Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6c57fbe8-c618-384c-bae5-6b4a50b51b92.roa
File:                     6c57fbe8-c618-384c-bae5-6b4a50b51b92.roa (raw, json)
Hash identifier:          EChGFIEmasfGFrg4y0SE067c/Ew1mRc8UP9WYG2yWGw=
Subject key identifier:   76:9E:60:16:F9:2C:09:3D:F3:D5:18:B3:BA:FB:45:51:EE:7A:A1:71
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EE0C21686835297F16B16B640
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6c57fbe8-c618-384c-bae5-6b4a50b51b92.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     134351
IP address blocks:        23.27.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:16:86:83:52:97:f1:6b:16:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=2a6c7b99-c4b0-49c9-b594-32adc6716371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1d:58:e3:f5:07:95:d8:9d:ae:3c:d3:40:91:
                    bb:8a:a0:84:b2:55:bd:5e:86:a4:fd:4d:58:85:d7:
                    98:01:72:13:5f:55:4f:ab:a1:01:59:79:02:fb:2b:
                    3e:0e:e2:a3:c3:1c:ff:fd:52:54:4a:80:a0:75:1e:
                    c0:71:6b:93:7b:25:73:ba:3e:2b:5b:90:bc:80:15:
                    8d:4f:b0:8b:9d:3f:a7:4e:d8:78:9f:73:aa:af:42:
                    2a:f9:28:d7:17:9e:08:4b:8f:0a:88:9a:d8:a3:06:
                    cd:96:18:11:e2:77:b6:b2:a0:d6:c8:02:56:33:1e:
                    db:01:73:a2:8a:8b:c9:2a:67:5b:2c:5c:9c:5b:b5:
                    8a:a8:f3:09:62:f4:5e:ac:9a:f6:45:e0:ec:1b:61:
                    80:1b:75:25:13:97:eb:74:ef:93:7f:8b:1d:6c:86:
                    c0:b6:95:9b:4e:dc:0d:11:86:37:b1:d2:49:6f:f4:
                    c5:e9:b0:9d:49:34:f9:c3:bf:23:5e:8b:ac:68:30:
                    a4:23:15:71:09:5c:e8:42:ba:f5:ae:80:fd:8e:dc:
                    94:0f:59:55:26:97:64:fc:ee:0d:f0:65:8f:be:c3:
                    b6:b4:5a:0e:a5:62:cb:de:4c:f2:5d:c7:65:17:90:
                    22:57:df:e2:01:a7:ae:88:5c:20:0b:52:5b:e4:38:
                    22:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9E:60:16:F9:2C:09:3D:F3:D5:18:B3:BA:FB:45:51:EE:7A:A1:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6c57fbe8-c618-384c-bae5-6b4a50b51b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:05:9e:e0:55:ba:d4:40:13:13:4a:87:80:db:09:fe:9c:64:
         0e:c1:3a:90:ec:c3:41:ac:bb:dc:2b:3f:b2:b1:77:be:9b:27:
         e9:50:15:0d:a4:f3:5f:0d:a8:ce:25:c5:e5:a7:a8:f7:f9:15:
         22:80:9b:bb:9b:93:cf:c2:2e:ac:90:b8:71:6b:a5:52:be:3f:
         05:63:fa:c6:b4:9e:98:19:5c:f9:6d:c5:31:1b:c8:09:14:39:
         f2:27:dc:c1:c8:74:5c:cb:92:c7:25:b6:03:c7:21:7a:80:8c:
         bf:91:d6:bd:97:b9:55:78:b7:db:6b:0c:18:72:86:65:30:60:
         5b:d6:be:5a:f3:b7:ad:e3:d6:18:13:86:b3:b7:48:e6:b0:c6:
         59:b8:0f:e3:07:66:79:5c:c9:36:d2:e3:6c:75:7a:39:a8:67:
         9f:23:ae:6f:95:32:df:24:82:08:da:d1:b3:0b:73:9d:c1:6c:
         11:57:76:dc:b3:6e:bc:74:61:da:21:47:22:a2:d8:b2:62:b5:
         87:89:3e:bf:ed:5f:33:75:10:e2:50:6c:0c:fe:35:32:40:2d:
         1c:5b:54:d7:57:ed:8f:6d:31:7c:23:e0:ea:d2:cd:e4:f8:ea:
         2b:cf:9c:2d:71:38:e2:ad:9c:13:9f:d4:5e:b1:39:3d:f2:9c:
         3e:04:9a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:09:44 2026 by rpki-client