Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e069977-ed29-3476-9b3c-8324f84b7c33.roa
File:                     3e069977-ed29-3476-9b3c-8324f84b7c33.roa (raw, json)
Hash identifier:          8BlMtJBPy7M0qTKkKWU55xAMPDjx6MMclRNMYqHJ/lM=
Subject key identifier:   77:E0:5C:AD:0B:96:34:1A:96:CC:2A:06:84:3C:65:A6:A3:2E:5B:BD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D1707E092ECB8BD29C91E2680
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e069977-ed29-3476-9b3c-8324f84b7c33.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     26375
IP address blocks:        23.27.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:e0:92:ec:b8:bd:29:c9:1e:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=172c0837-9817-4632-a5b4-5ccc278d5a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fd:22:d7:97:de:0b:f6:e3:87:4f:df:b5:ac:
                    ba:63:f8:59:cc:52:96:12:e4:85:19:48:e3:4a:37:
                    b5:63:f2:85:68:f9:4e:a0:12:62:8f:f5:de:7e:ca:
                    a4:c6:f5:f9:00:f6:01:09:3c:4d:a7:0e:16:fd:50:
                    0d:78:38:05:46:1a:24:54:06:2a:8f:d5:d4:30:5a:
                    e7:59:51:76:be:9d:52:32:69:6a:da:e6:d1:95:b9:
                    d6:3c:5d:b7:06:99:27:1c:67:ef:aa:b0:ec:46:e6:
                    50:c7:87:30:41:ef:66:17:90:ef:22:bc:a8:df:11:
                    26:14:ab:51:03:a1:6f:de:a1:27:c5:ee:88:16:ee:
                    09:a6:ec:55:1a:51:3c:7d:56:1e:d1:4e:3a:6f:26:
                    e7:06:bc:d4:6c:e2:fd:f5:2f:aa:a2:3b:38:8b:4c:
                    b4:9a:b4:82:e0:dc:05:5e:c1:56:0b:52:76:23:8c:
                    2e:d7:34:3c:2f:b8:84:9f:db:39:99:ec:0e:87:47:
                    99:4a:c8:b1:df:b9:7f:f8:ed:e9:1b:13:f1:00:fa:
                    fa:a2:f0:e9:64:e9:98:62:d1:5b:10:f3:bd:29:d6:
                    f7:b0:fe:8d:25:84:16:87:f9:c8:fa:e6:34:3b:be:
                    66:b4:f5:c3:e1:f3:ce:44:7c:98:ea:1f:a9:e1:fb:
                    ed:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E0:5C:AD:0B:96:34:1A:96:CC:2A:06:84:3C:65:A6:A3:2E:5B:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e069977-ed29-3476-9b3c-8324f84b7c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e2:86:ef:54:e6:86:f2:30:09:09:82:5e:5b:44:f6:63:15:
         54:8e:b8:d2:4a:dc:c6:c2:89:b0:1c:6c:a7:34:d6:8f:d1:49:
         ef:6e:5d:52:aa:3a:2e:77:24:4b:1f:bf:31:59:08:00:30:dc:
         65:d6:95:6c:fb:d0:11:7f:7b:fe:4f:45:be:a3:34:f7:ab:17:
         32:57:15:d8:f4:0d:ab:ef:3d:e1:8c:ad:97:30:9a:91:53:b7:
         80:2a:0a:ff:92:4c:19:fb:ff:dd:2a:7f:00:51:c6:06:0b:f3:
         6d:e9:b1:0e:38:ce:34:c7:f9:72:58:4d:1d:0d:57:01:a9:29:
         dc:11:85:24:ce:53:80:43:95:e7:89:5e:27:bc:9c:93:3c:78:
         1a:84:69:e3:93:ae:12:04:c6:10:58:43:7b:72:b2:79:02:83:
         5e:2b:94:6a:cc:53:34:ff:27:13:7f:b2:db:5a:be:12:2e:3f:
         a3:60:59:fc:4a:ea:3e:cc:4a:89:75:a7:6b:29:6e:08:54:f4:
         7e:85:5f:62:4c:47:cb:dc:f9:be:8b:1e:70:d2:64:fe:ae:cf:
         a1:48:6a:b5:dc:a9:aa:c4:bd:bd:7d:2c:41:99:7a:9b:7f:b3:
         4f:fd:e4:fb:45:e3:8f:6d:72:e3:7c:e5:4a:03:37:50:96:8a:
         61:90:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:26:01 2026 by rpki-client