Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cae46c1b-9e25-3f8b-848c-3f5e725d04b1.roa
File:                     cae46c1b-9e25-3f8b-848c-3f5e725d04b1.roa (raw, json)
Hash identifier:          YhhnOm11WO2mY88OIlU0g4BONW0j2PwvjhIbvkD+9u4=
Subject key identifier:   8D:C7:C0:4C:87:BA:81:F9:68:DD:34:93:A8:F9:8F:A8:06:38:B7:B6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F2ABD2F414F23299473FDFE00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cae46c1b-9e25-3f8b-848c-3f5e725d04b1.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     262287
IP address blocks:        23.27.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:2f:41:4f:23:29:94:73:fd:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=12304244-f23a-4187-a6d0-e1ed8aab1adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5f:54:0c:61:9a:eb:5b:29:99:cd:f0:5a:be:
                    ae:dc:ee:41:70:c6:e3:ae:f4:a8:34:b5:ef:53:75:
                    73:d5:0f:63:03:4a:ea:14:66:38:b4:f9:ed:75:61:
                    90:5f:83:76:e8:1c:76:a6:fc:d3:c8:9e:07:3d:14:
                    a2:e5:cd:47:cf:01:55:a3:ea:25:0f:1b:ac:91:78:
                    6c:c7:80:4d:d0:ac:2d:67:1b:28:37:bd:48:3e:b9:
                    9c:bd:b8:38:ec:21:e4:c5:97:f4:8a:58:33:88:b8:
                    46:44:ba:09:84:ab:bd:b1:f2:41:13:f3:c2:51:9b:
                    08:eb:a5:c6:5d:b7:7f:0a:df:d8:a8:5b:5b:de:2e:
                    2c:ee:56:d8:33:81:ab:c5:2b:c0:42:5d:56:27:e3:
                    93:31:7e:a9:12:a9:a3:73:83:fe:83:ba:37:b4:8e:
                    cc:54:e5:3f:73:78:69:59:d3:21:2e:a5:25:c2:16:
                    dd:1f:46:78:b1:fa:6b:b5:05:59:f2:3c:42:cc:f4:
                    6d:30:34:e6:9c:12:38:6b:6b:8e:ea:54:c2:97:33:
                    e4:f0:ba:07:e5:ff:ae:c4:9c:84:02:c2:13:83:e6:
                    13:b5:1a:d8:e3:6d:61:94:71:f8:a3:60:bb:38:4c:
                    95:fa:ed:f7:66:87:73:b9:28:43:26:3c:d6:03:49:
                    ea:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C7:C0:4C:87:BA:81:F9:68:DD:34:93:A8:F9:8F:A8:06:38:B7:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cae46c1b-9e25-3f8b-848c-3f5e725d04b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:15:b2:30:fe:a0:75:bc:05:01:a1:14:53:fc:2f:78:bf:7e:
         f8:c2:ed:f3:8e:80:25:74:06:23:3d:9f:50:99:dc:95:4f:9d:
         c9:d7:6a:e1:4d:1a:99:50:96:21:a8:0c:eb:d3:ad:56:69:b3:
         d2:9f:e1:b6:c9:79:34:13:15:02:e2:d3:6d:15:92:df:8e:05:
         a4:92:f3:f7:ec:73:7f:c5:54:0b:b3:29:97:97:7c:4f:5d:c0:
         bc:62:80:0e:55:9f:ed:74:3f:b3:05:53:3b:61:eb:6d:9d:8e:
         a4:d6:d6:97:de:c3:6c:c7:fc:92:c6:b0:39:c7:d0:e1:de:64:
         91:de:fe:89:40:67:29:46:22:da:3f:db:9d:09:83:50:84:d7:
         37:97:c4:fc:28:7a:29:db:d5:2f:2c:c8:8b:8e:2d:ba:a3:a3:
         0e:1f:91:11:ed:ba:15:d5:92:63:4e:6f:a7:84:52:b9:fd:06:
         e7:24:f8:92:cf:8a:97:a3:4f:dd:eb:5a:3a:52:00:e4:35:83:
         32:9e:82:1d:a4:ca:7e:d0:21:74:ea:00:7e:40:7b:f2:1f:4b:
         cf:73:1a:83:a1:24:8b:97:94:04:5b:33:88:0c:29:6b:bf:53:
         62:a9:9b:ba:55:a6:27:06:02:26:51:2c:3a:19:79:79:10:de:
         a8:e4:57:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:22:43 2026 by rpki-client