Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f25bd8c5-e56a-380d-a560-92b192b03bac.roa
File:                     f25bd8c5-e56a-380d-a560-92b192b03bac.roa (raw, json)
Hash identifier:          2Jt3O6mw+eF0CdAuMiLemQzAcZSMrtNFr90OMstgIJk=
Subject key identifier:   73:A8:64:CB:40:C4:20:1B:4F:E1:4C:FE:ED:75:EC:BE:99:A5:3F:FF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D01156CADFA0DE12112BADD80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f25bd8c5-e56a-380d-a560-92b192b03bac.roa
Signing time:             Fri 27 Feb 2026 17:20:33 +0000
ROA not before:           Fri 27 Feb 2026 17:20:33 +0000
ROA not after:            Thu 28 May 2026 16:20:33 +0000
asID:                     834
IP address blocks:        23.27.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:01:15:6c:ad:fa:0d:e1:21:12:ba:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 27 17:20:33 2026 GMT
            Not After : May 28 16:20:33 2026 GMT
        Subject: CN=88565715-4dde-40fd-b21a-c2c1a0a7ff81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:54:89:4d:f4:c1:95:43:7b:48:9c:63:68:
                    25:c8:68:e6:b6:a7:60:9e:73:1a:6a:06:ca:5a:fb:
                    39:40:d0:8c:db:ac:e3:ab:6a:91:7b:ba:fd:d1:9b:
                    41:bf:ab:f7:df:70:b3:27:79:cb:08:c5:30:25:a1:
                    c4:78:e1:40:60:ad:db:20:bb:53:0a:94:00:60:c8:
                    ef:04:f5:a2:8b:f7:fb:c7:f1:92:5e:16:4b:be:85:
                    3d:bb:3d:75:5c:b4:d9:19:de:45:cf:01:f4:62:24:
                    55:e9:e1:19:36:72:59:91:ca:4c:81:8d:f7:dd:4f:
                    15:42:38:d6:79:d4:1e:dc:9c:a9:1c:bb:82:18:e6:
                    9d:17:28:c6:5a:d0:dc:e6:3c:15:11:80:25:31:ed:
                    f3:64:a7:9f:28:29:76:9d:9d:b8:b3:b9:5b:7a:63:
                    c2:1b:3e:94:2f:8d:b7:5a:34:7c:19:ec:7e:7a:9a:
                    61:4a:99:4c:15:1d:40:03:ef:ce:9b:3a:47:c4:3b:
                    71:d3:41:8f:f9:bf:0d:37:6f:a9:cf:db:12:0f:01:
                    a3:57:d9:c6:c6:53:08:4f:9d:72:e9:65:40:8e:0b:
                    50:98:54:2c:10:aa:20:0c:03:c5:34:3a:28:62:18:
                    64:42:ee:c5:ed:85:bd:8e:ad:30:bc:90:b2:33:19:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A8:64:CB:40:C4:20:1B:4F:E1:4C:FE:ED:75:EC:BE:99:A5:3F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f25bd8c5-e56a-380d-a560-92b192b03bac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:a3:9c:eb:73:87:2b:1b:74:f5:b3:02:cc:a8:58:61:65:
         76:b8:62:6b:d4:16:5f:d7:94:8b:8c:6a:50:ec:ae:12:a2:0e:
         7a:49:99:ab:59:19:d1:57:bb:2c:a6:d5:31:83:ab:1a:44:db:
         c3:b8:d1:38:58:ac:5b:9c:c9:36:d8:98:85:bd:32:7b:4e:28:
         d2:b9:5c:4d:04:c6:0c:16:44:b6:ef:dc:18:86:67:1a:b7:70:
         15:08:7b:79:39:15:4e:cd:b1:20:3f:33:b2:67:16:81:63:0b:
         62:90:e3:ed:c6:a6:f3:d4:ce:7e:34:39:af:53:cb:1f:08:7d:
         dd:8a:5a:38:fa:c6:12:ab:32:81:07:bd:11:b9:fa:de:9a:97:
         0d:17:f6:e1:d8:b8:3b:98:85:a1:1c:54:41:d9:ff:14:13:9e:
         86:b6:e8:ce:75:51:88:2d:5e:6a:96:7a:2e:bd:db:39:50:15:
         ca:98:c6:d3:81:6b:87:52:fb:1d:c5:68:8a:bb:96:86:20:53:
         2b:64:cb:01:9c:91:f2:4c:91:1c:cc:01:be:fc:52:c3:31:d6:
         f4:90:40:4e:f4:15:c8:82:71:93:e8:e2:49:ca:7b:37:ef:5f:
         91:e8:d8:8e:40:d9:eb:bd:47:59:94:57:73:c8:30:47:5b:d5:
         b2:21:ba:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:10:22 2026 by rpki-client