Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/83f464d1-fd20-3acf-bf73-8e735f4fb35d.roa
File:                     83f464d1-fd20-3acf-bf73-8e735f4fb35d.roa (raw, json)
Hash identifier:          ZvtFmLe8G6mtRzn5YrckpiNMXJgauHE2kuPOiKPr7aA=
Subject key identifier:   0E:57:55:74:C2:B0:C7:8F:2D:6B:FC:5B:0D:03:97:5B:A8:AD:66:C4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584C9C31BEC3E8B8C4DB2CDB5680
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/83f464d1-fd20-3acf-bf73-8e735f4fb35d.roa
Signing time:             Thu 22 Jan 2026 14:00:37 +0000
ROA not before:           Thu 22 Jan 2026 14:00:37 +0000
ROA not after:            Wed 22 Apr 2026 13:00:37 +0000
asID:                     40676
IP address blocks:        23.27.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9c:31:be:c3:e8:b8:c4:db:2c:db:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 22 14:00:37 2026 GMT
            Not After : Apr 22 13:00:37 2026 GMT
        Subject: CN=ddebf77e-2650-41ed-b76f-af6fd557d41b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:a2:4c:07:d5:16:8b:90:dd:8a:84:96:65:
                    69:41:3f:aa:27:26:0c:bb:ce:bb:02:c6:2e:f3:e9:
                    24:13:db:21:27:0e:24:d2:ea:bc:22:38:b3:61:b2:
                    97:cb:f0:ce:d7:5e:44:ed:db:41:a7:e6:65:13:cf:
                    1b:bc:a0:a2:41:50:cb:c7:64:dc:a0:6c:98:cc:8d:
                    c3:ea:37:dc:9f:b2:2d:21:c5:ed:84:64:09:70:ea:
                    1f:5b:f2:e9:37:c9:90:72:79:bf:05:e8:52:7a:3b:
                    90:1e:d5:4e:f1:15:fc:54:ea:2f:2c:e3:71:7e:3d:
                    12:54:1a:25:22:a9:71:7f:bc:28:06:90:ed:75:da:
                    02:a7:ae:1c:4d:60:a4:28:f6:f3:71:de:4f:3b:d1:
                    4a:a6:20:4c:0d:bf:d0:85:60:d0:44:54:60:cc:f5:
                    46:4f:a5:95:96:9f:bf:15:98:29:f5:ba:49:cd:c0:
                    ac:1c:b5:47:ae:f5:12:b6:d4:51:23:fb:d7:44:1d:
                    5e:c8:91:06:57:be:66:27:03:b1:03:44:91:6c:99:
                    e2:25:09:7b:44:7d:f6:79:6c:1b:1d:0c:b1:52:75:
                    28:bc:d7:e0:2a:77:98:9f:ea:d3:4a:0f:64:db:19:
                    65:21:27:1c:99:67:08:42:7a:01:65:48:bf:9e:f5:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:57:55:74:C2:B0:C7:8F:2D:6B:FC:5B:0D:03:97:5B:A8:AD:66:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/83f464d1-fd20-3acf-bf73-8e735f4fb35d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:69:7e:49:7a:e5:06:7c:5b:58:3a:ff:d9:7d:b8:1f:9b:52:
         ec:d1:4d:64:ad:44:e5:15:02:19:cf:c0:5c:7f:50:1d:a1:12:
         54:e1:00:62:d5:55:5c:2d:e2:d5:ba:69:3f:53:ff:b6:9c:f9:
         9b:be:66:c3:48:7e:07:a6:61:f2:ae:50:0c:8e:9e:6f:55:a3:
         68:92:9b:01:fb:28:8d:66:6c:33:c5:83:30:7b:6e:0e:c4:0f:
         86:fd:62:0a:59:77:59:9e:df:41:c8:81:d7:d1:04:21:53:e6:
         4c:8a:ee:38:d9:29:cf:14:15:02:d2:42:85:d1:50:63:70:aa:
         6b:28:ed:e8:a1:62:5a:f3:f5:dd:28:b7:34:18:18:4e:ef:f3:
         d4:4c:a0:5e:11:b5:f7:a3:c3:76:ef:af:9a:a4:ae:cc:21:ba:
         e2:78:06:8a:b9:72:6c:eb:75:68:33:58:8a:87:a6:8f:bc:82:
         52:70:4f:e4:b1:5e:fa:d9:62:c1:a0:11:8d:9f:a0:cf:33:fb:
         c0:eb:24:15:b5:61:a9:cc:30:62:11:ef:35:3c:21:ca:fe:06:
         85:95:3e:94:fc:01:63:5f:c6:64:50:e8:79:8d:c0:46:5e:29:
         4a:03:d8:0d:3d:8e:d0:bb:34:a4:ee:83:a8:c0:bf:4d:fa:23:
         cd:0b:d7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:27:34 2026 by rpki-client