Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/da27a238-434a-37a3-8e90-424fb2bfd57b.roa
File:                     da27a238-434a-37a3-8e90-424fb2bfd57b.roa (raw, json)
Hash identifier:          Z/AL4thD+VT4Xcn1Zs9UzSQwEIvvY0SWMJgd/65vlJ0=
Subject key identifier:   58:B0:F3:63:77:17:FE:E2:88:E4:B3:2D:B8:10:14:90:11:7C:7D:DE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D012C1A18E5FFA6C3F36C4240
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/da27a238-434a-37a3-8e90-424fb2bfd57b.roa
Signing time:             Fri 27 Feb 2026 18:06:15 +0000
ROA not before:           Fri 27 Feb 2026 18:06:15 +0000
ROA not after:            Thu 28 May 2026 17:06:15 +0000
asID:                     212238
IP address blocks:        168.93.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:01:2c:1a:18:e5:ff:a6:c3:f3:6c:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 27 18:06:15 2026 GMT
            Not After : May 28 17:06:15 2026 GMT
        Subject: CN=e1b25846-5494-4503-a90c-0f846769f6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:94:35:2b:4c:95:52:21:5e:26:df:3b:70:
                    9c:4d:2c:5e:ab:6f:73:de:0c:a7:e3:d6:ac:48:a9:
                    71:df:b4:23:3b:9f:5d:04:9a:7c:90:04:1b:9c:e9:
                    a3:45:9f:e3:10:fc:4b:55:17:02:4d:fe:e7:a7:16:
                    23:a1:63:95:82:c4:4f:9d:82:fb:e3:f3:ff:ed:32:
                    60:65:77:44:77:6a:46:92:ec:55:a8:da:8c:2d:45:
                    f3:f4:78:1c:73:c4:12:1a:fa:c4:79:c8:14:28:43:
                    32:a2:bf:5c:42:5b:fd:4a:f6:c7:df:ab:93:a6:9e:
                    fe:d1:13:e6:4f:8d:f0:fa:c9:e0:36:3c:e5:58:db:
                    10:fa:8a:f9:37:c1:71:74:6c:58:6f:52:f6:d9:b0:
                    ab:09:44:59:ea:ed:ac:ad:4c:f6:da:89:e5:55:ae:
                    76:fb:f4:2d:b9:02:62:b2:7c:bc:d2:6e:9f:3f:b2:
                    cd:67:7f:df:a3:37:b3:26:9a:63:83:a4:50:86:9a:
                    51:07:f7:93:e2:08:a6:13:00:41:9f:b5:50:00:bf:
                    93:f9:cd:75:4d:61:ef:35:41:ed:59:1e:46:ff:92:
                    1d:84:80:ef:66:a2:cc:d3:65:16:fe:47:22:67:64:
                    69:fa:5d:c4:a0:2e:e3:e7:21:af:98:da:9b:be:0a:
                    7a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B0:F3:63:77:17:FE:E2:88:E4:B3:2D:B8:10:14:90:11:7C:7D:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/da27a238-434a-37a3-8e90-424fb2bfd57b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ec:94:95:92:24:a2:48:3e:76:84:85:ce:04:38:d6:ea:3b:
         e5:ba:c9:fa:56:b6:2d:bc:6a:40:55:22:7f:94:07:80:10:67:
         11:fe:b3:3e:99:fc:0d:ea:fd:cd:a6:4f:7c:63:b8:d9:68:ec:
         e5:20:e9:7c:07:11:af:5c:54:3c:fe:78:e2:2d:76:83:f9:e4:
         f3:c8:e6:ae:a6:04:fe:18:1d:97:a7:9e:8c:9b:23:30:09:bc:
         e7:bb:fc:6a:9c:59:4d:87:24:4a:99:9d:cb:aa:42:ba:45:ef:
         8c:da:16:59:af:f7:04:f8:f7:a9:34:72:6e:a2:23:4d:0b:68:
         e4:6a:5c:ad:9e:83:a6:0b:4c:49:cf:fd:c1:fa:80:99:b7:a3:
         e9:13:f6:6e:af:e0:a1:4a:87:73:5b:80:6e:d4:08:4e:e5:24:
         3a:9f:f9:c0:ee:ef:b4:76:61:06:af:5c:b2:bb:50:fb:50:b5:
         87:04:ee:a4:8b:ae:78:43:ab:bb:3a:1c:46:fc:c7:7a:ac:96:
         dc:87:77:74:c3:21:c5:72:1f:6c:49:aa:a6:ca:b8:d0:d9:d1:
         a1:b5:e9:7c:d7:4c:2a:b0:02:94:ec:67:64:99:f0:54:3b:58:
         dc:90:31:58:2d:4c:5b:d4:f3:98:e9:d3:62:96:9e:b7:91:ac:
         45:37:be:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:24 2026 by rpki-client