Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a75db10f-e64d-3679-a350-bf11dbcea249.roa
File:                     a75db10f-e64d-3679-a350-bf11dbcea249.roa (raw, json)
Hash identifier:          KTLwuHS7OJa0nArwJC3ije2p4UdwVffJMcfDdlOkMro=
Subject key identifier:   63:51:4C:B0:3D:C0:4D:F4:0C:0A:90:85:F0:32:3D:1B:DA:C1:6A:AB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D1F4A0598587FF5562BF2EE00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a75db10f-e64d-3679-a350-bf11dbcea249.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     7029
IP address blocks:        23.27.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:05:98:58:7f:f5:56:2b:f2:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=6987b3fb-c5bf-4630-8022-7ffa9125e28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:46:d1:4d:06:03:15:b3:09:57:48:0b:68:
                    bb:2f:57:25:51:9c:93:fd:4f:45:04:83:07:72:8d:
                    18:1f:d9:7e:35:8f:27:50:f8:f8:f6:4a:a5:1a:cd:
                    a3:d5:ea:79:e0:75:4c:52:5b:cd:ee:3e:e9:86:90:
                    da:f6:eb:c3:e8:64:a9:32:c8:b4:ab:b2:cc:c5:b2:
                    bd:f2:62:37:26:4b:bb:34:e5:6b:08:9e:8c:72:b6:
                    b0:fc:b6:31:be:6b:44:6f:94:f1:b8:3f:cf:7d:6b:
                    a8:8e:60:f8:14:b6:72:4b:74:f4:b8:71:c6:05:e4:
                    cb:ac:60:a8:2d:18:d9:84:57:60:b9:5e:4b:fa:71:
                    ac:5c:ea:3d:f8:95:9e:85:eb:40:86:04:d3:e6:9b:
                    b1:5a:a9:11:44:8f:f9:e0:88:10:3e:f6:d8:62:c4:
                    6f:73:12:a0:de:8b:54:3c:9b:d0:ce:96:fd:7d:be:
                    9c:5a:87:77:9d:75:30:45:fb:16:9e:57:1d:c2:95:
                    d7:de:c3:97:65:e0:70:69:fe:2b:dd:15:c0:40:8f:
                    d8:37:56:64:44:97:74:f3:a3:ab:4d:bb:56:c1:dc:
                    2a:5b:dc:af:20:11:28:04:70:63:e1:c2:5f:59:99:
                    9b:33:9d:97:2c:19:82:bd:f3:69:cf:ae:1b:10:03:
                    91:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:51:4C:B0:3D:C0:4D:F4:0C:0A:90:85:F0:32:3D:1B:DA:C1:6A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a75db10f-e64d-3679-a350-bf11dbcea249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:90:36:bb:31:14:09:31:fb:76:32:c7:9e:a6:06:2b:5d:d7:
         96:3f:fd:5e:e0:64:08:18:ad:09:16:f0:bb:fc:7a:77:c6:d4:
         8f:2c:16:5d:6f:e7:41:3b:5e:f8:67:bc:66:bd:8b:a3:72:6f:
         66:66:2d:e9:a0:fc:a3:17:da:06:49:f7:0d:fc:f7:01:c6:7b:
         85:1e:8f:be:7d:87:7d:84:85:e3:0b:d5:c7:8b:70:db:e1:7c:
         de:8c:4a:c5:fb:cf:80:e7:44:b5:bc:36:07:05:4f:10:67:e9:
         ad:30:5d:45:ed:39:f8:70:0e:bc:9e:f9:07:53:f4:2a:95:23:
         f3:d6:9a:96:2d:1c:83:69:ca:81:6b:46:74:63:fa:b6:6f:52:
         c9:c2:c2:50:8f:0b:96:de:a7:ae:ca:63:c7:29:0a:86:68:8b:
         b2:09:f8:ce:75:f0:ff:f4:43:c0:97:fa:15:35:cc:46:e0:d0:
         43:d4:97:e3:00:a3:76:f9:92:41:80:83:94:e8:18:92:6a:81:
         8a:e2:1a:63:dc:83:39:d5:65:17:e2:c9:e7:d9:2e:ee:0e:3d:
         3d:3a:df:91:93:9b:e6:0e:d0:16:75:67:a7:71:1f:af:9f:f0:
         1c:83:9d:61:ec:af:64:89:31:b7:93:3a:1c:eb:b6:27:89:3b:
         7c:a7:0f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:47 2026 by rpki-client