Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/816b7d02-fc27-3aa3-afde-15348cea27a6.roa
File:                     816b7d02-fc27-3aa3-afde-15348cea27a6.roa (raw, json)
Hash identifier:          YoN2uH0s0tMDmfMzVlvpRtPmfQ6Xc5/nzlpYJaZU8fk=
Subject key identifier:   CB:4D:1D:41:C4:B7:07:DD:CB:E1:E7:9D:E2:01:7C:04:B0:61:89:B3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DFA708ED53DB80A344F967480
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/816b7d02-fc27-3aa3-afde-15348cea27a6.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     209854
IP address blocks:        23.27.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:8e:d5:3d:b8:0a:34:4f:96:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=6ca73398-38e2-450b-b224-5230fb091b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:89:e1:32:09:0b:b3:4b:7f:ff:be:b1:b6:
                    b0:f4:6e:9a:b8:84:3f:40:6e:e1:e1:75:fa:3f:cb:
                    92:f8:76:fd:31:6f:60:73:08:40:44:1b:3a:99:6a:
                    c9:78:7c:26:44:95:22:c4:7c:22:db:fb:5a:09:5f:
                    2d:e5:d5:f1:ba:f3:7d:39:e3:93:2b:dc:fb:f8:e9:
                    6a:d6:b9:81:be:77:c6:63:9e:54:f0:32:1b:f5:05:
                    07:2b:2a:66:72:c2:86:c7:80:cb:85:33:51:8f:4f:
                    b5:69:48:17:40:29:b8:18:52:26:f4:19:e0:2a:ef:
                    0d:e5:4b:db:7e:ce:45:a6:8a:d2:c5:92:76:58:a9:
                    6c:4a:28:3a:84:56:56:43:90:0c:36:92:ce:a6:9a:
                    3c:4f:e9:66:e6:80:59:64:a0:1d:1f:a1:fa:40:5f:
                    3d:0f:dc:cd:63:65:49:4a:2c:a9:5d:27:39:9d:9a:
                    d8:97:25:a4:92:a8:52:a5:c9:b1:67:fd:68:9f:c7:
                    ff:33:1d:f2:77:56:d8:b5:f9:21:da:03:86:e6:07:
                    23:36:00:8e:48:bc:6c:bf:e2:4c:54:86:0d:e5:b3:
                    5f:02:ba:17:31:c5:c0:52:d2:19:63:2f:d7:ae:91:
                    25:e6:12:78:00:8f:e8:9d:bc:5d:4e:a0:ed:64:10:
                    04:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4D:1D:41:C4:B7:07:DD:CB:E1:E7:9D:E2:01:7C:04:B0:61:89:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/816b7d02-fc27-3aa3-afde-15348cea27a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:49:b4:63:f6:0b:75:12:a2:46:02:2f:30:ef:08:2c:f8:53:
         13:97:ab:ad:d2:25:57:cf:7e:3a:b7:fb:22:4b:3e:b6:10:3d:
         98:76:f9:bc:2b:61:fd:59:eb:a8:59:68:9e:86:f3:86:b0:0c:
         41:14:43:e9:00:d3:ed:41:fa:c2:dd:7d:7a:3b:91:37:98:db:
         98:16:81:3b:cc:66:30:9c:d7:4f:c3:32:86:7c:e8:61:1a:c9:
         fb:70:c0:5c:d2:be:1d:a5:cf:93:50:45:7a:f6:fb:ee:63:02:
         e0:7f:f4:bb:e5:99:b4:f3:89:50:4b:5e:b3:2d:2a:f8:10:e8:
         de:7a:c4:40:61:06:04:bc:a7:1b:35:e6:81:04:94:c9:36:38:
         cc:81:44:55:a5:01:89:4c:55:a8:af:0a:07:b4:8b:b8:1b:09:
         89:68:76:64:a9:36:94:9c:94:45:cd:c2:2b:81:99:61:1a:e5:
         f2:dd:c0:18:ea:1e:23:38:ff:72:c0:c1:b3:57:b4:c7:c7:6d:
         77:48:40:e6:3a:82:57:17:8e:b1:82:c3:59:52:74:cf:9e:3c:
         e5:ad:61:88:35:3c:18:6e:d6:6e:68:c4:e3:8a:c3:ae:81:2a:
         e3:88:3c:33:ec:d1:6b:1f:33:64:2b:90:70:bf:eb:79:28:8e:
         76:77:60:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:15:57 2026 by rpki-client