Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4a938e16-1d9c-3e17-850c-c9512a523019.roa
File:                     4a938e16-1d9c-3e17-850c-c9512a523019.roa (raw, json)
Hash identifier:          9OaE11pElKTWJTBGfyVNRV8eg4ZQBiKZKRtcPunJDos=
Subject key identifier:   77:94:23:4D:C3:20:A1:E0:29:18:60:99:C9:CD:81:EA:AB:58:0D:26
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F5A32E2F12B70A8500C64B880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4a938e16-1d9c-3e17-850c-c9512a523019.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     401152
IP address blocks:        23.27.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:e2:f1:2b:70:a8:50:0c:64:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=a20001af-737c-457e-897d-1cc5c9c5bb3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2c:37:6e:05:c2:6c:91:30:4c:65:2e:ee:e7:
                    c2:4a:98:57:8d:3b:7f:33:10:f9:1a:58:f2:74:0d:
                    f8:d4:d1:24:1f:f7:7c:4f:2d:cd:08:f3:f7:a2:9f:
                    c3:11:9a:df:51:9f:2a:d5:64:38:60:41:e4:2a:ad:
                    5b:97:37:ae:c5:42:37:a7:7b:c4:00:84:1a:46:bc:
                    b2:51:03:96:ab:a7:5c:6b:27:c2:32:c5:4a:03:7b:
                    8c:53:dc:7e:7e:f6:b0:5c:b4:b7:d7:87:d1:cc:c3:
                    cc:fc:99:0a:e7:3c:49:08:a0:7e:3d:46:19:f8:1c:
                    67:79:28:c5:21:d2:c2:a0:82:50:54:e2:3c:4d:31:
                    91:3a:c1:89:13:1d:d4:cf:db:89:47:b6:95:26:31:
                    b0:55:94:10:ea:97:b9:81:cb:7f:a1:c6:65:90:34:
                    bf:87:4f:78:a8:30:14:a6:c5:cd:10:f8:ea:f1:7c:
                    e6:8e:93:91:77:84:10:eb:04:c8:4b:9d:53:0a:ed:
                    94:6f:07:63:b2:56:b9:1c:ef:95:f8:44:1f:6c:39:
                    ee:f5:d8:31:60:2a:00:4d:fc:58:c9:5e:7a:de:b9:
                    e9:46:24:ab:65:54:b8:70:43:58:29:f4:bf:5d:a3:
                    fc:5f:64:cf:61:23:00:ae:00:83:02:a1:b5:bf:82:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:94:23:4D:C3:20:A1:E0:29:18:60:99:C9:CD:81:EA:AB:58:0D:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4a938e16-1d9c-3e17-850c-c9512a523019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:16:cf:6e:46:6c:0a:b3:59:3b:ae:18:4a:a0:4b:66:30:61:
         70:a5:61:89:72:b7:0e:55:5e:61:d1:f9:a8:60:33:a4:2a:c7:
         2c:d8:80:12:cd:0a:f0:0e:d6:b9:8c:79:91:9b:64:67:ea:8a:
         cd:07:ac:4b:33:71:9d:34:23:05:9f:4e:86:69:88:2f:c0:e1:
         fc:b5:6e:e8:c8:c0:ba:71:d9:86:3d:70:01:fa:24:09:2b:68:
         40:6c:d6:4e:f7:6c:f7:4c:ae:41:0e:12:f4:af:7f:2a:09:6a:
         0c:70:a5:dc:f3:a9:b4:a7:ca:0a:64:2e:4c:8b:e0:82:85:0a:
         d7:e0:fe:ec:7c:3f:d3:38:08:92:5b:d2:37:b8:33:be:40:d0:
         77:2e:1e:cf:b8:c9:cc:fb:dc:6a:35:eb:f2:d0:db:1f:33:e2:
         6d:13:f2:cc:c9:30:5d:fb:bc:44:b2:36:c1:99:e7:2d:08:4c:
         b4:ee:2f:8d:22:20:cd:d7:f8:3f:49:37:bd:a4:57:ae:70:61:
         61:6d:af:ed:51:61:57:cb:84:7c:4a:59:20:1b:66:e0:9d:fa:
         aa:25:02:b4:76:40:b4:98:71:94:79:b9:57:ae:05:1e:5c:a5:
         5e:f0:30:07:2c:35:99:d6:6d:9a:a9:23:de:c8:3b:5c:fe:72:
         f5:8d:06:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:24:48 2026 by rpki-client