Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7e1009ff-730a-3e74-b089-a662bcc0b66a.roa
File:                     7e1009ff-730a-3e74-b089-a662bcc0b66a.roa (raw, json)
Hash identifier:          Wt5S41aVtC4xupaoauq/AZXTtF1iPcCfOQR20Jzaj4o=
Subject key identifier:   FD:80:F1:56:AF:5E:A3:79:54:B1:E3:29:BF:EF:11:0B:B6:F9:62:34
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D4461D015CDBE8D04591FA040
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7e1009ff-730a-3e74-b089-a662bcc0b66a.roa
Signing time:             Mon 23 Mar 2026 19:53:37 +0000
ROA not before:           Mon 23 Mar 2026 19:53:37 +0000
ROA not after:            Sun 21 Jun 2026 19:53:37 +0000
asID:                     11798
IP address blocks:        23.27.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:d0:15:cd:be:8d:04:59:1f:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 23 19:53:37 2026 GMT
            Not After : Jun 21 19:53:37 2026 GMT
        Subject: CN=5db0d095-d16e-4fb1-9871-b656939acd13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:36:e5:86:f0:0b:5d:e6:38:2e:ef:da:13:fe:
                    a5:47:fa:18:8d:f4:39:af:3a:95:69:24:d3:31:12:
                    f9:71:4e:09:74:ce:fd:9b:4c:54:41:53:dc:89:16:
                    a1:96:ad:3a:ac:4f:9d:e4:93:56:39:22:78:99:ab:
                    10:80:97:59:1e:f0:08:bd:e5:39:19:20:63:d7:40:
                    c2:8a:11:3f:b4:6b:b7:4e:60:0b:92:b6:e2:85:e8:
                    54:65:6b:b0:28:db:b6:62:66:fe:ed:c4:8d:be:28:
                    11:88:0f:51:9b:04:16:2f:c5:77:17:1e:3c:4a:88:
                    fb:2d:f5:45:75:6b:1a:ff:4d:cf:6d:86:d8:1e:8f:
                    de:fc:20:33:5c:0e:55:c7:82:f8:20:36:d3:48:3b:
                    10:51:a6:6a:ab:db:cf:de:a9:1f:7b:35:3d:e9:53:
                    33:0f:ba:fd:73:14:88:07:36:7e:d1:08:e4:39:5f:
                    fd:18:e0:3d:0f:98:be:18:8a:12:be:67:9e:a8:52:
                    76:90:0d:1f:03:a7:b0:9f:95:3d:54:a8:cb:e8:3c:
                    21:45:d5:94:b2:7e:17:47:23:f6:ee:3d:50:c0:65:
                    6c:df:c5:b7:20:10:9e:ed:8c:7c:70:c0:51:8f:47:
                    67:a4:57:00:91:0c:0b:97:e2:e5:bc:02:3a:60:94:
                    73:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:80:F1:56:AF:5E:A3:79:54:B1:E3:29:BF:EF:11:0B:B6:F9:62:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7e1009ff-730a-3e74-b089-a662bcc0b66a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:4e:61:94:2e:78:2f:ff:6f:b6:37:89:df:80:b1:3a:9a:b1:
         a2:72:7c:8d:d4:b5:bc:b9:e9:85:50:77:c2:e8:5d:07:f5:7d:
         49:80:87:36:7e:8d:13:9a:05:31:ed:2b:e4:b0:b6:11:1e:3f:
         75:b1:8e:6b:29:de:bf:37:bf:a9:2f:65:ed:a9:f6:27:22:69:
         62:fa:22:2b:7a:16:e7:d3:aa:d9:d2:4b:68:2a:bc:9b:ff:45:
         26:b0:35:f3:4a:60:8f:6d:d2:73:53:d6:19:5d:c3:bb:ac:3f:
         f7:7e:16:af:ec:f7:a1:08:61:cb:60:8a:2a:2c:f5:a8:fc:37:
         26:ef:f4:33:e9:b8:d5:d6:c6:15:48:89:c4:b0:07:b2:82:54:
         17:90:22:3e:b8:e1:7c:f5:2a:93:10:93:48:f2:b2:d3:b6:19:
         b4:c1:2e:95:88:1c:fa:61:72:0b:8b:c5:8b:23:7c:78:2e:cf:
         2c:df:20:1e:c3:09:80:8d:46:cd:45:6f:6d:7b:56:58:e6:a4:
         1b:f6:cc:d5:f8:8b:c0:5c:4c:a5:85:84:d8:0a:7a:17:ce:a4:
         f3:e8:61:85:b9:fe:25:73:5c:e2:8e:df:28:ff:ed:26:76:2e:
         72:90:a3:73:82:85:7c:39:0b:e1:55:96:33:5c:de:ee:44:25:
         69:94:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:19:32 2026 by rpki-client