Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7d7f8c4-b368-3d77-a6b0-fe2657d6fbc6.roa
File:                     a7d7f8c4-b368-3d77-a6b0-fe2657d6fbc6.roa (raw, json)
Hash identifier:          ePS43lXAycMD4mL+nPzdML1C01T1w8gcDLIoSfE/RzA=
Subject key identifier:   E2:85:52:91:DA:D3:FF:D3:90:EC:33:B8:7D:9B:21:25:5E:92:F2:E8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D4461D07AA28D5D9BC2CBED40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7d7f8c4-b368-3d77-a6b0-fe2657d6fbc6.roa
Signing time:             Mon 23 Mar 2026 19:53:38 +0000
ROA not before:           Mon 23 Mar 2026 19:53:38 +0000
ROA not after:            Sun 21 Jun 2026 19:53:38 +0000
asID:                     11798
IP address blocks:        23.27.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:d0:7a:a2:8d:5d:9b:c2:cb:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 23 19:53:38 2026 GMT
            Not After : Jun 21 19:53:38 2026 GMT
        Subject: CN=b08a87ba-535e-4531-8a22-08ccd5360fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:cb:c5:96:46:9d:e4:26:2b:7a:0f:0a:27:
                    a2:05:2c:8f:d2:bc:cf:b2:c7:ab:30:e6:46:8a:5b:
                    ef:5f:78:f3:b9:ee:6e:5c:23:63:f9:d1:e0:87:58:
                    e5:76:73:70:ef:12:1b:d1:ec:17:42:5f:48:2a:47:
                    a8:5e:3a:33:75:d2:d1:6f:fe:be:e3:ad:9b:27:54:
                    93:f2:f1:64:0c:ff:04:c9:a5:76:56:6b:21:3c:65:
                    59:4e:29:08:f4:ab:a8:53:25:3f:8e:de:81:a0:98:
                    7a:72:3f:22:aa:4e:84:ad:bc:cb:6f:ed:b2:0f:16:
                    ea:64:12:37:57:ec:b4:48:2b:5d:6d:98:95:eb:31:
                    0f:12:d1:d6:e8:c4:e4:9a:03:cd:43:a8:e8:6d:53:
                    44:ea:b5:a6:21:b9:10:91:9a:98:62:14:e9:1e:6e:
                    74:10:a4:12:32:7c:2f:fd:9e:d0:b0:27:be:01:14:
                    2a:b6:69:a9:c1:bb:d1:af:57:9e:ee:b1:bb:1f:10:
                    68:46:dc:39:d6:0e:82:1c:52:f8:21:b6:91:a4:30:
                    f2:f0:2c:c7:12:51:44:27:37:79:fc:77:3a:4c:fc:
                    b7:be:67:02:e4:ea:3c:c8:1d:88:c1:bd:f2:ff:76:
                    59:1f:01:55:a5:66:36:da:78:48:f4:1d:50:74:d1:
                    47:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:85:52:91:DA:D3:FF:D3:90:EC:33:B8:7D:9B:21:25:5E:92:F2:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7d7f8c4-b368-3d77-a6b0-fe2657d6fbc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:f6:58:57:a1:13:62:1b:a1:ad:e0:d5:54:91:1e:82:07:c9:
         9a:d9:13:31:a8:1b:0b:b7:f6:a4:fc:30:62:ff:29:e8:3e:d4:
         0b:36:bf:2b:45:8b:9e:11:e4:6e:98:c6:24:6d:ea:33:9d:b4:
         5e:9f:3c:eb:bb:7f:fa:39:a8:43:cc:93:d2:78:a2:0b:ca:7f:
         3c:6c:f5:10:47:02:20:a4:bb:f0:54:86:ba:c6:d6:97:f0:ac:
         73:8f:44:47:a2:74:32:d1:75:50:82:47:13:6e:1c:32:51:9a:
         fa:d5:47:9b:dc:d8:45:cc:a9:a3:b9:4b:4f:e3:9d:ee:d8:6e:
         79:58:1f:38:b0:7b:56:c0:0c:18:09:c4:88:98:a5:8b:6f:be:
         25:a2:59:7d:60:e2:42:e9:fb:62:69:d1:6f:e0:15:37:ba:48:
         1c:45:96:8b:13:1c:6b:9e:cd:a8:0e:df:6c:2c:8d:64:57:00:
         70:89:25:30:9b:55:40:66:e0:fe:a7:1b:bc:77:f8:34:ed:ab:
         79:6e:05:ed:86:f7:6f:1b:b9:53:b5:ba:d2:8b:60:39:ca:d7:
         1f:97:88:c4:3f:a4:d0:56:81:36:09:a8:b3:a2:d3:8c:0c:55:
         f4:fa:da:fc:1a:eb:fb:7e:54:c7:3c:7e:7b:10:23:5c:78:f2:
         ea:ee:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:03 2026 by rpki-client