Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/912e6cbd-06cd-39c2-8814-53eb816ddbdc.roa
File:                     912e6cbd-06cd-39c2-8814-53eb816ddbdc.roa (raw, json)
Hash identifier:          2Soay8OuKxTOjLlh5in55P12zJ6f4M09UcreyxkbAuw=
Subject key identifier:   AB:6A:09:7C:97:C2:B9:3F:5D:37:47:98:68:72:1D:33:D8:94:7F:F6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D19B4C55FC9FD06481999F7AD
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/912e6cbd-06cd-39c2-8814-53eb816ddbdc.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     209854
IP address blocks:        23.27.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:c5:5f:c9:fd:06:48:19:99:f7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=87acc131-cd23-417a-a13c-1b972a0d18ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:4e:a1:26:06:1f:63:26:b2:c1:1a:13:77:
                    30:0e:55:6d:a4:28:eb:83:31:d8:95:1a:2d:e0:21:
                    49:bb:8c:0a:42:e3:45:48:fe:db:47:8a:54:b8:fc:
                    81:18:53:07:1c:85:a3:d1:4f:6f:e8:90:25:de:ce:
                    51:43:6f:1d:78:1d:1e:e0:d8:88:a1:2a:63:ec:0c:
                    40:dd:33:20:1d:37:54:d1:56:92:aa:4b:13:38:27:
                    83:be:00:5c:cb:2f:a5:9d:84:56:69:23:c1:27:07:
                    53:a1:ad:3c:a7:39:a6:38:9f:8a:c9:8b:20:43:61:
                    f6:de:e6:1c:54:9c:a8:6d:c7:5f:93:fc:9d:28:ff:
                    84:93:f6:33:0b:b0:8e:e3:be:4c:68:2d:ac:cc:d3:
                    96:cb:21:c3:a7:61:a2:ae:44:61:14:38:66:4f:4c:
                    2a:76:57:d3:cc:d8:2d:e1:5f:95:47:fd:ff:e4:fa:
                    ca:47:13:fd:bb:c8:d7:dc:38:f7:30:25:9d:48:d9:
                    15:47:f7:5c:fe:b7:2b:dd:39:2d:06:c7:63:58:6b:
                    c6:83:06:22:bb:a1:5f:c7:ed:4d:fe:d5:ec:5e:fc:
                    a3:44:b2:65:cf:ee:03:c6:ae:e4:da:d6:cd:30:cb:
                    1e:d5:eb:f8:cd:97:24:09:7c:74:0e:c9:50:3a:59:
                    6d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6A:09:7C:97:C2:B9:3F:5D:37:47:98:68:72:1D:33:D8:94:7F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/912e6cbd-06cd-39c2-8814-53eb816ddbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:07:15:d5:c2:96:57:70:ef:65:2b:75:84:74:96:76:ca:ae:
         d2:8c:86:ee:9c:9b:3c:9e:d5:48:a5:21:5f:fa:66:44:91:e9:
         48:1f:02:b5:98:50:ef:d9:77:7a:1d:14:88:d3:83:e2:90:8a:
         4f:3d:ee:f1:5e:c0:bb:3e:b9:c5:a9:b9:b4:10:22:4f:29:97:
         b3:43:94:e0:8c:62:16:a2:08:8c:30:91:a9:75:75:bb:81:67:
         c9:a2:29:c2:ea:c3:ab:00:78:eb:60:c7:c2:23:9e:90:cc:1f:
         fe:21:51:0c:00:21:36:55:8e:22:4b:81:3b:87:19:85:aa:03:
         a8:a4:1a:8c:b6:4a:94:da:31:29:65:f0:fc:e1:b7:a9:df:e6:
         64:64:2f:56:50:9f:d8:aa:ef:e2:76:fd:54:98:eb:33:16:eb:
         4c:9c:8e:da:19:f9:7d:89:3e:67:8c:eb:68:ab:26:83:b4:12:
         f7:10:16:28:97:1d:71:4b:4d:a1:bf:70:0e:a1:fb:a7:77:0f:
         6a:77:67:b1:bf:96:12:70:cb:1e:59:4e:fb:ec:b9:3b:5d:b4:
         d8:e3:f1:c7:ae:6a:6f:09:f4:2b:54:64:d4:7c:ed:ca:bf:cc:
         c4:88:c0:7e:7e:88:ad:51:48:df:23:41:6c:44:f3:a7:95:02:
         2d:67:f9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:24:18 2026 by rpki-client