Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fd7ab56e-b4f1-3457-8afd-f5687970ab18.roa
File:                     fd7ab56e-b4f1-3457-8afd-f5687970ab18.roa (raw, json)
Hash identifier:          FFIgi+aFS2q9W+ZxbI4Hv6uKqgBrMOnyaUThu5BdT4o=
Subject key identifier:   2C:C8:55:1A:3C:A7:C0:17:16:1E:1C:2B:FD:EF:D0:A2:98:83:52:8B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D1CE488F6468712C944236740
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fd7ab56e-b4f1-3457-8afd-f5687970ab18.roa
Signing time:             Mon 09 Mar 2026 16:24:41 +0000
ROA not before:           Mon 09 Mar 2026 16:24:41 +0000
ROA not after:            Sun 07 Jun 2026 16:24:41 +0000
asID:                     21859
IP address blocks:        23.27.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1c:e4:88:f6:46:87:12:c9:44:23:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  9 16:24:41 2026 GMT
            Not After : Jun  7 16:24:41 2026 GMT
        Subject: CN=839cc5ce-7abd-400d-a4df-7cc3473f0cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:2b:f0:34:e5:ab:e0:ca:3b:13:f5:a4:2c:
                    18:b2:64:15:6f:16:cc:11:57:95:18:15:1c:48:bf:
                    9e:64:71:b8:d9:92:5a:4f:30:7f:d2:4a:33:66:f6:
                    d4:fc:6b:cf:70:3e:e0:76:2f:5b:b5:9a:db:3c:60:
                    dd:5c:19:63:0e:84:b4:57:35:e2:0a:82:8a:2a:70:
                    80:ae:29:f0:56:27:04:e9:70:b8:ee:ed:cc:98:3b:
                    3e:7f:5a:40:53:b6:ab:dc:52:22:f5:9b:c8:0f:d0:
                    67:5b:af:dd:fc:d7:03:c8:f3:55:44:4b:91:ec:c0:
                    43:c3:fa:c2:4a:3b:51:75:a5:33:bc:2a:26:73:bb:
                    d2:19:41:d4:f3:60:8d:94:7a:69:98:41:78:b0:d7:
                    07:a2:d1:b6:22:15:48:75:d0:7c:25:7a:3f:58:50:
                    af:17:9f:6f:9f:0f:63:57:36:b3:68:d6:b2:89:91:
                    da:4f:71:a7:76:66:8c:d1:76:bf:e8:c5:0e:71:bb:
                    55:30:d9:fd:e4:a4:1e:43:0b:63:cc:cb:6a:82:e0:
                    9b:01:ae:21:85:f8:15:d7:1e:2f:95:59:69:7e:09:
                    87:45:bf:40:1c:99:13:2c:97:2f:eb:46:7d:2d:9a:
                    fc:af:01:ad:46:68:84:1b:a8:9a:e7:80:9f:dd:26:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C8:55:1A:3C:A7:C0:17:16:1E:1C:2B:FD:EF:D0:A2:98:83:52:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fd7ab56e-b4f1-3457-8afd-f5687970ab18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:cb:5d:28:0e:76:7a:78:bf:d1:10:59:52:b7:29:56:c7:ba:
         db:b0:26:92:cf:57:7c:fc:49:fc:c7:d0:d3:67:9b:cf:40:b7:
         d5:19:31:58:e3:ff:e6:97:c4:d3:d1:0a:85:b8:58:76:30:ba:
         8b:bb:4e:9c:f1:6c:86:58:15:90:3e:20:90:de:17:ef:96:a0:
         e8:2f:9f:ea:aa:47:9a:eb:cd:8d:b7:4d:d1:b5:8d:f8:76:ad:
         95:ec:43:b6:cd:28:0a:3e:17:c4:ae:ab:ef:a1:da:8f:56:c3:
         b2:1e:33:82:2d:88:a6:89:29:8a:59:8b:cb:aa:89:09:72:32:
         35:d2:32:63:2b:29:77:3a:d9:19:1b:31:ec:b6:83:0c:40:8e:
         e9:c6:41:3f:1b:94:e4:0b:f2:ed:87:de:3c:91:ad:ab:04:72:
         f8:7a:33:8a:8f:df:1f:e7:95:9e:25:a5:85:80:55:f1:91:bb:
         ca:71:05:d8:f0:e1:17:c5:4d:1d:f8:43:da:ce:c3:66:fe:d8:
         7f:0a:86:59:e3:3d:31:d6:61:1d:b8:aa:a3:b4:0a:15:2d:cf:
         5c:d2:38:b2:93:a4:5b:77:76:f3:36:8b:9b:25:f2:bc:98:75:
         02:81:d4:0b:a7:84:14:c0:5b:6c:b9:19:f1:71:de:d0:8a:67:
         b8:5b:77:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:52 2026 by rpki-client