Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a271584-0459-3617-8b34-fce7c4798bcc.roa
File:                     1a271584-0459-3617-8b34-fce7c4798bcc.roa (raw, json)
Hash identifier:          e+8WEhe7ouASbICh8DBCfLS1gF63P+A8jJ/QWCFhEao=
Subject key identifier:   28:FC:D2:F7:82:3D:AE:1A:9E:91:A5:9B:8F:11:0B:79:49:E9:96:93
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EFCACD675203DB7EF0B80EE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a271584-0459-3617-8b34-fce7c4798bcc.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     35994
IP address blocks:        184.27.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:d6:75:20:3d:b7:ef:0b:80:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=4404d6b8-05e1-47d4-91c3-f0ac422c06f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d9:50:e4:8e:ad:c8:4e:d5:28:6d:d6:46:8e:
                    a0:8c:e6:99:03:9b:2a:2c:28:b7:55:04:0c:c0:6f:
                    c6:61:c7:13:e7:ad:b8:f7:2e:cd:4a:0c:65:8f:32:
                    8e:3f:f6:5d:c6:96:e6:be:5b:58:64:d6:0e:c6:cb:
                    5c:96:85:6a:f1:dc:16:20:d0:5b:fe:62:29:99:4c:
                    25:9b:af:b3:e3:ec:04:f7:2c:56:33:03:4b:0b:da:
                    1b:2d:8a:b5:41:34:bf:72:eb:03:24:51:d4:a0:e4:
                    39:d4:ce:fc:64:9c:f9:5a:0c:32:82:fc:5d:4d:a1:
                    13:44:b1:0f:01:35:a8:4f:08:54:13:78:ee:33:e8:
                    29:be:5f:cb:80:53:6e:24:9b:ba:6b:d3:67:9e:23:
                    6b:55:01:90:8f:84:98:c6:42:b0:c2:0e:36:4d:f3:
                    ad:a3:89:3d:fb:ed:da:61:e9:b8:ef:b3:b7:c4:ef:
                    53:8e:c7:51:3f:04:08:c9:8f:2b:95:16:f5:96:36:
                    bc:ef:d7:73:12:2a:0b:46:27:5f:d3:93:ce:c6:e7:
                    d3:a4:2f:56:1f:83:f5:b7:f0:60:74:cf:e2:44:ee:
                    73:63:b0:f4:e7:a2:dd:c3:ff:e3:cc:ba:60:68:0a:
                    ea:f4:34:8a:48:40:47:ef:c1:13:18:9c:cf:04:b8:
                    26:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FC:D2:F7:82:3D:AE:1A:9E:91:A5:9B:8F:11:0B:79:49:E9:96:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a271584-0459-3617-8b34-fce7c4798bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.27.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:15:5a:66:c1:9b:3e:4d:19:a6:1d:e2:18:ff:8f:03:5d:ca:
         d3:f7:3b:95:a9:96:4a:09:a6:fc:21:37:bc:ae:fb:d6:36:8d:
         d3:db:fe:3d:02:4a:9b:05:74:e5:de:f9:42:c7:64:5e:e9:bc:
         fd:92:b5:b7:54:41:b1:00:44:be:ae:a3:b0:91:a1:fa:b3:42:
         30:90:63:b2:c0:cb:c2:0b:f9:1f:3f:6a:e0:68:73:3c:55:58:
         ed:2e:d5:b8:fa:26:76:ba:48:85:6a:2f:63:3a:41:7a:6a:c3:
         a2:d6:46:f5:76:ef:aa:2c:2c:e6:2f:af:f1:7d:29:d8:ab:f0:
         d9:2b:f0:77:11:6c:50:c7:6b:47:b5:06:58:81:d5:2e:14:10:
         80:2b:73:43:96:3b:69:e4:f9:6a:5e:a6:75:7a:c2:8d:f4:2c:
         bc:2a:a9:c1:9c:cc:16:82:e3:b2:b3:3c:da:d6:00:5d:3b:3e:
         d6:ec:63:df:26:2e:82:57:46:79:d2:ca:92:e8:73:dd:a5:c6:
         d8:7f:d6:d3:b4:03:35:9a:49:ae:6c:7c:0d:b6:5e:47:c9:5d:
         86:c8:7d:a5:84:1a:96:db:0d:a4:87:4a:cd:f0:a2:50:13:e9:
         51:cc:c2:73:ca:cc:78:46:73:72:9a:62:f8:8d:2b:9b:92:7f:
         eb:cb:b2:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rNZ1ID237wuA7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk
NDQwNGQ2YjgtMDVlMS00N2Q0LTkxYzMtZjBhYzQyMmMwNmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdlQ5I6tyE7VKG3WRo6gjOaZA5sqLCi3VQQM
wG/GYccT56249y7NSgxljzKOP/ZdxpbmvltYZNYOxstcloVq8dwWINBb/mIpmUwl
m6+z4+wE9yxWMwNLC9obLYq1QTS/cusDJFHUoOQ51M78ZJz5WgwygvxdTaETRLEP
ATWoTwhUE3juM+gpvl/LgFNuJJu6a9NnniNrVQGQj4SYxkKwwg42TfOto4k9++3a
Yem477O3xO9TjsdRPwQIyY8rlRb1lja879dzEioLRidf05POxufTpC9WH4P1t/Bg
dM/iRO5zY7D056Ldw//jzLpgaArq9DSKSEBH78ETGJzPBLgmIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCj80veCPa4anpGlm48RC3lJ6ZaTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWEyNzE1ODQtMDQ1OS0z
NjE3LThiMzQtZmNlN2M0Nzk4YmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBu6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwVWmbBmz5NGaYd4hj/jwNdytP3O5WplkoJpvwhN7yu+9Y2jdPb/j0C
SpsFdOXe+ULHZF7pvP2StbdUQbEARL6uo7CRofqzQjCQY7LAy8IL+R8/auBoczxV
WO0u1bj6Jna6SIVqL2M6QXpqw6LWRvV276osLOYvr/F9Kdir8Nkr8HcRbFDHa0e1
BliB1S4UEIArc0OWO2nk+WpepnV6wo30LLwqqcGczBaC47KzPNrWAF07PtbsY98m
LoJXRnnSypLoc92lxth/1tO0AzWaSa5sfA22XkfJXYbIfaWEGpbbDaSHSs3wolAT
6VHMwnPKzHhGc3KaYviNK5uSf+vLsjo=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:17:00 2026 by rpki-client