Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa
File:                     ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa (raw, json)
Hash identifier:          i192LIJ98XNnWdcP6kF2Fd64YwAxLLQeHtEnNXOYknA=
Subject key identifier:   2D:F5:5B:54:82:88:78:B5:9A:81:83:7A:77:F5:82:22:81:D4:BB:9C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EC37241340A5FC222D1236F40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     6939
IP address blocks:        23.27.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:41:34:0a:5f:c2:22:d1:23:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=9e85e219-2431-45ec-9e2a-0826f9e4e481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2d:b3:ce:0f:50:62:13:d1:70:49:78:c3:78:
                    79:d1:a7:3f:9c:4d:f0:88:ec:c0:48:52:02:d7:5c:
                    ae:4d:5e:8e:04:6e:f8:5b:fc:30:d2:87:c9:85:27:
                    47:ba:fb:41:2f:51:8d:9c:9f:d2:2d:c6:ac:35:49:
                    85:39:86:34:16:26:44:d4:8f:e3:51:a6:74:01:44:
                    a4:05:5f:99:f8:90:ed:86:d4:41:1d:56:61:87:a9:
                    44:f2:34:a6:f4:95:eb:52:fb:e3:4c:b9:2e:ad:dd:
                    2b:6e:04:0f:23:d8:2b:19:a0:2d:24:19:bf:a3:d4:
                    6d:28:a4:7d:d8:9f:0f:c5:f2:ff:78:17:e4:c5:19:
                    4a:e3:e1:68:67:6c:7d:52:64:67:c7:72:e1:1c:b2:
                    f6:a4:2c:96:ab:96:fc:e8:88:90:5c:e8:69:c0:3a:
                    71:57:b1:b8:32:30:f6:60:2e:f2:07:5f:31:c7:bc:
                    1c:fc:71:70:6a:05:f5:2e:8f:c3:2f:89:6b:bd:47:
                    ba:3e:28:d8:dd:e2:0d:bf:99:b5:04:c1:82:28:b8:
                    d7:69:4a:1e:00:7c:fb:fc:cd:3f:6a:b1:54:12:94:
                    b4:6a:b0:e4:a6:d3:30:ce:b8:2f:80:e4:4b:f1:36:
                    a6:d3:0b:e5:2a:2b:05:73:74:b4:b4:af:04:4d:a2:
                    93:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F5:5B:54:82:88:78:B5:9A:81:83:7A:77:F5:82:22:81:D4:BB:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d4:ff:9e:20:62:e7:98:65:b9:60:aa:95:47:1a:5c:1b:5c:
         d0:78:6a:0d:51:b3:e5:43:10:b3:d7:83:7f:6c:5d:00:cb:7e:
         28:d4:05:77:a1:0d:9c:09:30:73:64:73:c4:29:08:5d:6a:17:
         5f:d9:6c:61:b6:d3:65:90:ff:5e:15:17:1f:bc:19:df:a2:96:
         57:dd:1d:c4:86:80:0e:a4:09:03:64:2c:ae:9d:c5:bf:99:ab:
         26:eb:78:4a:a3:83:d9:06:f5:f6:d5:94:6d:09:cc:cf:38:a6:
         7b:d4:61:e4:25:f8:be:ea:f8:53:4f:f1:20:60:54:7a:e3:f0:
         06:55:68:93:6a:25:12:ac:33:40:06:71:7d:db:c3:dd:0a:e0:
         4e:6b:18:03:f2:ec:1a:6b:fd:2d:5f:72:96:ed:c4:fb:50:ab:
         0c:80:a6:80:48:97:9d:5c:af:1f:bc:9a:c7:92:8f:2d:0e:be:
         d8:dc:bc:2f:ec:60:7a:b4:63:b7:6a:26:c7:dc:91:3d:60:84:
         73:24:81:42:6e:98:ff:ac:a1:f9:e3:cc:de:17:3e:43:05:06:
         27:c5:89:c2:54:2d:37:ff:50:d6:4b:55:0d:c1:c0:2c:51:5f:
         b0:93:60:4f:98:e6:5d:92:c7:09:6c:1c:61:cb:9d:74:b4:3f:
         f0:2f:d6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:19:26 2026 by rpki-client