Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7d46482-9270-33dc-ac8e-8226e7fae5de.roa
File:                     f7d46482-9270-33dc-ac8e-8226e7fae5de.roa (raw, json)
Hash identifier:          nTfm2b++X3h5KfBwVasbTthrgneCZ2UJn1JlKOa+oso=
Subject key identifier:   9B:A6:35:65:B9:65:B6:7C:3B:B4:99:FA:28:6A:94:16:84:F9:4D:6B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EF01CF97F05009C935E72D880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7d46482-9270-33dc-ac8e-8226e7fae5de.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     42831
IP address blocks:        23.27.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:f9:7f:05:00:9c:93:5e:72:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=ca8b5706-909a-4ce1-95b5-d4627b997655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:20:91:44:d6:b8:87:e7:ca:73:53:b2:21:
                    9f:85:ad:b1:f8:d2:79:f5:3a:d5:77:36:0b:65:30:
                    b6:86:9d:be:65:fd:8f:a6:ec:62:69:34:ff:c2:26:
                    68:66:3a:1f:f3:8b:7a:8e:45:97:cf:29:af:69:85:
                    31:4a:e8:11:7f:e3:58:dc:87:30:0a:cb:bd:91:2a:
                    fe:cc:19:f7:ae:ec:16:a3:2c:c4:47:22:c2:9c:d9:
                    be:2c:c3:64:4c:bf:ee:4f:98:3d:ad:c6:b5:7a:9d:
                    cd:d4:8f:d1:dc:6a:1a:1d:d8:58:b2:42:ad:23:9e:
                    84:22:28:4a:a0:64:ca:54:8a:5f:de:6e:3a:f8:98:
                    e9:f0:39:94:01:12:f5:d3:8b:01:2b:d1:04:a0:1d:
                    30:dd:39:db:98:b4:9b:6f:93:48:b5:73:69:cc:90:
                    32:a6:b1:2b:56:9f:b1:b2:3d:59:58:3d:c6:fa:7c:
                    2c:f2:47:0e:99:b3:4e:9d:e2:ab:94:5e:cf:ba:cf:
                    ff:01:d6:de:33:09:8d:e2:32:72:f9:45:8f:d2:cd:
                    e9:a1:2a:5c:b7:58:0a:bd:4c:9d:21:c6:ff:15:da:
                    2f:7c:2a:68:d6:ca:37:3c:e0:08:f9:a1:da:65:8e:
                    70:a2:dc:78:cc:d1:39:46:95:57:78:b1:1f:8a:e0:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A6:35:65:B9:65:B6:7C:3B:B4:99:FA:28:6A:94:16:84:F9:4D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7d46482-9270-33dc-ac8e-8226e7fae5de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:5d:5b:5c:9f:4b:c1:c8:05:96:fd:e2:0d:96:c0:a3:66:ad:
         84:b0:25:c7:08:6b:ed:06:66:c0:de:bd:b3:31:d9:aa:23:9b:
         46:c0:10:cb:9e:ca:b4:2e:97:1b:17:c7:47:0e:c9:30:5d:2a:
         cb:5f:bd:27:47:b7:cb:b7:fc:c5:18:62:ab:38:d0:40:5d:a7:
         e7:ce:35:3a:2e:5d:59:db:9e:10:6e:31:ba:71:f1:ef:e7:72:
         5f:36:22:8e:17:82:ee:26:85:97:ab:01:fe:fb:d9:27:12:84:
         e9:73:bb:81:b3:be:1b:c5:c2:77:19:24:d9:dc:79:52:10:5a:
         cb:aa:c5:cc:21:81:6f:a6:db:18:07:a3:2b:1b:31:e1:a5:d7:
         83:31:a6:24:a7:90:5e:f5:56:31:10:2c:94:f0:c6:f8:3e:1e:
         7e:98:f3:cc:92:3f:fa:c6:12:a7:99:be:b0:86:8b:00:98:d2:
         2b:c6:3e:9a:60:c9:8c:a7:76:e3:49:41:2b:52:b4:32:59:73:
         ad:30:c1:82:7d:7a:49:5e:40:5e:32:5f:60:66:eb:48:3a:68:
         3b:07:8e:89:93:1a:70:d9:7b:67:3f:9d:e1:7b:e1:d6:0f:28:
         06:e7:2d:7f:37:8e:c0:f3:00:97:c8:94:0e:85:f4:00:9c:0a:
         70:56:37:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:19:42 2026 by rpki-client