Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fbc076b0-c17c-344f-b46b-5fd27670d07a.roa
File:                     fbc076b0-c17c-344f-b46b-5fd27670d07a.roa (raw, json)
Hash identifier:          ulTTpU1nvOVO7PT79cTAjI+9t4HkosDY4z3ZSnloiSc=
Subject key identifier:   D1:15:3F:46:F4:20:CC:59:97:B0:C2:80:59:2B:5F:EC:C1:82:EE:8C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D9A201FB188D688926BD3CF00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fbc076b0-c17c-344f-b46b-5fd27670d07a.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     5650
IP address blocks:        23.27.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:1f:b1:88:d6:88:92:6b:d3:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=879f3ba8-64ca-49dd-bc6a-71855dde4be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:55:53:b5:8a:bb:dd:10:c5:54:44:85:17:
                    c4:c9:a6:e9:b0:7a:2c:a7:c7:4a:f4:9d:14:7c:57:
                    36:68:e5:9f:09:98:4b:6f:5b:ce:ef:e1:01:0c:19:
                    ae:3c:b7:64:72:cd:35:c2:cf:25:ee:7e:57:43:b7:
                    e4:e0:d4:db:0c:37:8a:b4:3c:ed:1c:bf:bf:a4:e1:
                    db:60:78:31:01:53:d7:30:4d:c2:bd:d3:8b:33:63:
                    5a:6a:4c:8d:18:f5:92:ac:e1:be:97:11:08:5b:a5:
                    0b:53:85:99:48:e0:64:5f:d5:9e:3a:6b:eb:54:d6:
                    2f:65:f5:72:58:be:7c:1e:85:50:79:cd:c0:dc:07:
                    77:de:76:19:31:11:c4:7c:8e:d7:91:ef:35:62:e5:
                    b8:65:35:c8:6d:9c:57:24:a2:d9:d0:82:a0:95:5e:
                    ed:08:89:07:65:35:92:2f:72:ec:42:61:23:7e:0e:
                    aa:31:ea:82:13:2a:69:83:68:f7:66:65:84:5b:88:
                    1a:df:22:2c:16:f5:3e:5b:34:19:f1:17:34:2f:41:
                    6e:20:ae:46:4c:9f:b6:a8:e2:4c:c4:f9:b8:39:56:
                    65:aa:01:dc:8c:60:d2:dd:df:60:76:b5:95:a8:7e:
                    2a:9d:87:f4:de:da:2a:dd:ee:69:35:dc:18:ec:89:
                    50:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:15:3F:46:F4:20:CC:59:97:B0:C2:80:59:2B:5F:EC:C1:82:EE:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fbc076b0-c17c-344f-b46b-5fd27670d07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ec:ae:42:0b:c4:a6:8a:c1:60:6e:10:29:d4:31:2a:5f:c8:
         a7:bc:0d:47:71:f9:20:50:31:2f:cf:ec:f1:9d:be:84:0f:d1:
         9b:54:59:5b:ae:9c:06:2d:34:df:8d:e3:ad:ba:94:64:a5:92:
         dc:fb:23:a1:0b:94:54:e0:3a:9a:b9:c6:ee:97:43:da:a2:9c:
         2c:ab:f5:b3:54:e7:ac:40:bf:52:f1:dc:94:8a:ff:5a:ef:45:
         d3:ac:02:b0:c7:fa:6f:8a:8e:e1:12:76:49:91:0f:05:8d:59:
         64:3d:d4:0a:09:18:80:88:61:f5:6b:d2:c4:56:36:70:36:72:
         58:3f:99:1c:ff:57:57:4f:71:d8:d5:c4:bf:07:e7:fc:c4:cc:
         20:18:43:5f:fc:03:44:ad:88:b8:2c:04:78:d1:19:28:34:a1:
         3d:f3:61:00:fa:4c:0b:84:ec:50:0c:c7:e2:23:67:09:41:cc:
         c3:17:ee:dc:a3:a8:36:ab:bd:3a:a8:73:66:e0:cf:44:94:4d:
         44:33:59:7f:26:f7:d6:b9:42:00:98:37:a0:88:50:05:c4:df:
         96:da:81:88:e1:05:b8:40:a9:3b:b3:5b:14:9e:9e:3d:0e:14:
         3e:37:7a:82:7b:49:f4:5c:82:a7:0b:ec:41:ea:31:53:e7:3a:
         53:fa:3b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:35:01 2026 by rpki-client