Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/67a71c58-46c2-3773-ab2b-5aaf730fe0a3.roa
File:                     67a71c58-46c2-3773-ab2b-5aaf730fe0a3.roa (raw, json)
Hash identifier:          TXulZgEMJTXWf2L1cBnLwp4HEIbQfu2Kujox6Ddr3cc=
Subject key identifier:   96:61:87:0A:8F:6B:FC:B1:BC:DA:0A:BE:C1:65:61:40:D1:72:B7:D9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F067234987D38A03B92AFA980
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/67a71c58-46c2-3773-ab2b-5aaf730fe0a3.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     2856
IP address blocks:        23.27.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:34:98:7d:38:a0:3b:92:af:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=ad5cb0d1-4c8a-43c9-8555-936a3d87869e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:14:24:43:f0:89:4d:80:e9:e0:4c:6f:97:
                    6c:98:6e:48:3a:d2:11:16:e1:08:14:be:45:a9:ec:
                    cb:ae:50:f3:f3:6f:a1:30:fc:e3:73:b4:2c:f7:be:
                    29:34:65:a8:a7:52:1c:0e:49:a2:2c:78:4b:b9:19:
                    5e:42:82:26:e5:1e:16:f4:94:eb:19:64:56:63:ce:
                    ba:f3:60:dc:0f:ee:0e:6d:01:d4:ca:3f:b1:9e:8b:
                    58:98:c9:2e:6f:7a:8c:9c:36:45:31:78:88:a2:f9:
                    1e:91:92:58:ff:29:33:30:76:96:4d:c4:12:f5:5f:
                    d5:52:cd:79:b4:39:c1:be:66:ca:3d:50:ea:0d:bb:
                    dc:41:06:b8:a2:87:9e:9f:b3:fb:19:36:e7:1f:30:
                    7e:0b:af:23:ae:13:66:08:f4:34:42:bf:16:3f:ea:
                    1c:76:df:38:fd:70:f6:fb:dc:2a:a7:af:3b:e6:21:
                    3f:68:93:c6:db:e2:fb:07:4f:64:4b:f1:3c:2b:e4:
                    1a:f3:ee:7d:bf:0a:d6:d4:8a:cf:ef:b4:f4:75:c4:
                    7f:f8:7e:1e:17:cf:03:6c:47:4a:db:74:18:d0:ae:
                    50:5f:fe:69:53:8d:9d:ab:b1:c7:be:ac:a9:3e:61:
                    c7:fa:9f:9c:a5:a7:5a:e4:c2:f0:64:77:e4:b8:fc:
                    b9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:61:87:0A:8F:6B:FC:B1:BC:DA:0A:BE:C1:65:61:40:D1:72:B7:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/67a71c58-46c2-3773-ab2b-5aaf730fe0a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:8d:a9:0a:5c:42:bc:c2:27:46:3b:20:90:57:a0:56:37:9a:
         09:48:8e:f1:93:f1:56:9e:83:50:19:b6:c2:69:75:c1:d1:4d:
         cf:e2:43:dc:33:9b:90:83:d7:1c:76:7b:e6:ed:e0:8a:a0:47:
         fc:78:f0:7a:52:a1:c3:5c:31:c2:06:51:26:a1:77:5a:48:9b:
         15:74:b9:f5:42:8d:f9:f0:01:91:e7:3e:dc:aa:0d:fd:fd:67:
         cb:cf:31:8b:31:24:e1:0a:1d:c1:30:9a:74:1c:29:3e:82:cd:
         0d:6a:f2:19:7e:03:6e:54:db:07:23:bc:25:30:15:cf:c2:da:
         75:b8:ba:81:8a:61:29:d2:32:5f:24:52:08:52:ab:f7:cb:d5:
         eb:40:7a:05:5a:84:c2:59:71:29:88:e0:e0:0f:53:3b:75:bb:
         52:f7:8a:46:9d:b7:e4:ec:23:4b:c0:eb:e7:f7:e7:f5:f3:21:
         2c:8a:c6:66:69:a6:fa:e4:a4:79:ff:2a:12:67:b2:2f:3d:46:
         a7:00:30:d0:e3:0d:ed:7c:ff:bc:f3:85:5a:5b:67:c7:9c:6a:
         3f:1f:d0:0f:08:21:80:2e:8e:6c:b3:13:ff:52:18:41:2b:7d:
         53:e9:da:f1:15:72:80:3a:f1:0d:1b:cf:ff:29:1b:4e:84:ca:
         5e:94:e8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:07:23 2026 by rpki-client