Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/956593cc-f2c3-388a-99d5-f11a2ce24419.roa
File:                     956593cc-f2c3-388a-99d5-f11a2ce24419.roa (raw, json)
Hash identifier:          l2W1TWHBFf6JDt1STm8WHmhCyrjazEx6gOcm8R4nhos=
Subject key identifier:   D0:34:F3:49:73:78:01:F2:3D:A3:74:57:0D:8B:AA:C2:2A:9C:5A:8D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D076FF41C74F458E4CB1F5B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/956593cc-f2c3-388a-99d5-f11a2ce24419.roa
Signing time:             Sun 01 Mar 2026 23:57:48 +0000
ROA not before:           Sun 01 Mar 2026 23:57:48 +0000
ROA not after:            Sat 30 May 2026 22:57:48 +0000
asID:                     18779
IP address blocks:        23.27.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:6f:f4:1c:74:f4:58:e4:cb:1f:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  1 23:57:48 2026 GMT
            Not After : May 30 22:57:48 2026 GMT
        Subject: CN=480304bc-44a3-4fba-b665-a8c58c9e2157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:e3:6d:cf:f8:c9:73:bc:10:d6:9c:89:b7:
                    12:8a:a1:2e:20:40:3e:23:00:8c:7d:41:7b:9c:73:
                    70:6b:d7:1d:04:d8:5a:c9:48:61:4e:ae:2d:17:11:
                    46:3b:bc:95:a6:7c:30:59:cd:5d:3e:8d:c4:36:1c:
                    d6:b2:13:b5:18:9a:6d:e2:b3:0c:55:4a:04:11:08:
                    13:ad:e4:ad:75:c6:08:5e:91:91:53:75:36:d7:f0:
                    82:aa:2f:10:59:84:39:77:9d:35:81:57:05:65:fe:
                    43:a0:85:a9:60:c2:2e:bf:ce:83:e9:ae:ab:85:6c:
                    ca:08:43:1e:70:31:e0:f1:10:d8:64:b2:f8:94:b4:
                    dd:5a:e6:74:64:61:2e:4b:99:6c:76:a2:b5:f3:1d:
                    26:66:7a:07:99:af:b3:af:46:8f:c9:3b:b3:9a:30:
                    a9:14:f5:96:5c:6a:2f:2b:df:5a:c4:6a:19:df:b0:
                    eb:1c:de:29:f0:f0:b4:28:8b:03:9f:53:0a:95:5a:
                    56:ee:96:42:44:73:58:46:dd:7d:59:7d:92:e1:bc:
                    dd:86:c6:f9:31:72:4d:5f:b1:cd:5d:2d:b6:ba:3b:
                    3f:ab:3a:d7:a5:13:cc:2e:77:21:da:4e:1b:e4:36:
                    00:b1:20:cd:3b:ba:05:35:6f:a8:63:d9:56:21:9d:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:34:F3:49:73:78:01:F2:3D:A3:74:57:0D:8B:AA:C2:2A:9C:5A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/956593cc-f2c3-388a-99d5-f11a2ce24419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:10:57:90:f4:17:d8:c3:fc:57:15:c3:c3:ef:1a:0a:bd:10:
         51:90:7c:0b:a6:bc:91:96:3e:33:2f:e4:8f:2c:75:42:c9:b0:
         58:c1:0d:92:09:1e:9e:e7:6e:9b:60:0b:ca:fa:fc:6c:50:50:
         38:bd:ca:84:10:ec:fb:e3:8a:91:d2:62:73:81:8c:a3:03:fe:
         ea:be:0b:d0:f6:88:3b:65:da:37:4f:73:e2:53:cc:ec:a5:13:
         70:e0:36:04:48:bd:d8:82:b4:a8:50:28:71:67:8d:5a:51:b6:
         78:a6:ab:40:04:b3:25:fb:45:3c:e1:85:e3:88:62:31:2d:12:
         0a:5b:3d:8d:54:c3:1e:73:f9:01:99:9f:72:b7:18:7c:65:fe:
         1b:e0:06:56:b2:e4:ce:e7:99:48:c2:d3:a9:5c:a1:db:2c:29:
         f3:5d:3d:a0:84:0e:21:51:9c:e5:20:1f:d0:c8:93:ea:41:55:
         19:87:17:98:64:60:ce:93:d4:6d:92:b4:7d:ff:e9:f4:5d:1c:
         31:a1:49:33:b5:8f:69:e4:6c:ee:84:7c:1c:cf:b9:3e:77:34:
         3a:1a:44:1a:07:f0:cf:68:44:27:3a:57:3d:fe:1d:4c:d2:9b:
         6d:d6:51:36:71:ec:8a:8d:8e:4c:80:09:31:bd:af:d4:a0:72:
         de:79:47:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:58:50 2026 by rpki-client