Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eed34088-f7ad-3b98-a9db-8445ce9aa355.roa
File:                     eed34088-f7ad-3b98-a9db-8445ce9aa355.roa (raw, json)
Hash identifier:          HNjgeJ+z38eWKKgex5K/weTVrnL9cPjSV+mV2c+GyUk=
Subject key identifier:   BA:5C:95:A1:CC:03:FC:9B:FA:F1:5B:0B:F8:57:DC:75:A7:6D:12:E6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA793C613F2AA17A2D2E74F40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eed34088-f7ad-3b98-a9db-8445ce9aa355.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     149440
IP address blocks:        23.27.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:c6:13:f2:aa:17:a2:d2:e7:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1bb9c528-1305-492a-9499-4bee0fff1100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4f:a0:28:b4:30:83:a1:3f:b6:aa:1c:23:f8:
                    b7:84:d1:10:98:5c:60:ac:75:1a:ec:d3:9a:21:51:
                    b2:60:3a:1c:92:aa:2b:30:6c:a3:71:fb:16:bc:69:
                    cc:8d:28:23:14:35:20:58:81:22:03:bf:04:0e:39:
                    82:26:0f:67:85:c6:72:1a:f0:c5:d5:71:7e:f7:ae:
                    46:87:12:c0:8a:8e:fe:36:0e:25:36:ea:54:83:eb:
                    1a:8f:2c:40:ea:81:8e:2f:2e:b6:9b:f9:be:a0:8d:
                    76:f5:cc:83:fd:d2:f3:06:df:f5:ad:92:6e:a8:0f:
                    37:8d:68:7a:49:52:f9:f2:8a:2d:d6:7a:32:22:4a:
                    c4:0a:cf:1b:31:c8:bd:0a:65:b0:a8:0e:d0:40:0d:
                    84:11:b4:6a:fc:f6:5c:0b:24:54:7b:d9:a0:dd:2c:
                    83:0d:ce:3b:50:62:8c:26:4b:30:74:6d:dd:51:ed:
                    d2:11:49:fc:d6:03:b9:1f:c7:5a:ce:6c:51:86:20:
                    a1:4b:67:ba:fb:ec:25:56:96:c0:ce:a7:26:7e:06:
                    15:6a:d9:c5:0d:a5:91:e8:d6:b0:5e:38:28:ea:b7:
                    a0:89:d3:56:79:09:4c:74:35:97:1d:60:42:e5:65:
                    53:dd:a1:8b:c2:b7:34:80:f7:2d:89:b5:96:86:96:
                    93:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5C:95:A1:CC:03:FC:9B:FA:F1:5B:0B:F8:57:DC:75:A7:6D:12:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eed34088-f7ad-3b98-a9db-8445ce9aa355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:77:58:6f:df:3e:2b:43:cc:97:e6:ad:77:93:3c:36:5f:08:
         c7:fe:c5:aa:4f:0d:05:0c:ea:be:c9:0b:b0:4d:14:30:e9:ef:
         bd:0d:21:8f:9a:21:f9:3b:dd:53:3a:5e:df:28:fd:a3:3d:1c:
         91:95:36:cf:82:72:a5:82:58:37:07:9e:6c:d8:ce:84:35:6d:
         17:76:03:b5:ec:5d:80:6c:4b:e1:64:52:cf:f3:8c:82:85:54:
         ad:0d:b6:e3:02:5f:92:77:c3:51:99:68:62:f4:43:bf:84:7a:
         1d:95:22:ec:6b:5c:d5:05:3f:77:e8:4d:ef:0b:85:4b:78:ef:
         89:60:16:80:20:99:71:e0:59:b4:91:cc:f0:c0:58:3c:c1:44:
         c0:d4:8c:5d:0b:83:f7:53:36:98:7f:f7:38:e5:12:c8:73:10:
         78:15:01:1e:54:72:8b:49:aa:c0:95:87:96:92:d9:d1:9f:6d:
         28:2b:f3:c7:27:b7:72:1c:81:c4:de:db:36:fb:37:03:6c:e4:
         70:9c:5a:e6:69:92:78:99:d2:95:04:c9:6c:e8:4c:7f:21:46:
         98:13:22:f4:20:f7:7e:a5:88:8a:62:db:24:2d:55:b9:36:c1:
         f7:e0:1c:8d:ee:88:4b:57:be:59:e1:b2:f3:8a:81:f5:40:b8:
         7d:ca:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 13:19:55 2026 by rpki-client