Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/adfa3ab8-e33e-3274-b52a-b6372d428a8a.roa
File:                     adfa3ab8-e33e-3274-b52a-b6372d428a8a.roa (raw, json)
Hash identifier:          HzfAtMaO5oN+w3X6bfNwBwciEq32Uu+ly1hUGoFFd10=
Subject key identifier:   3B:AE:AE:20:0F:5E:36:51:55:D5:03:F0:96:31:47:41:90:71:C4:66
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EFE121303B4EF920CCEE12000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/adfa3ab8-e33e-3274-b52a-b6372d428a8a.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     47690
IP address blocks:        23.27.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:13:03:b4:ef:92:0c:ce:e1:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=d57b8c2e-8bde-4b58-bf6d-047057b1cd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ab:ac:5f:2f:8a:e0:30:0f:55:fc:2b:62:88:
                    32:e3:ef:da:52:eb:6e:8a:44:29:11:c6:61:a9:4c:
                    e4:91:7c:8e:f6:6b:d7:68:f1:b4:12:1a:90:34:69:
                    ae:4a:c3:25:9a:a6:87:e1:2d:e3:06:45:0a:3d:26:
                    7c:dd:38:ed:22:c1:87:f4:34:e2:8e:22:34:5c:bb:
                    d6:c3:89:fd:4a:14:c2:ad:fc:98:a7:08:da:08:8e:
                    62:1f:96:68:13:d6:dc:38:5a:8e:d9:d5:25:09:df:
                    bc:e1:ac:34:6f:84:78:af:e8:4d:e0:b9:79:34:48:
                    77:6f:ab:26:8a:df:6a:05:a4:40:4a:c3:46:b2:c6:
                    63:d3:26:00:8c:2e:21:a6:ff:4e:6c:15:c0:09:48:
                    b3:30:f8:46:7b:68:a8:05:e2:b8:f5:c0:43:4a:83:
                    80:3b:12:10:86:0e:90:10:ab:eb:05:cf:42:52:d4:
                    4c:5b:5a:c7:81:11:9b:96:bc:60:d7:1b:10:be:76:
                    de:cc:92:a1:2a:ba:d1:7d:d9:39:b6:f8:97:2b:61:
                    fe:8a:65:db:d3:75:b3:f4:a7:1b:4b:da:54:ba:bf:
                    42:3a:62:09:fe:2d:bb:6c:77:9e:78:cc:e9:ba:28:
                    7f:9d:02:45:d9:0d:ea:72:8b:94:59:da:39:20:f3:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AE:AE:20:0F:5E:36:51:55:D5:03:F0:96:31:47:41:90:71:C4:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/adfa3ab8-e33e-3274-b52a-b6372d428a8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:39:3f:94:17:2b:04:09:fa:2f:cc:71:dc:47:e2:20:25:b7:
         f9:be:64:d7:0e:71:66:81:4f:b1:9b:8e:23:c7:d7:82:f1:38:
         93:ba:26:49:9e:98:0b:13:e5:13:96:a7:e7:55:66:43:5a:fa:
         9c:0f:28:cf:1f:f0:e5:39:a7:ae:b6:e5:1f:7f:af:6e:3a:8e:
         65:df:7b:ea:3f:71:12:62:28:7a:56:c8:33:45:62:61:f3:97:
         a6:49:18:cf:8d:93:31:82:41:20:27:09:26:91:8d:22:da:f1:
         f7:a1:e6:40:2f:48:77:0a:53:ff:bd:a3:b3:6f:74:5b:73:72:
         b5:52:5c:a6:44:b3:4d:ca:93:30:a9:5d:19:89:cd:10:20:21:
         8a:e1:d3:a1:f3:58:b2:b3:43:ad:01:1c:7f:9b:dc:b2:d1:a3:
         c6:2f:3f:f8:64:24:da:e4:4a:d6:51:8b:6f:df:ae:5f:81:17:
         47:64:20:63:01:53:f1:e2:e7:ed:6f:ac:d5:25:9e:44:c4:ad:
         98:de:75:07:0e:2b:ba:5b:28:1e:c5:43:fa:39:7b:d2:ef:43:
         95:04:a7:2d:bb:ec:24:07:cb:72:49:11:09:0c:62:a4:b5:63:
         a5:d2:cf:23:b5:62:ee:5c:e2:05:ba:7c:f9:6c:c1:1e:ea:b9:
         9e:50:e2:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EhMDtO+SDM7hIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
ZDU3YjhjMmUtOGJkZS00YjU4LWJmNmQtMDQ3MDU3YjFjZDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6usXy+K4DAPVfwrYogy4+/aUutuikQpEcZh
qUzkkXyO9mvXaPG0EhqQNGmuSsMlmqaH4S3jBkUKPSZ83TjtIsGH9DTijiI0XLvW
w4n9ShTCrfyYpwjaCI5iH5ZoE9bcOFqO2dUlCd+84aw0b4R4r+hN4Ll5NEh3b6sm
it9qBaRASsNGssZj0yYAjC4hpv9ObBXACUizMPhGe2ioBeK49cBDSoOAOxIQhg6Q
EKvrBc9CUtRMW1rHgRGblrxg1xsQvnbezJKhKrrRfdk5tviXK2H+imXb03Wz9Kcb
S9pUur9COmIJ/i27bHeeeMzpuih/nQJF2Q3qcouUWdo5IPMhKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDuuriAPXjZRVdUD8JYxR0GQccRmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWRmYTNhYjgtZTMzZS0z
Mjc0LWI1MmEtYjYzNzJkNDI4YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQ5P5QXKwQJ+i/McdxH4iAlt/m+ZNcOcWaBT7GbjiPH14LxOJO6Jkme
mAsT5ROWp+dVZkNa+pwPKM8f8OU5p6625R9/r246jmXfe+o/cRJiKHpWyDNFYmHz
l6ZJGM+NkzGCQSAnCSaRjSLa8feh5kAvSHcKU/+9o7NvdFtzcrVSXKZEs03KkzCp
XRmJzRAgIYrh06HzWLKzQ60BHH+b3LLRo8YvP/hkJNrkStZRi2/frl+BF0dkIGMB
U/Hi5+1vrNUlnkTErZjedQcOK7pbKB7FQ/o5e9LvQ5UEpy277CQHy3JJEQkMYqS1
Y6XSzyO1Yu5c4gW6fPlswR7quZ5Q4u4=
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:19:23 2026 by rpki-client