Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2a1ab518-d755-3c52-8054-10a3640ee3fb.roa
File:                     2a1ab518-d755-3c52-8054-10a3640ee3fb.roa (raw, json)
Hash identifier:          DK6XADz13Bus2bDM8M8FIQ8SVtdTf+Mj9vkZCnqb2mA=
Subject key identifier:   18:44:47:32:77:9F:D7:0A:F6:0F:20:A7:B2:7E:10:F5:06:85:39:B2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA640F804A7278322E3D00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2a1ab518-d755-3c52-8054-10a3640ee3fb.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     7843
IP address blocks:        24.27.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:64:0f:80:4a:72:78:32:2e:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=41a59e9d-2697-451c-9d6f-0e6e6dce1653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:24:a3:81:7c:21:f2:98:a9:e0:11:3b:ba:a6:
                    4c:46:d9:de:f2:d6:5e:03:f6:ab:8f:e3:61:cc:1b:
                    c6:2b:9d:9e:84:17:32:6a:ab:19:06:9e:f8:0c:ce:
                    3d:b5:bb:ab:84:e0:a9:ac:fd:99:8a:8f:5d:86:c5:
                    62:8a:db:f2:4d:ae:3d:f7:7d:55:35:23:95:a2:a5:
                    74:95:d3:72:8c:5a:43:0f:3c:df:a7:60:1a:f0:66:
                    ac:7b:ab:a2:70:28:1b:a9:00:5a:91:9c:36:00:19:
                    bc:43:90:03:c0:ce:89:3e:58:78:b2:2c:80:ed:de:
                    98:49:ce:cd:90:5d:54:bb:9d:d4:ce:7e:d1:13:b1:
                    3f:90:73:1f:19:be:cf:56:d7:bf:d7:eb:35:c6:b4:
                    72:a4:cb:a8:f4:5b:3c:fe:ad:71:c2:38:ac:ee:db:
                    3b:46:a0:bd:7d:ea:e2:87:94:d4:d7:99:18:e0:e0:
                    5f:0e:46:71:60:17:a0:aa:eb:48:b0:61:33:14:ae:
                    1a:9b:58:cd:f6:84:39:cb:23:12:a3:8e:59:1f:cd:
                    ea:c4:78:06:3d:24:ff:a2:8e:a5:f1:b0:eb:f3:81:
                    1b:22:ef:17:c2:dc:63:14:3f:76:85:31:96:40:cd:
                    8f:f4:75:bf:43:12:35:a2:f0:da:59:c9:51:bf:94:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:44:47:32:77:9F:D7:0A:F6:0F:20:A7:B2:7E:10:F5:06:85:39:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2a1ab518-d755-3c52-8054-10a3640ee3fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.27.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:94:9c:72:94:5b:1d:70:30:c7:45:8b:0c:07:6c:70:ac:94:
         7a:d1:81:22:b4:5f:19:1c:1d:92:62:fb:4b:00:ed:71:55:fe:
         e6:8c:15:44:78:a7:1f:39:45:92:7e:e8:0b:e4:6c:c8:8a:66:
         5e:da:fb:04:a6:95:e3:17:79:e5:2b:ba:aa:58:8d:81:54:67:
         7e:98:17:d8:cf:ef:dc:5c:74:25:84:80:0d:c7:fd:61:51:df:
         4e:54:58:40:1c:0e:ed:22:bd:e9:fe:8e:66:d6:1e:2c:8b:a1:
         a7:d0:58:c2:f8:16:6f:e6:6d:65:73:00:c1:61:d8:34:ce:75:
         3d:fc:4f:e0:b1:6b:70:cd:e1:d0:13:76:18:f2:e8:51:f2:e7:
         c1:64:30:3a:f4:3b:8e:6a:21:07:30:80:e8:0d:fa:61:f1:dd:
         fd:a7:38:96:b1:45:e0:15:73:81:e1:05:2f:de:8a:ca:1f:33:
         d7:d4:6b:a4:e5:fb:8e:c9:c7:b3:e3:2a:0c:ca:55:d7:62:c3:
         50:24:c6:6b:69:76:44:e6:7c:d5:99:de:33:8b:d7:a6:33:4b:
         28:fe:60:b5:70:8f:bd:65:2f:3e:f2:8f:02:f6:67:09:6e:00:
         50:eb:08:ce:5f:bb:88:25:32:a9:88:a0:c7:41:cc:99:5c:64:
         fd:9e:8f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:08:39 2026 by rpki-client