Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b736a393-4d6b-346f-9fab-4cc1e2831985.roa
File:                     b736a393-4d6b-346f-9fab-4cc1e2831985.roa (raw, json)
Hash identifier:          3MSrp34LnGpdxpBxUMrbo24wsoWAkqIDcSvejnS4hvs=
Subject key identifier:   F6:DC:66:D3:45:AF:53:3C:01:9E:F6:76:E8:8D:BE:2D:DD:E4:D3:83
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E5FDF70E5B1F2713A32AF5C80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b736a393-4d6b-346f-9fab-4cc1e2831985.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     30860
IP address blocks:        23.27.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:70:e5:b1:f2:71:3a:32:af:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=0afdbead-45f0-4842-9693-afe899bcb92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:24:93:eb:88:c1:fa:05:7a:6a:02:69:d8:
                    93:79:40:36:ee:a3:a8:99:a7:8a:72:0c:c1:9c:83:
                    1c:a1:5e:4b:fb:8d:3d:eb:f6:e2:ea:eb:bb:af:ac:
                    cb:a8:e2:f7:8d:be:9d:5a:58:c0:49:09:f4:2a:12:
                    d7:46:ac:a6:1f:f7:13:3a:52:a5:bd:66:30:52:25:
                    06:7f:96:3d:55:9c:6d:c5:d4:be:2d:c5:b7:60:dc:
                    5a:17:ea:4e:03:9a:3a:46:62:7b:be:72:e7:40:a2:
                    5c:36:43:09:bc:5a:ef:82:97:c1:4e:65:d3:c3:1f:
                    27:f6:05:91:74:4f:d7:20:2b:f7:6d:ab:e2:17:e9:
                    5b:0b:70:cb:2d:6b:96:50:0b:4f:19:7f:b8:a6:84:
                    fa:bc:02:f4:36:2a:ac:53:7e:76:51:d7:42:a5:52:
                    2f:0c:32:4e:55:81:e2:4d:b4:7b:89:63:ba:e7:27:
                    7a:a1:63:b9:ad:5f:d8:0b:a2:99:2b:69:67:ce:44:
                    a1:ff:04:61:20:5c:2e:93:df:33:9b:07:a3:a2:2a:
                    e5:c2:49:71:d7:59:4c:8b:75:f0:d1:e9:ba:59:fc:
                    40:10:dc:47:c8:4b:d3:97:47:0e:4b:31:c2:2a:8f:
                    06:b5:fd:07:c2:6d:f0:b6:d6:53:30:27:1a:eb:bb:
                    ff:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DC:66:D3:45:AF:53:3C:01:9E:F6:76:E8:8D:BE:2D:DD:E4:D3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b736a393-4d6b-346f-9fab-4cc1e2831985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:35:67:c7:64:e4:4b:a6:57:1f:c8:af:c5:79:0a:f2:0a:43:
         97:c0:92:c5:49:04:9c:1a:70:11:17:ec:79:7b:ec:41:e6:30:
         5c:15:6c:68:18:e0:f1:c6:de:48:b2:1a:68:2d:ae:ff:fa:f3:
         ed:e2:f6:d9:37:ad:f5:71:c1:b1:d5:12:2c:9f:66:16:52:4e:
         dd:1d:95:a1:d3:7e:0b:41:65:6f:8b:4c:2a:5b:3f:26:ca:db:
         52:45:73:b4:ff:4d:4e:5d:cd:4d:c7:b2:e6:fe:1f:da:58:4d:
         6c:b9:10:d5:ce:03:3c:d3:f6:32:cc:49:20:c6:ce:b3:b6:b4:
         c5:c3:68:b2:b7:a4:86:21:6c:02:21:40:f0:66:78:ec:56:38:
         f5:76:e5:77:b3:38:bb:15:01:85:0f:a0:f6:1f:16:4e:18:47:
         9d:07:a4:ee:fc:ae:f2:49:ed:19:7b:42:6a:03:d3:ac:ca:39:
         b0:1f:07:6e:bd:61:6e:4e:39:da:c1:c6:68:7e:02:55:5b:89:
         f7:ad:9a:cc:9e:d0:d8:eb:21:1a:35:a7:ff:bb:9f:41:3e:30:
         82:02:6a:4e:4c:17:89:87:d8:85:d1:65:6f:ab:8c:0c:45:32:
         6a:e8:30:0c:1b:d5:51:e4:cc:70:80:9b:41:8c:6e:16:04:27:
         8a:2d:f2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:34:38 2026 by rpki-client