Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ebed4ddd-22bb-3fff-ab32-3a306ade048c.roa
File:                     ebed4ddd-22bb-3fff-ab32-3a306ade048c.roa (raw, json)
Hash identifier:          zgiduC39XZysvEtM/6/auwBHrcAlMeJngLzpN8uug9M=
Subject key identifier:   12:65:D4:33:E0:DB:A7:01:AF:2C:1E:56:4D:37:2C:E6:E1:76:85:48
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CED6B31E3F6213F5A7DE01380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ebed4ddd-22bb-3fff-ab32-3a306ade048c.roa
Signing time:             Fri 20 Feb 2026 16:17:12 +0000
ROA not before:           Fri 20 Feb 2026 16:17:12 +0000
ROA not after:            Thu 21 May 2026 15:17:12 +0000
asID:                     834
IP address blocks:        23.27.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:6b:31:e3:f6:21:3f:5a:7d:e0:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 20 16:17:12 2026 GMT
            Not After : May 21 15:17:12 2026 GMT
        Subject: CN=b1dc07d7-96ba-4432-b267-bd22703a5e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1f:93:62:a3:b5:41:eb:fa:27:1d:e4:d7:ea:
                    05:b7:c4:49:21:55:71:bb:57:3a:85:64:9b:b2:8f:
                    cf:a9:c1:c7:8c:1c:57:03:f8:a8:d6:ff:5b:ee:32:
                    22:e3:b0:54:3a:30:bf:ca:82:36:ad:8f:f3:35:4f:
                    d3:76:7b:d9:af:4f:c2:73:4c:a2:e2:db:4d:04:c7:
                    d0:73:03:d0:b6:02:df:53:3e:4b:d9:8c:a6:9e:6f:
                    73:4a:fe:ff:b6:c8:1f:30:47:e6:0a:01:41:8d:5a:
                    bb:21:91:b7:b8:42:1c:d0:c7:9f:8f:39:ae:31:b1:
                    fe:dc:78:48:82:4a:44:87:91:80:a3:65:ed:9f:4e:
                    27:ca:f1:19:99:4e:20:60:1d:59:2e:26:63:08:fd:
                    89:b5:a9:10:df:12:12:1a:1e:01:2f:ea:de:72:24:
                    63:e5:4d:51:a8:88:9b:17:45:b1:69:e6:f2:45:5f:
                    ec:fd:9a:2b:66:1b:eb:28:ec:2a:a1:ee:71:7d:5f:
                    7b:15:b3:14:6c:d0:7b:85:b3:a4:dd:45:fa:85:d6:
                    60:0f:3b:5b:2e:f2:3d:75:c2:66:d5:ca:df:77:a0:
                    52:c7:69:29:8d:dd:fc:f5:41:d9:8f:20:7e:a0:94:
                    fa:4d:c1:c0:5b:d6:73:18:91:93:71:e0:c2:2b:f8:
                    1b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:65:D4:33:E0:DB:A7:01:AF:2C:1E:56:4D:37:2C:E6:E1:76:85:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ebed4ddd-22bb-3fff-ab32-3a306ade048c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:f4:f3:7d:49:f2:c2:bc:6d:3b:c3:61:47:dc:60:9b:d4:5d:
         2a:91:b0:da:54:6d:72:c0:30:0e:75:63:4b:0e:e9:c7:04:15:
         25:32:f3:73:68:19:a3:5a:b3:63:3e:e5:c9:44:2e:b9:be:43:
         5c:22:3b:a1:1e:53:ff:c2:6a:a5:7a:bb:fd:0d:f2:cb:19:a9:
         cc:0d:36:09:69:7a:f0:73:c0:e0:2f:9d:c2:d8:84:70:0e:7b:
         60:25:f9:f9:e4:2e:22:20:25:29:ab:08:72:09:b0:00:3e:58:
         5b:64:90:72:f8:bd:7f:46:09:c7:83:fd:3e:38:ea:80:ff:e4:
         f1:ed:1d:03:4c:ea:e8:6c:e4:92:32:88:b8:fe:4f:56:87:08:
         fe:ef:8b:1b:e6:85:92:60:2a:fe:b6:7f:08:dc:f6:5a:20:f3:
         81:b8:95:2a:8d:74:dd:23:d2:29:27:df:3a:71:33:27:70:0b:
         57:f4:8d:32:d6:e0:80:cf:46:20:dd:82:d8:d2:15:1b:e5:f7:
         cf:52:eb:0f:ec:c2:f5:c2:48:ce:d0:70:3d:e0:e2:b7:29:c5:
         db:73:22:7e:0a:09:6f:d9:46:77:0a:ce:a8:30:0d:fc:d3:b0:
         91:fd:45:8b:1f:c7:ed:7a:d9:e7:57:44:ca:98:2a:b8:7e:dd:
         b5:f1:7b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:33:59 2026 by rpki-client