Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/74a3e725-26b8-36ab-9409-920248550639.roa
File:                     74a3e725-26b8-36ab-9409-920248550639.roa (raw, json)
Hash identifier:          LqqZbwZQhnyJKCmy8zj2W/cNxERDOZ4Q0ntF+Spa67g=
Subject key identifier:   30:85:8E:8D:25:C8:AD:16:BD:71:33:04:88:7B:40:CB:ED:F7:20:A0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D1707DC8DFB3B77A17C774DC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/74a3e725-26b8-36ab-9409-920248550639.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     10557
IP address blocks:        23.27.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:dc:8d:fb:3b:77:a1:7c:77:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=1372148c-2717-4911-a061-6127eb42f08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:65:ae:f9:c0:67:4c:dd:ac:69:d4:98:44:
                    94:05:ff:c1:af:ff:57:33:f7:d3:a2:ec:87:a2:bc:
                    dc:7f:d8:3e:36:23:52:78:05:9b:9a:6a:47:8b:5d:
                    6f:b0:34:a9:0e:49:3f:d4:b9:1d:83:8d:22:25:27:
                    d5:2e:62:95:6b:ae:06:7c:78:58:92:f8:db:18:d1:
                    7f:50:32:1f:d2:3f:47:f1:d8:de:4e:e4:23:1d:c7:
                    47:37:e4:57:31:d2:be:b6:2b:e4:6a:1f:9d:b8:a3:
                    1b:eb:8c:33:c7:ac:28:9c:77:29:4f:0b:7e:4c:78:
                    9e:0b:59:49:99:f2:c3:c4:db:ec:f8:82:47:13:d2:
                    ca:af:08:ec:82:78:d6:6e:83:46:4b:7e:36:41:2e:
                    f4:6b:8f:95:86:e4:60:2c:7c:10:74:19:ee:d1:3f:
                    4c:38:96:dd:38:9b:78:4f:ae:ff:fb:f1:06:9b:90:
                    ee:79:ce:77:9e:7e:81:a3:38:47:b9:98:1a:b6:2d:
                    4b:e9:63:55:94:6d:37:1d:e3:05:99:41:2d:ff:9b:
                    a6:23:2b:3d:e1:9a:5f:2b:5f:66:58:4a:7b:64:77:
                    4a:ba:64:99:0c:93:cc:8b:1a:13:b5:52:09:39:42:
                    39:8c:95:89:ee:28:5e:b4:86:63:59:45:33:50:ee:
                    99:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:85:8E:8D:25:C8:AD:16:BD:71:33:04:88:7B:40:CB:ED:F7:20:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/74a3e725-26b8-36ab-9409-920248550639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:fc:cb:e7:b9:38:92:99:67:de:8b:14:1c:d6:d6:08:e8:
         a8:f2:a9:05:9d:b6:c8:63:03:9e:7c:a6:be:28:94:a5:54:fa:
         69:76:00:13:02:bd:02:04:0e:ee:04:c9:e0:1d:e6:a0:5a:f8:
         48:7c:a2:9c:b3:d3:2e:bf:d2:77:87:c6:c7:fd:af:11:fe:54:
         b7:a1:3a:00:02:37:f3:7a:ac:37:29:1e:58:26:b9:c9:25:61:
         26:ac:54:5d:ee:7e:27:24:88:3b:72:ea:fa:ce:81:a4:cf:cf:
         81:29:16:9d:6c:f7:cd:e0:cb:fe:38:49:fe:67:68:3a:9a:45:
         6f:eb:b3:4b:1d:70:c0:b2:6d:c7:8c:6d:ce:e1:8a:c2:f2:12:
         48:4c:66:f7:c5:d8:01:ad:e2:43:b3:61:6c:b3:47:26:0f:ab:
         3e:9a:14:68:7f:eb:9e:ec:0c:ed:44:c8:aa:23:bc:c3:f2:c6:
         76:23:ac:df:f2:be:a1:21:22:08:06:83:84:93:a9:1e:3a:7e:
         d1:95:de:30:82:e5:b5:37:7f:a7:19:ac:57:aa:36:1d:f3:94:
         3a:8d:d4:54:88:2b:bf:86:64:a3:c9:44:c6:5b:2a:9b:c1:a9:
         12:f0:1c:c1:f1:73:93:b4:ea:e0:9b:47:e3:c3:2d:f6:ba:d6:
         de:35:2e:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB9yN+zt3oXx3TcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk
MTM3MjE0OGMtMjcxNy00OTExLWEwNjEtNjEyN2ViNDJmMDhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR9lrvnAZ0zdrGnUmESUBf/Br/9XM/fTouyH
orzcf9g+NiNSeAWbmmpHi11vsDSpDkk/1Lkdg40iJSfVLmKVa64GfHhYkvjbGNF/
UDIf0j9H8djeTuQjHcdHN+RXMdK+tivkah+duKMb64wzx6wonHcpTwt+THieC1lJ
mfLDxNvs+IJHE9LKrwjsgnjWboNGS342QS70a4+VhuRgLHwQdBnu0T9MOJbdOJt4
T67/+/EGm5Duec53nn6BozhHuZgati1L6WNVlG03HeMFmUEt/5umIys94ZpfK19m
WEp7ZHdKumSZDJPMixoTtVIJOUI5jJWJ7ihetIZjWUUzUO6ZXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDCFjo0lyK0WvXEzBIh7QMvt9yCgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzRhM2U3MjUtMjZiOC0z
NmFiLTk0MDktOTIwMjQ4NTUwNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEr6/MvnuTiSmWfeixQc1tYI6KjyqQWdtshjA558pr4olKVU+ml2ABMC
vQIEDu4EyeAd5qBa+Eh8opyz0y6/0neHxsf9rxH+VLehOgACN/N6rDcpHlgmuckl
YSasVF3ufickiDty6vrOgaTPz4EpFp1s983gy/44Sf5naDqaRW/rs0sdcMCybceM
bc7hisLyEkhMZvfF2AGt4kOzYWyzRyYPqz6aFGh/657sDO1EyKojvMPyxnYjrN/y
vqEhIggGg4STqR46ftGV3jCC5bU3f6cZrFeqNh3zlDqN1FSIK7+GZKPJRMZbKpvB
qRLwHMHxc5O06uCbR+PDLfa61t41LvM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:43:52 2026 by rpki-client