Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6408a230-74f7-35a4-a8c6-9911d4aeafaf.roa
File:                     6408a230-74f7-35a4-a8c6-9911d4aeafaf.roa (raw, json)
Hash identifier:          ITzLKYFE442/Dx3m0aj3YAxJUawPykVb16XAv3cX1OE=
Subject key identifier:   44:12:E9:F1:1B:7D:02:B5:6E:1C:64:B9:4D:AF:54:7B:EB:54:5D:4E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CAB8C548F034A33A0EFA84500
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6408a230-74f7-35a4-a8c6-9911d4aeafaf.roa
Signing time:             Wed 28 Jan 2026 02:00:29 +0000
ROA not before:           Wed 28 Jan 2026 02:00:29 +0000
ROA not after:            Tue 28 Apr 2026 01:00:29 +0000
asID:                     149440
IP address blocks:        23.27.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ab:8c:54:8f:03:4a:33:a0:ef:a8:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 28 02:00:29 2026 GMT
            Not After : Apr 28 01:00:29 2026 GMT
        Subject: CN=254e3fd7-26e9-45e5-a0f7-3c53c00282cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:84:6f:ce:b2:7e:c8:80:39:a8:a8:1d:94:
                    1e:37:ea:3d:15:02:87:61:fd:81:f2:5d:40:92:7a:
                    f6:f7:54:9d:17:11:9e:fd:14:8e:f5:8a:19:c7:c7:
                    6a:6c:5d:cf:dc:0b:7c:78:11:4c:11:40:ab:cd:eb:
                    b9:22:0f:c7:d1:72:13:db:be:5a:d4:8c:5c:c9:1c:
                    91:eb:b6:62:df:37:30:ce:89:3a:60:d6:70:7d:de:
                    7c:59:d8:75:4b:ac:b8:f2:21:8a:dd:b4:28:3a:0a:
                    69:b8:80:60:dd:d3:4b:15:dc:4c:d8:fd:5f:9e:c0:
                    9f:30:29:e9:7a:4f:43:d5:83:60:99:91:05:41:5f:
                    09:41:47:d4:6d:3b:99:73:98:e1:c9:7e:e5:fd:b5:
                    cb:77:f6:d6:91:01:9c:5e:3a:81:c2:1e:77:59:59:
                    ff:54:2d:78:cc:6f:e8:d0:1b:7a:8f:0b:28:e8:b5:
                    33:5c:aa:11:93:b2:76:05:cb:6d:6a:49:07:b6:0b:
                    65:e6:ab:46:74:ba:99:43:56:78:38:21:87:3d:e4:
                    38:d7:31:d5:25:20:5a:af:87:7b:19:23:b8:67:72:
                    76:57:2d:d1:36:e9:81:19:98:82:7a:82:cb:60:a9:
                    ef:76:8b:16:61:33:e2:d8:19:a3:1e:9d:80:15:00:
                    7d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:12:E9:F1:1B:7D:02:B5:6E:1C:64:B9:4D:AF:54:7B:EB:54:5D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6408a230-74f7-35a4-a8c6-9911d4aeafaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:49:9a:58:5a:8c:27:86:98:10:c1:67:11:fb:49:07:ad:a6:
         10:ab:eb:4b:39:75:cf:67:3a:05:ce:59:67:d5:42:23:91:98:
         a7:7b:65:c4:5d:e4:20:23:1d:6b:29:a8:44:30:c9:c5:f1:e2:
         10:bd:d5:6f:03:82:3b:06:8a:30:53:f1:3a:2a:19:a7:51:1d:
         9e:cd:a6:d8:3d:4d:5a:3c:82:35:01:4b:06:d7:f2:50:4b:af:
         f7:a2:71:73:bf:7f:6f:1e:10:6d:0c:12:87:21:80:a3:eb:3a:
         ae:80:e2:7c:ff:54:78:b9:7f:88:d1:a9:be:5f:72:4a:0b:8a:
         96:d5:2a:d4:1c:94:19:79:81:2f:25:3e:5f:f6:02:59:8e:78:
         f5:b4:38:80:22:f5:83:c1:f0:72:25:58:93:be:28:29:c0:f1:
         f9:a3:95:12:e1:77:7d:39:df:51:a1:70:aa:3e:7a:5b:de:9c:
         ee:55:d8:db:e5:b4:ff:00:fe:7b:47:38:e2:56:bd:99:4b:9a:
         26:c5:fb:ca:97:56:d6:23:20:80:5f:43:7e:13:c2:38:f2:66:
         5c:3f:69:41:ea:a1:3d:45:99:b7:87:4e:c5:66:b7:98:97:4e:
         5c:19:f2:8b:64:f6:02:ce:78:99:ed:e4:ca:0c:3f:39:a6:b1:
         5e:ed:a2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:29:37 2026 by rpki-client