:ce:8c:ac:c7:de:43:12:e9:ac:
         78:f4:a1:8c:89:d0:75:5d:00:cb:16:42:49:a4:ea:6c:d2:7b:
         60:67:95:84:32:7b:ff:aa:f7:59:a7:3e:94:8c:e7:8f:1a:36:
         af:b5:7e:d7:b1:a9:29:ab:51:3c:be:0a:46:38:60:99:98:6d:
         0e:3c:54:fd:a2:71:a9:3d:29:31:a6:46:82:71:89:cb:fe:e5:
         b7:5e:8a:2c:b1:65:4d:1b:16:1f:30:7a:8a:89:24:b9:47:6a:
         f3:2a:98:21:7f:31:99:5f:d7:15:39:22:42:66:1d:c2:34:d1:
         11:c6:0c:b3:da:c2:1b:07:b1:74:a2:d7:b5:f9:89:11:36:a4:
         b6:a3:2a:42:35:00:67:b4:b6:fd:6d:7a:c8:63:f5:42:77:e4:
         76:be:7e:e3:1c:64:ea:b7:c7:83:be:0c:01:6c:23:de:58:85:
         5f:bd:fe:f0:ef:bd:9b:33:ce:60:b3:bb:fe:5e:34:0e:9b:70:
         97:5a:58:c0:8b:e1:ad:6f:09:40:6b:70:e1:78:07:4f:16:6f:
         b4:8d:ba:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRKFQmDFJgVpfG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
MjNmMjU1Y2EtODY2ZC00MWI4LTg3ZGYtYTBlNjA1MzZmZmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKj3aka0u5axQBK+lXESbuRgVIVUrbYaCta3
vunRMqiekXoD7w/ItqX3P+MNetwRuI3ieIkVinbWpqJ+/sHXEwrFnjG0ICbWPogi
K3axAMD8sAQHel3y4ZO2fKl7tH8g2QqxddtpNuGJzoOgq11pvhHOK5cknQsMaw0d
RXq2hzoFHtIaULIiBHFdw0CxsDCDK8ChSSfz6rEuom88Ga7C+BA/RLNPi8zuFh3w
w0MQolmfhZtlJS1iXTIIoy+FY5dz7PEWpRLYbqAb1SmjUc44bNwlomLqqflbLLiB
cXdJ0vwUQE4HAymvSEIUmgzKrsHWrHxvDT+Av/Gua5Jnn2GN2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFt/oEbCFaHhFrGojm347eNwig77MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjQzODk2NDYtZjMzZS0z
YWI0LThlNDUtYjczMWU0MzY1ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADoJFcoqXizRY02MHLjeITMzHutHUeqfO2KoAxdpXC/+BFElUqgqwXJi
McP5nM6MrMfeQxLprHj0oYyJ0HVdAMsWQkmk6mzSe2BnlYQye/+q91mnPpSM548a
Nq+1ftexqSmrUTy+CkY4YJmYbQ48VP2icak9KTGmRoJxicv+5bdeiiyxZU0bFh8w
eoqJJLlHavMqmCF/MZlf1xU5IkJmHcI00RHGDLPawhsHsXSi17X5iRE2pLajKkI1
AGe0tv1teshj9UJ35Ha+fuMcZOq3x4O+DAFsI95YhV+9/vDvvZszzmCzu/5eNA6b
cJdaWMCL4a1vCUBrcOF4B08Wb7SNulA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:44:50 2026 by rpki-client