Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0139e1e-b38c-3fe4-914e-b2be68c66ca5.roa
File:                     f0139e1e-b38c-3fe4-914e-b2be68c66ca5.roa (raw, json)
Hash identifier:          4mxq8qCjB2WSUOQI6eyw6KwvXad10AkXwF1EMY7BIn4=
Subject key identifier:   EF:9E:D9:1B:97:D0:10:0C:63:89:97:B0:98:1B:E4:8B:E2:74:89:AF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D3E0008DFD866F8095E52FB00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0139e1e-b38c-3fe4-914e-b2be68c66ca5.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     149440
IP address blocks:        23.27.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:08:df:d8:66:f8:09:5e:52:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=c2d90828-97b8-465a-a082-a33ca2a661da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:af:13:b4:87:db:b5:95:1b:57:83:22:1f:
                    6c:12:30:46:7c:b0:ec:db:5d:69:ef:56:72:e6:30:
                    3c:7e:a6:e5:d5:f9:01:0b:a1:ee:87:e6:75:ec:a1:
                    b8:ca:10:5e:c5:d9:c6:4a:3f:fe:b1:34:e8:d1:e5:
                    5b:15:1c:a9:1e:df:2b:f0:b5:ae:43:2f:4e:99:2c:
                    e5:84:c8:6e:0f:a6:14:d3:17:93:ed:be:94:6a:e8:
                    10:9f:7b:c6:68:b6:ee:12:1f:3c:cc:f9:48:05:2a:
                    62:28:47:cf:44:70:66:db:3c:71:51:c0:35:0d:27:
                    9b:44:fb:dd:e6:b9:c2:7e:e0:1c:48:5d:ce:c3:32:
                    3b:3d:82:03:ac:2d:b6:9b:d4:40:cf:6c:eb:46:57:
                    b9:b6:91:f7:ed:e6:8d:6e:66:96:c7:27:82:39:f9:
                    65:c5:1b:75:9b:d2:17:04:c4:c8:e7:45:17:28:6e:
                    60:9f:88:0a:a6:ce:f9:f0:3d:f5:a9:d6:d5:48:52:
                    2f:df:16:70:01:aa:37:e4:0c:4a:99:d9:ce:34:75:
                    91:ee:0c:74:87:57:dd:3e:b1:37:37:c5:67:7e:fa:
                    1f:fe:53:30:d9:8e:c2:0d:63:9e:4d:5a:1c:88:95:
                    f8:94:4d:53:e5:18:5c:74:b0:a5:3b:41:11:ae:c2:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9E:D9:1B:97:D0:10:0C:63:89:97:B0:98:1B:E4:8B:E2:74:89:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0139e1e-b38c-3fe4-914e-b2be68c66ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:8d:a8:b1:50:61:50:6a:d9:3e:37:94:c0:13:e4:b2:72:41:
         f7:97:a5:f5:e7:4e:ba:90:a5:c0:cc:f1:ad:4c:41:59:bb:21:
         b8:72:b4:9d:5e:02:fc:e4:cd:bd:df:2f:45:c8:91:7b:75:53:
         0a:bd:e9:45:1d:0a:c8:90:32:eb:37:19:4e:ac:84:55:1a:45:
         89:f2:d2:53:00:7f:19:a3:ea:cc:7f:ac:ea:37:d6:b9:70:c4:
         0e:8d:bf:2e:64:25:39:e9:82:e1:b2:2a:a7:dc:dc:0f:aa:f1:
         14:36:42:2c:51:b2:38:cf:25:bd:27:4c:ae:7c:e4:44:9f:c0:
         73:89:24:8c:37:99:bd:a2:96:de:fe:5b:2a:7e:61:7b:36:ac:
         b6:05:89:31:bb:a7:ce:4b:19:a4:56:9f:b2:30:55:bd:3d:5b:
         ea:15:60:3b:88:84:48:3c:0b:5d:96:5b:b2:e5:a0:25:08:37:
         ce:1f:aa:bc:e3:f6:86:4e:50:5a:4f:a2:bb:c0:0a:72:ce:0a:
         9c:c8:01:a6:d3:82:91:c6:97:6f:52:77:36:e1:c7:98:35:1a:
         f2:9c:86:11:72:ba:af:67:77:2e:b8:f8:40:4d:46:8d:89:22:
         9a:4a:0a:fe:72:e3:f1:a7:6a:c1:a8:fd:7f:73:81:6e:64:e2:
         b1:9c:0d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:28 2026 by rpki-client