Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36d93702-5d1c-349c-9aa6-8a8ec8152fe9.roa
File:                     36d93702-5d1c-349c-9aa6-8a8ec8152fe9.roa (raw, json)
Hash identifier:          qSQc7+l1hxafS6I63rnVpCG+YOGdbAIjxDKxatPWVbo=
Subject key identifier:   2F:10:E1:D7:84:2F:A7:95:3A:0A:E0:EC:36:48:39:77:53:1B:20:B1
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CD804775CF065AF20B7273800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36d93702-5d1c-349c-9aa6-8a8ec8152fe9.roa
Signing time:             Fri 13 Feb 2026 00:18:14 +0000
ROA not before:           Fri 13 Feb 2026 00:18:14 +0000
ROA not after:            Wed 13 May 2026 23:18:14 +0000
asID:                     401152
IP address blocks:        23.27.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d8:04:77:5c:f0:65:af:20:b7:27:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 13 00:18:14 2026 GMT
            Not After : May 13 23:18:14 2026 GMT
        Subject: CN=6ec25d63-07d0-441f-bb01-9328ff5e9bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:07:5d:85:33:7d:57:bb:3c:37:d7:56:e2:22:
                    e3:13:32:30:96:60:90:fb:b9:fa:03:bd:e4:ae:7c:
                    9d:ad:71:c1:0b:47:54:00:90:5b:57:c7:3d:a6:cf:
                    9d:4c:b4:58:59:03:19:8d:ed:b4:b3:5d:76:42:69:
                    0e:a9:36:76:57:b0:95:f3:e8:d9:01:ed:8b:93:68:
                    98:d0:19:a9:85:28:7a:c3:72:24:a8:c6:24:47:17:
                    22:f5:fb:5c:b4:4a:f4:41:e3:68:76:a9:91:d2:6a:
                    f3:46:96:84:38:92:4a:ea:b0:c8:7e:7a:8c:62:fd:
                    67:f2:4b:db:ee:c5:59:18:fb:66:4a:0c:3d:18:b9:
                    42:7c:4e:85:72:04:5d:4f:21:31:de:c9:20:88:cb:
                    d2:28:19:ee:18:c6:4d:97:9a:de:39:df:e8:5f:ce:
                    da:f2:a1:47:17:41:8d:79:b4:cd:ba:cc:69:05:f1:
                    58:fd:e1:b2:7d:19:02:72:bc:69:97:1c:87:08:36:
                    93:28:ce:22:a2:89:21:84:29:e0:33:68:dc:bf:4e:
                    8e:62:32:3e:ec:cf:68:5a:6c:70:92:ef:1a:fc:6c:
                    f0:9d:a2:27:16:13:1e:70:fd:84:0d:68:75:91:e7:
                    12:91:fa:1c:94:5c:ff:10:a1:26:ac:b3:55:92:9b:
                    a4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:10:E1:D7:84:2F:A7:95:3A:0A:E0:EC:36:48:39:77:53:1B:20:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36d93702-5d1c-349c-9aa6-8a8ec8152fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f4:12:e2:6d:46:88:5f:01:45:a0:e4:b8:ae:e1:cc:59:bc:
         aa:13:87:c5:a7:4f:94:50:0d:24:25:88:fb:d1:ae:1e:64:23:
         df:83:47:9e:cb:76:65:34:7f:07:76:eb:da:ec:9e:7a:a3:7e:
         ee:aa:45:8a:48:3f:5d:fc:4a:ea:7a:fe:b9:73:35:3d:46:c9:
         97:df:89:f6:04:a6:8f:61:03:06:51:80:16:b3:f5:8f:aa:a7:
         fa:a5:07:de:8d:f4:0f:b7:de:06:e9:dd:99:b7:32:65:5d:a1:
         f9:70:3c:10:51:80:d6:3e:a6:94:77:fd:4d:66:d0:d8:93:c7:
         e1:fb:01:53:42:dc:e3:ab:c3:7c:41:f0:18:48:24:85:ed:6f:
         33:54:8b:9a:fa:22:11:f5:a6:90:f4:10:b8:fb:20:be:26:9e:
         d0:01:f6:2c:7f:86:67:ca:0a:50:4e:6b:5e:a7:ca:94:c1:04:
         04:0e:7f:6c:c2:5d:7e:77:30:00:14:df:fc:ee:4e:29:69:c6:
         9f:7f:12:c2:ee:ea:c5:4d:6f:cf:30:9e:ec:ba:20:27:ae:ff:
         14:17:da:39:d2:f4:d7:fc:82:57:4b:bd:2e:e1:62:d0:01:9c:
         4c:a3:5c:72:60:5a:a3:8d:f5:ae:cc:e9:b6:54:eb:98:77:7e:
         1b:93:8f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 09:27:44 2026 by rpki-client