Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2f82d52e-ee76-37f6-aa35-eba3fb52a4fb.roa
File:                     2f82d52e-ee76-37f6-aa35-eba3fb52a4fb.roa (raw, json)
Hash identifier:          bTOEzW74yUt2iw1PYRJ53x1A6dAyWnW+d5xZGqe09eg=
Subject key identifier:   24:F9:78:39:97:B2:1A:CF:87:F2:82:9B:18:3B:EE:22:1B:DA:C6:9A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D6B33D810B5EA1E349BA22000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2f82d52e-ee76-37f6-aa35-eba3fb52a4fb.roa
Signing time:             Mon 06 Apr 2026 17:37:32 +0000
ROA not before:           Mon 06 Apr 2026 17:37:32 +0000
ROA not after:            Sun 05 Jul 2026 17:37:32 +0000
asID:                     834
IP address blocks:        23.27.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6b:33:d8:10:b5:ea:1e:34:9b:a2:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr  6 17:37:32 2026 GMT
            Not After : Jul  5 17:37:32 2026 GMT
        Subject: CN=6420bc67-c15c-4d83-a7da-13530a29394d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:10:25:39:7f:93:df:e2:83:95:8e:78:83:
                    ac:e0:89:dc:11:7c:84:89:6f:ef:24:84:e8:3a:ed:
                    67:07:3e:3f:ce:c6:69:ac:9f:d6:f8:3d:e9:46:42:
                    db:6e:ac:7c:06:8a:9d:4b:8f:e5:3c:80:a6:42:1a:
                    5c:4b:f1:fb:5d:02:3c:3f:b0:d0:30:6c:eb:1b:24:
                    32:db:1e:4e:d7:d4:16:c7:39:96:2b:67:b3:f4:d5:
                    a4:f1:2d:bf:67:5f:a9:b7:ed:67:34:65:0f:88:50:
                    82:8b:b2:94:48:48:4e:84:97:a0:49:30:da:d6:b7:
                    8f:33:f6:8d:d0:cb:9b:b0:91:4b:60:10:f9:a2:01:
                    d3:dc:91:2d:a2:0a:b7:2b:fa:0c:82:5a:e2:82:2d:
                    16:70:88:95:d2:3e:56:20:06:19:eb:95:69:cd:9d:
                    e7:da:b4:f8:17:7a:ea:ac:a5:0c:2d:ab:5d:88:00:
                    67:74:84:b7:f0:fb:60:66:37:f9:dc:ff:e4:97:d5:
                    92:40:e1:18:f3:c0:45:29:6d:04:02:b2:50:9f:8f:
                    a0:ad:54:2a:16:06:a2:57:88:45:99:d5:79:51:49:
                    66:70:be:67:27:51:01:20:ab:e5:50:79:38:1f:d4:
                    11:d0:2f:11:59:2a:f2:41:35:4e:c6:25:c3:42:8f:
                    d4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F9:78:39:97:B2:1A:CF:87:F2:82:9B:18:3B:EE:22:1B:DA:C6:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2f82d52e-ee76-37f6-aa35-eba3fb52a4fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:57:52:1a:9c:67:64:cd:3c:fa:3b:a0:70:3a:12:34:07:ff:
         92:1d:7f:56:0e:12:ca:07:28:1f:27:7b:0a:14:fc:08:81:dc:
         47:1b:c6:59:3d:68:26:7e:e1:8a:e0:12:a2:07:fc:1a:62:61:
         85:70:8b:e0:ab:7e:17:b0:1d:23:f5:67:69:e9:d3:fc:7f:df:
         9b:4d:70:6d:c1:c9:bd:be:cf:cc:c9:07:28:8b:52:71:e7:dd:
         21:0c:35:22:52:83:7c:8a:aa:4f:59:1d:0e:ef:dc:a6:67:9a:
         c7:4c:b9:68:a5:59:84:bb:de:74:9c:98:11:98:2a:a4:cb:95:
         46:49:6e:77:ce:68:5c:10:f8:79:fc:24:6d:53:b0:c0:d6:e6:
         fe:ee:98:12:b1:f0:89:ab:e4:5e:ad:9c:c9:8f:4e:ce:65:25:
         b4:7c:a0:d8:ef:cf:8c:7f:ed:6f:29:26:e4:ed:5c:21:f0:3e:
         37:b9:7d:ca:3d:2e:3e:e3:2b:48:96:bf:e8:f6:27:4d:5c:7b:
         9d:2f:4b:77:f6:fb:08:cc:a7:23:f3:3a:58:dd:06:4a:58:9c:
         08:fb:9c:3f:19:d6:68:94:ba:c9:55:f7:c0:01:b2:45:c9:63:
         05:05:83:54:ea:0d:26:8f:ed:b0:b1:63:7c:66:39:ef:4b:5f:
         1b:85:f8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:28:22 2026 by rpki-client