Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e910ca49-07c0-3e5b-aa48-b091aec9bc27.roa
File:                     e910ca49-07c0-3e5b-aa48-b091aec9bc27.roa (raw, json)
Hash identifier:          lbiOvVkZzzK3QOIIo9GPWs9d7yro1JoyQriLIhQ1nwo=
Subject key identifier:   27:73:C3:9D:86:1B:1F:00:54:42:43:39:E4:5A:8A:B7:CB:C4:FA:99
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D0A7792BB953E54CF3684A2C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e910ca49-07c0-3e5b-aa48-b091aec9bc27.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     29182
IP address blocks:        108.171.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:92:bb:95:3e:54:cf:36:84:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=43020867-e00d-4dcf-85b7-0c93c7433e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:23:04:07:29:50:5a:2b:a4:d3:99:ed:29:
                    f3:fc:c7:95:51:09:f6:41:7e:48:b1:a1:26:6f:da:
                    3b:60:2f:f4:3d:21:c4:cd:0b:0b:fb:fb:1a:04:00:
                    62:41:ad:1d:a9:35:c3:e7:6d:dd:4d:e2:6c:af:1b:
                    ac:8f:33:22:74:f0:92:af:9e:26:87:2e:26:0f:f5:
                    e9:da:46:b7:5c:35:3b:63:e8:7c:9b:f3:0e:23:bf:
                    07:c0:7c:c4:f7:a8:52:b2:e3:6b:b8:a7:11:78:0f:
                    50:a9:d8:61:98:b5:69:18:88:a7:51:df:5e:4b:7e:
                    5c:5e:5d:4b:90:15:7a:18:e6:dc:5b:8d:81:e4:77:
                    cd:b6:8f:ef:1f:1c:bc:06:fd:97:f0:09:c1:9c:81:
                    47:bc:3e:a8:ef:3b:e6:1d:ad:8b:75:d0:a0:e5:e4:
                    48:4c:f3:88:87:0f:3a:10:1b:69:d8:cb:a9:5f:60:
                    74:3d:d1:59:28:4f:dd:50:3b:20:8e:52:d4:85:b5:
                    30:b7:5c:95:31:55:74:6c:1b:7c:da:07:ec:28:87:
                    62:5b:82:1f:f4:20:31:ae:3c:cf:c5:9d:21:80:34:
                    52:91:43:12:f0:e7:5d:5c:86:8e:59:74:ea:0e:6f:
                    99:64:8e:35:9d:31:2d:aa:d7:c3:3b:82:a5:20:7c:
                    69:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:73:C3:9D:86:1B:1F:00:54:42:43:39:E4:5A:8A:B7:CB:C4:FA:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e910ca49-07c0-3e5b-aa48-b091aec9bc27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:dc:5f:48:6c:ab:d7:06:01:34:7b:db:e5:f9:43:73:8c:97:
         52:55:f0:06:14:69:c0:dd:16:b7:05:b3:02:bd:ca:58:fd:51:
         42:a4:c3:fc:30:d8:fd:31:b8:9e:50:d6:cf:4a:dd:51:f8:47:
         7b:76:ee:1e:a7:9c:63:f5:bb:22:fc:c6:8f:60:0c:ff:fc:0b:
         6e:42:8a:da:2d:dd:da:a7:fe:7d:66:f8:d3:f6:ac:ec:23:ef:
         db:5d:93:9a:e1:42:39:29:f3:3b:17:7c:71:b6:6a:1e:8e:c9:
         41:74:78:44:93:1b:03:8d:29:42:bd:8a:33:30:20:0c:37:11:
         18:2a:45:37:75:9e:0e:74:13:fe:3e:be:3a:c5:2e:68:b6:50:
         46:b8:15:c9:5f:cf:69:cd:ff:94:b2:f3:33:08:1d:86:14:ef:
         8d:59:b1:7f:93:58:f4:b4:15:79:d4:c8:0e:a8:73:45:37:d2:
         aa:01:b7:b5:b4:d9:17:38:ea:b7:66:d4:af:b9:93:f3:b8:41:
         24:d2:03:97:3d:ce:e9:b0:43:03:35:c2:c7:19:55:56:a8:e0:
         58:4e:a1:29:9d:bb:ce:f3:f0:69:29:57:83:af:ca:b1:0d:64:
         dd:f0:82:5d:fa:82:4a:c0:14:a2:fd:fa:78:f9:e7:bb:f1:95:
         91:45:70:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:17 2026 by rpki-client