Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e1a94214-7034-306a-a953-a5bceb7db8cf.roa
File:                     e1a94214-7034-306a-a953-a5bceb7db8cf.roa (raw, json)
Hash identifier:          y2a4WzK9NNuig/bvMoyd0YY6/h+nuc+8oyyEJUDmEUM=
Subject key identifier:   D9:EF:C1:5D:7D:30:F3:10:C4:52:4E:0D:AA:CC:15:4A:2D:5E:53:D6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CBBB4ACF1C28A07064CC10FC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e1a94214-7034-306a-a953-a5bceb7db8cf.roa
Signing time:             Mon 02 Feb 2026 20:54:50 +0000
ROA not before:           Mon 02 Feb 2026 20:54:50 +0000
ROA not after:            Sun 03 May 2026 19:54:50 +0000
asID:                     401152
IP address blocks:        23.27.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bb:b4:ac:f1:c2:8a:07:06:4c:c1:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb  2 20:54:50 2026 GMT
            Not After : May  3 19:54:50 2026 GMT
        Subject: CN=bef70fd5-afb7-460d-b3e3-fd3fa3970802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:d2:9d:39:44:f3:d9:66:a5:3b:dc:20:8c:
                    9b:37:78:64:88:d8:1b:b9:64:0a:c0:5b:36:e7:05:
                    ec:3a:87:75:f7:41:86:af:aa:80:ce:03:93:80:07:
                    95:b3:7d:e4:4e:fe:3e:2d:fd:58:4e:aa:5a:4c:6a:
                    21:79:92:bd:00:44:6d:1b:ba:9a:f1:cc:df:9b:57:
                    94:a0:38:9b:cc:4d:93:da:50:44:1d:90:e6:1b:04:
                    fd:8e:25:68:58:48:75:cd:16:e0:e1:d5:21:48:36:
                    da:92:ea:d2:a1:86:77:06:53:db:20:7b:12:6f:01:
                    12:19:5f:f2:fe:0b:61:ec:66:45:67:fe:23:18:60:
                    96:5e:e3:dd:a9:14:13:18:8b:75:c2:33:4c:55:ef:
                    b8:48:1b:56:6e:69:30:36:bc:1f:7b:db:0d:dd:d4:
                    e4:7a:c6:f4:32:98:c5:ac:40:d5:d0:c1:c4:b2:41:
                    47:cf:0f:d6:d1:1c:cb:fa:0f:55:ba:fe:9c:0a:eb:
                    23:0e:9e:59:74:4b:95:4e:e6:a9:00:0b:b2:13:0f:
                    68:25:db:c7:21:10:ec:f4:73:ac:b4:ed:42:71:6a:
                    81:e3:f7:0e:26:e5:82:31:33:c7:08:2e:61:68:77:
                    3f:7c:c8:87:8e:a3:a1:4f:39:85:75:99:c0:d1:ed:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EF:C1:5D:7D:30:F3:10:C4:52:4E:0D:AA:CC:15:4A:2D:5E:53:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e1a94214-7034-306a-a953-a5bceb7db8cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:83:c0:57:56:77:eb:39:34:61:f9:bd:17:9f:83:1d:98:01:
         06:12:80:02:8b:4d:16:cc:f0:f7:44:4e:7f:f4:de:27:4c:47:
         54:64:df:b6:73:50:a7:c4:81:63:0d:c6:42:81:70:b2:27:b1:
         b3:95:93:ab:b6:64:4b:fd:ff:b1:65:22:97:8c:fe:c8:19:8c:
         9f:6c:5c:45:43:4c:47:8d:98:4b:7f:5f:b6:47:f5:e1:bb:1a:
         ef:60:82:2c:41:ce:f3:04:8d:fd:3e:bf:92:e9:de:e6:c4:b8:
         72:7e:5a:c9:0e:37:8e:40:cf:4a:56:1d:aa:f4:d0:97:8a:5d:
         f2:15:d7:7c:86:83:6b:f5:47:b7:d3:9f:e1:a9:6b:a4:05:b2:
         b9:43:00:87:90:ff:dd:9c:55:1c:5a:1c:3a:16:1c:ef:2a:7e:
         eb:8a:1e:a5:c8:b5:b5:2e:b8:19:d2:1e:9e:64:26:f0:2f:0e:
         ff:f0:f5:ec:38:45:9f:fc:54:ac:a1:88:23:e0:f0:32:80:7a:
         11:08:6b:8c:e9:16:a8:39:24:c3:c7:a6:57:f7:4d:eb:8e:c0:
         61:19:44:07:84:57:8f:db:af:ee:0c:1f:c3:ed:ea:d8:4b:6c:
         a2:ad:09:93:33:be:79:6d:cc:4f:e0:ec:d6:75:45:7f:8d:fa:
         a6:80:4e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 09:30:25 2026 by rpki-client