Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4a938e16-1d9c-3e17-850c-c9512a523019.roa
File:                     4a938e16-1d9c-3e17-850c-c9512a523019.roa (raw, json)
Hash identifier:          POktD7E2Dw88dfKcMRtMul1rXmHALPboaVa1EWIFe4o=
Subject key identifier:   80:05:E8:2E:8C:78:D4:3E:05:92:06:38:AD:35:52:12:0E:A8:70:71
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D366F51C0F0B4C25CE02C2E80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4a938e16-1d9c-3e17-850c-c9512a523019.roa
Signing time:             Wed 18 Mar 2026 19:59:31 +0000
ROA not before:           Wed 18 Mar 2026 19:59:31 +0000
ROA not after:            Tue 16 Jun 2026 19:59:31 +0000
asID:                     401152
IP address blocks:        23.27.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:6f:51:c0:f0:b4:c2:5c:e0:2c:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 18 19:59:31 2026 GMT
            Not After : Jun 16 19:59:31 2026 GMT
        Subject: CN=faf2a806-f90d-4090-a99a-2c7a22086244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:82:24:35:6b:cd:a1:5d:c7:9d:f4:93:59:98:
                    6e:20:36:77:c4:bb:6c:ac:c2:35:19:53:7d:a9:26:
                    08:54:bd:68:6b:4c:74:32:b1:a3:a3:dc:de:83:5b:
                    63:de:1a:c9:63:87:8d:6c:85:47:ec:f5:3c:3f:4a:
                    df:c9:fd:cc:f8:4f:b8:91:53:e4:ee:47:b8:4b:d8:
                    c7:40:cd:2b:13:b5:e3:b5:e7:b3:f4:f4:ad:de:93:
                    8c:41:cb:d4:b0:92:9c:29:51:6f:09:be:f8:fc:d0:
                    7f:ce:41:9c:0b:01:b8:b5:bc:f6:73:90:9a:b6:15:
                    00:c1:7c:09:01:ad:a8:21:c6:08:e1:0f:ff:f7:20:
                    d6:5f:bd:13:c6:01:58:7e:22:b1:ab:c4:03:a8:e7:
                    5d:ce:1d:08:34:a3:17:48:37:bb:dc:5d:63:cd:9c:
                    fe:2b:fd:aa:e7:bb:49:de:da:8f:84:f5:8f:5b:51:
                    7e:01:61:3e:f1:01:00:8e:bd:6d:03:0f:63:e4:61:
                    cf:1f:87:7a:e4:b2:a1:01:55:26:01:14:8a:c3:f5:
                    15:8e:12:75:bb:db:91:fb:04:7a:9e:5d:cd:b8:5c:
                    93:25:f4:fa:44:62:cc:ef:39:30:65:36:1c:fc:72:
                    e0:99:fe:54:63:90:71:e0:f2:3c:53:46:51:84:df:
                    5a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:05:E8:2E:8C:78:D4:3E:05:92:06:38:AD:35:52:12:0E:A8:70:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4a938e16-1d9c-3e17-850c-c9512a523019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:7b:13:30:46:e8:cf:6f:a7:8f:92:b8:0c:10:3c:93:52:2f:
         c1:12:0c:73:10:8c:18:83:27:75:56:dc:ec:0b:53:fa:47:36:
         46:40:5b:1a:05:cf:6a:75:ce:f1:14:98:db:8c:65:6d:76:81:
         6a:08:42:2a:3f:14:3f:f8:30:7c:16:80:3b:58:9c:c4:e6:de:
         64:d5:45:b3:6a:7d:8d:a2:d9:8c:22:b3:02:b2:23:6a:12:7b:
         b8:56:6f:dd:02:16:ac:09:dd:a2:75:05:a5:a6:f8:ee:bc:e3:
         6d:c3:c3:87:c2:29:2c:25:83:4e:29:e2:96:4f:ab:ac:fa:d3:
         0f:ca:01:94:37:95:bc:77:3f:a4:f0:ab:c2:03:c0:a5:74:0d:
         8e:44:a0:3e:ae:67:5a:66:e7:10:8b:8a:68:a0:d0:b9:7a:78:
         a6:8f:64:85:54:b1:68:98:30:aa:05:d1:3d:ae:ee:c8:05:26:
         9b:39:d6:6e:04:67:f9:58:34:e2:57:6a:8f:b3:20:d4:a9:7f:
         c2:e1:a9:44:5e:7d:78:4e:8a:29:fd:4c:bf:df:b2:54:4f:6f:
         7d:32:8f:19:9f:66:3e:21:b6:49:e2:b1:cd:d2:c3:fd:76:53:
         be:d0:fb:0b:b2:82:7b:12:e7:19:93:6d:42:55:10:5e:dd:8a:
         fe:0e:21:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:22 2026 by rpki-client