Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6bde2c2a-bdd0-3b06-b3b9-d8ac2ce5e377.roa
File:                     6bde2c2a-bdd0-3b06-b3b9-d8ac2ce5e377.roa (raw, json)
Hash identifier:          CPIjH8Vcn7yFgireNex9TAbyJHLnvW5VTuejMj+1wRo=
Subject key identifier:   9B:88:D9:C0:E3:02:D7:A3:B6:14:60:7C:B6:02:8E:26:EE:10:55:67
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E6F3B97586D1CA8FB9E835780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6bde2c2a-bdd0-3b06-b3b9-d8ac2ce5e377.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     397032
IP address blocks:        23.27.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3b:97:58:6d:1c:a8:fb:9e:83:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=d6c25878-6ec2-4af7-9251-4f9575e684ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:e7:d3:f8:eb:7d:85:b6:fc:21:b9:68:56:
                    14:4d:03:2c:45:31:74:a0:19:c4:fa:19:29:51:fc:
                    17:6d:66:e3:07:90:5b:dd:cd:ac:70:d7:f4:d9:08:
                    d4:ee:fc:81:e5:2d:8a:06:5e:c0:ed:81:78:e8:6e:
                    9b:80:7a:f9:38:f2:7c:37:bb:27:e4:f0:57:ff:37:
                    42:53:b4:b1:8d:ff:c2:d4:95:27:c2:0e:50:55:07:
                    9c:2d:28:b3:c3:f8:28:8c:93:66:f5:f0:f6:79:9f:
                    55:07:35:b2:6c:fa:65:fb:45:09:0e:30:d2:29:53:
                    36:3f:fb:dd:76:22:84:4e:d1:82:83:10:b1:90:d0:
                    c8:5d:5d:89:3a:17:79:fa:75:32:9d:82:24:8e:47:
                    50:b8:4b:be:8c:64:0d:d9:0c:40:eb:40:ff:d0:37:
                    3b:c7:c1:72:11:18:a1:99:44:77:5d:bd:d7:77:96:
                    93:d6:75:1d:da:57:db:62:4f:36:76:e3:26:fe:d8:
                    8f:15:34:72:f0:c8:16:c2:b7:22:21:71:dd:7b:f8:
                    64:35:27:85:fd:37:d5:9a:47:10:af:f1:a7:ad:5f:
                    20:78:88:33:36:7c:37:b1:2d:36:b2:cb:70:f5:8f:
                    3e:a3:94:f0:81:2b:22:5c:a6:dd:60:1e:18:9f:bd:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:88:D9:C0:E3:02:D7:A3:B6:14:60:7C:B6:02:8E:26:EE:10:55:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6bde2c2a-bdd0-3b06-b3b9-d8ac2ce5e377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ed:7e:89:1f:c2:f7:74:58:12:a7:3f:39:0d:df:6e:32:94:
         c0:d3:c7:cb:f9:d4:f9:28:4f:2b:f3:47:5a:f3:06:2c:7f:2e:
         2b:9c:e5:94:0b:f7:2d:1b:1b:4a:f8:24:a8:1e:91:ca:fc:a9:
         bc:60:0c:67:4b:13:47:bf:23:11:da:85:45:af:d1:89:87:fa:
         38:6b:34:2c:a4:bb:82:55:03:75:33:ce:f3:3b:c7:37:c6:a8:
         3d:96:6a:8b:8f:7b:6c:04:76:cd:3e:ad:0f:b8:f7:fd:60:7f:
         44:68:4b:92:34:65:e8:b1:32:ee:7d:dd:b9:1c:a1:5c:7e:6c:
         89:63:6c:25:87:ee:ab:40:7d:c9:6f:80:ee:c6:9f:43:00:34:
         cd:05:f0:0e:ee:24:15:73:e7:3e:fa:66:2c:11:21:65:f3:ea:
         50:28:fa:95:d8:8b:d4:1c:bb:dd:c8:cb:1f:9c:0f:2b:79:96:
         5d:86:21:e0:94:79:6d:36:63:34:5e:66:9d:98:78:95:c2:88:
         03:67:03:25:6b:05:8a:10:84:93:03:72:dd:b0:ca:4b:4e:ed:
         e3:4b:9d:09:66:bd:0b:2a:a3:a0:e3:28:12:d9:c7:b8:94:a5:
         38:68:63:5e:17:9f:4e:58:d7:11:52:f8:00:05:11:34:48:77:
         c2:76:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:40 2026 by rpki-client