Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e4be0df-2d4a-3ea2-adef-17a3d10800b1.roa
File:                     7e4be0df-2d4a-3ea2-adef-17a3d10800b1.roa (raw, json)
Hash identifier:          PY+xI/dMb8l36zoWx0rtqt+p39sAjXxr7ptSvmkpX5I=
Subject key identifier:   95:2C:67:78:23:2C:C5:39:FD:ED:86:91:F5:2F:5F:1C:51:9D:1F:74
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D47C4D5C364BD432FE1462B50
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e4be0df-2d4a-3ea2-adef-17a3d10800b1.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     19905
IP address blocks:        173.27.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:d5:c3:64:bd:43:2f:e1:46:2b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=be52e9fe-f312-450a-8c14-bcaaadc94558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:52:a3:7a:96:fc:09:70:53:4d:8f:6d:55:f8:
                    c7:bf:7f:28:1a:a4:c1:ad:c8:86:22:93:c1:8d:a6:
                    fb:d0:0e:8c:ff:24:41:de:96:00:48:31:b7:08:18:
                    d5:6a:44:f4:6f:05:00:ae:3f:a2:2f:3d:78:c4:ca:
                    0b:fa:af:a9:b4:e3:71:35:29:2b:96:53:4d:df:1e:
                    a2:b7:24:ad:cd:6c:e0:82:f1:92:81:63:6f:9a:b8:
                    fe:01:cc:15:c8:0c:a8:3b:8c:6d:9e:07:49:55:a9:
                    d1:79:db:cd:9d:43:b8:1c:c8:3a:53:17:f9:fd:c1:
                    d3:ed:82:45:a5:d0:59:5f:3a:8b:58:25:25:65:d1:
                    a0:76:64:1d:35:1b:68:48:5d:e0:e2:6a:39:92:b1:
                    72:a8:60:a4:e6:2b:53:86:b9:6f:1f:f6:96:cd:09:
                    8a:77:f6:0d:52:49:a8:16:ce:76:72:0e:e5:db:d8:
                    8c:53:38:36:a8:53:38:fe:55:8a:57:98:43:13:a3:
                    d8:4f:74:e9:e9:1e:49:7a:1e:02:b1:03:0f:f8:96:
                    1e:65:7e:d7:7c:5f:24:f7:81:cf:25:7e:e9:0e:62:
                    3d:d7:49:63:c6:39:10:26:e4:26:cf:11:86:f5:7f:
                    dd:be:4e:73:d3:bd:97:0d:2d:cd:82:5a:19:b8:69:
                    a6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2C:67:78:23:2C:C5:39:FD:ED:86:91:F5:2F:5F:1C:51:9D:1F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7e4be0df-2d4a-3ea2-adef-17a3d10800b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:62:c1:df:95:2f:e3:ca:e3:1b:e6:ea:28:2d:b0:37:db:3d:
         a6:9d:31:f8:fd:db:0a:1f:10:08:1e:f1:50:0f:39:d3:fe:1d:
         bb:0d:22:25:0f:0a:5f:c8:5b:64:b0:e4:97:15:70:7c:ac:2e:
         be:a7:da:aa:b7:3d:cb:d1:c4:24:e0:57:fb:3f:20:e1:9a:81:
         b7:7e:ec:87:dd:69:c9:f5:db:bd:b8:b7:66:72:58:df:b1:c1:
         a8:64:28:f7:5d:23:83:96:b4:0e:fc:63:16:4d:9c:6d:3f:c8:
         65:b1:59:34:1b:39:96:52:fc:f1:59:32:b9:f3:46:b0:b7:9e:
         b2:63:24:6d:6a:a1:bb:55:21:d4:de:c9:d2:52:93:d2:db:59:
         be:96:1f:97:b6:c4:ca:2b:d6:14:59:3b:7e:c4:58:6a:d1:12:
         d2:42:65:34:67:90:89:b2:41:aa:d6:1c:75:c2:01:2a:d8:59:
         9e:37:a3:78:c7:5a:95:b2:ff:98:80:84:a0:bc:82:ce:13:18:
         7b:d3:4e:9f:ec:a1:69:5a:cb:e8:58:31:e7:0b:17:ca:5e:ff:
         14:5b:d7:04:07:d2:f6:37:c5:e1:f6:b2:f8:f0:80:42:e0:4c:
         b7:00:4f:5f:e5:93:d6:cb:d6:3c:65:f6:6a:e5:3d:be:d5:44:
         17:ea:ba:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:42:16 2026 by rpki-client