Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4f5e7720-83df-3ff5-8903-5134b34a2598.roa
File:                     4f5e7720-83df-3ff5-8903-5134b34a2598.roa (raw, json)
Hash identifier:          eOqZzl7DdGRAO/Ixval9jbRm6POBSoKMC9p5gfiSgcs=
Subject key identifier:   75:88:5A:03:4E:80:EE:28:56:F8:08:1B:EC:C9:ED:B1:D6:51:D6:9E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E4DBAA0C25C083CE34C7C9F00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4f5e7720-83df-3ff5-8903-5134b34a2598.roa
Signing time:             Fri 26 Jun 2026 21:01:47 +0000
ROA not before:           Fri 26 Jun 2026 21:01:47 +0000
ROA not after:            Thu 24 Sep 2026 21:01:47 +0000
asID:                     63018
IP address blocks:        23.27.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ba:a0:c2:5c:08:3c:e3:4c:7c:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 26 21:01:47 2026 GMT
            Not After : Sep 24 21:01:47 2026 GMT
        Subject: CN=66505732-0bda-40eb-8648-2fb28fd2af42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:98:6b:7f:b2:4c:67:92:ac:ac:50:f1:43:22:
                    76:cb:eb:f5:72:9a:37:0d:41:a7:26:e4:00:cc:0f:
                    70:e3:85:19:ce:f3:ce:8f:0d:8f:0c:76:fa:35:29:
                    35:fd:7d:22:c7:d6:f9:f7:b9:7e:12:ed:e8:73:c5:
                    61:d0:d4:56:b6:de:58:09:75:61:1f:21:44:7d:c8:
                    ac:e2:32:ee:fe:6c:ba:5e:00:66:ea:16:fb:a4:90:
                    e2:cf:17:d5:7d:46:93:0a:6a:06:55:d8:aa:4c:b1:
                    a1:ae:5c:c8:8e:43:c5:ac:90:71:45:1e:e2:d0:a4:
                    2f:d4:e7:41:05:2e:f8:3e:76:f3:6e:d2:fb:f6:43:
                    2a:d2:12:15:58:5c:67:78:d1:59:38:1e:9b:31:b4:
                    d4:38:23:84:5d:25:1e:74:3e:d3:ed:9d:83:a0:7b:
                    42:b8:c4:c6:ec:51:81:42:77:11:0c:a7:f6:ae:b7:
                    62:05:c7:e4:56:b2:d0:1f:03:62:f3:17:4a:c6:b4:
                    f6:4e:58:a6:89:cf:b0:66:bd:a0:70:ad:c9:b7:9e:
                    1e:a7:01:2d:b4:69:ea:78:14:97:44:ba:ad:b2:f2:
                    14:b1:2d:c5:a9:94:34:de:2a:c1:09:e7:6a:10:e7:
                    66:09:85:73:4c:71:78:3e:7f:67:fd:e3:c8:f9:7a:
                    ce:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:88:5A:03:4E:80:EE:28:56:F8:08:1B:EC:C9:ED:B1:D6:51:D6:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4f5e7720-83df-3ff5-8903-5134b34a2598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f7:74:b2:9f:ff:24:61:fe:29:bc:62:4e:72:04:96:b6:da:
         f8:52:89:96:a9:f4:6e:4b:47:cc:f4:5e:47:5d:7f:1f:80:8d:
         58:15:bb:66:4c:e0:ed:9c:6f:e3:dd:8d:28:ff:6d:76:17:72:
         99:b1:a5:5a:27:09:e9:bc:4c:4c:fc:ee:1b:4f:18:e1:14:c7:
         a5:10:b3:5c:c5:97:8c:86:6e:35:f5:d5:15:90:4e:c9:c0:e9:
         a0:94:73:42:a1:3f:0f:84:1a:ac:a3:13:d6:a7:d1:13:8d:13:
         44:41:8d:23:81:52:38:42:da:ea:ba:dc:ee:08:eb:10:fb:99:
         7c:59:44:d8:80:0f:8a:be:58:72:72:1c:70:82:01:53:d9:39:
         84:fc:a7:83:e5:7c:59:5c:94:3d:0a:b7:53:3e:2d:8d:fd:84:
         95:c4:66:16:f9:bc:02:06:6e:b3:27:fc:f9:5c:ed:47:5e:76:
         e4:bd:88:ff:20:01:1d:d1:25:46:e0:22:00:37:ea:ea:99:8d:
         f4:2b:22:a3:25:fc:09:af:53:36:38:dd:f8:78:4b:f9:c1:c9:
         dc:b1:84:fa:fa:47:59:59:7d:f5:06:bc:4e:b3:da:6c:53:10:
         57:35:36:56:5b:d7:46:a6:c6:9f:03:78:e6:2b:de:9a:d5:a1:
         0e:c7:1c:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5NuqDCXAg840x8nwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDYyNjIxMDE0N1oXDTI2MDkyNDIxMDE0N1owLzEtMCsGA1UEAxMk
NjY1MDU3MzItMGJkYS00MGViLTg2NDgtMmZiMjhmZDJhZjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJhrf7JMZ5KsrFDxQyJ2y+v1cpo3DUGnJuQA
zA9w44UZzvPOjw2PDHb6NSk1/X0ix9b597l+Eu3oc8Vh0NRWtt5YCXVhHyFEfcis
4jLu/my6XgBm6hb7pJDizxfVfUaTCmoGVdiqTLGhrlzIjkPFrJBxRR7i0KQv1OdB
BS74PnbzbtL79kMq0hIVWFxneNFZOB6bMbTUOCOEXSUedD7T7Z2DoHtCuMTG7FGB
QncRDKf2rrdiBcfkVrLQHwNi8xdKxrT2Tlimic+wZr2gcK3Jt54epwEttGnqeBSX
RLqtsvIUsS3FqZQ03irBCedqEOdmCYVzTHF4Pn9n/ePI+XrOxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHWIWgNOgO4oVvgIG+zJ7bHWUdaeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGY1ZTc3MjAtODNkZi0z
ZmY1LTg5MDMtNTEzNGIzNGEyNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxv6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI73dLKf/yRh/im8Yk5yBJa22vhSiZap9G5LR8z0Xkddfx+AjVgVu2ZM
4O2cb+PdjSj/bXYXcpmxpVonCem8TEz87htPGOEUx6UQs1zFl4yGbjX11RWQTsnA
6aCUc0KhPw+EGqyjE9an0RONE0RBjSOBUjhC2uq63O4I6xD7mXxZRNiAD4q+WHJy
HHCCAVPZOYT8p4PlfFlclD0Kt1M+LY39hJXEZhb5vAIGbrMn/Plc7UdeduS9iP8g
AR3RJUbgIgA36uqZjfQrIqMl/AmvUzY43fh4S/nBydyxhPr6R1lZffUGvE6z2mxT
EFc1NlZb10amxp8DeOYr3prVoQ7HHDw=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:33:01 2026 by rpki-client