Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a50fe71f-178b-3469-a438-00c10bddca04.roa
File:                     a50fe71f-178b-3469-a438-00c10bddca04.roa (raw, json)
Hash identifier:          hc12nx+f7VN7O/KgWJE7A+LODImTUlrjKAbMz4Gk87A=
Subject key identifier:   64:AA:69:41:F1:DC:A9:EE:98:A1:DC:F2:9F:CA:1C:9A:EB:50:07:3F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D847977EEBFD9F18EB46EF940
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a50fe71f-178b-3469-a438-00c10bddca04.roa
Signing time:             Wed 15 Apr 2026 18:53:01 +0000
ROA not before:           Wed 15 Apr 2026 18:53:01 +0000
ROA not after:            Tue 14 Jul 2026 18:53:01 +0000
asID:                     2856
IP address blocks:        23.27.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:84:79:77:ee:bf:d9:f1:8e:b4:6e:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 15 18:53:01 2026 GMT
            Not After : Jul 14 18:53:01 2026 GMT
        Subject: CN=8d09a1fd-7582-4461-b232-35011e5a1a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:97:eb:25:75:ec:23:95:b5:e9:9c:62:48:
                    32:24:91:fd:52:26:3b:35:53:2c:35:67:1f:c8:33:
                    8e:2c:85:e1:a7:4f:58:e2:32:5a:76:a6:2d:cd:6e:
                    73:95:b0:b7:ed:04:89:71:b7:73:01:e0:3c:df:b9:
                    32:ec:79:b0:ac:27:3a:5f:f5:36:4e:de:d5:bb:9a:
                    06:45:4c:ee:ba:99:9a:74:03:f5:a8:45:12:7f:e5:
                    61:f6:38:b9:e2:30:71:c3:92:24:94:69:57:3f:e7:
                    36:bb:f5:90:20:d0:ee:e7:43:98:ba:8a:21:a8:84:
                    38:7e:6e:fe:5b:63:2b:30:6a:97:10:0d:2e:b2:a4:
                    e5:e4:3b:d2:6f:8d:c9:04:75:f9:6d:ee:53:ca:d7:
                    a1:e1:b9:5f:0a:22:c5:b0:f4:8a:c5:dc:7c:d4:ee:
                    39:1d:7c:72:d1:2c:8e:da:4a:a5:da:35:85:67:9a:
                    f7:2b:7a:83:bd:e1:c2:f6:28:08:2f:64:5a:6a:af:
                    30:ae:df:97:8e:48:17:c6:62:38:15:d1:4b:84:20:
                    02:72:86:f6:66:eb:d8:2e:87:3b:03:43:dc:af:54:
                    91:9c:fc:2e:21:9f:ff:4e:f1:76:66:e7:d2:e3:a6:
                    95:55:76:dd:8d:d1:ab:e0:a8:f8:7f:05:f1:95:cf:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AA:69:41:F1:DC:A9:EE:98:A1:DC:F2:9F:CA:1C:9A:EB:50:07:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a50fe71f-178b-3469-a438-00c10bddca04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e1:76:3f:5f:8a:1f:8a:74:60:ec:6f:0a:90:63:fa:82:fe:
         c7:93:f8:7d:92:61:04:1a:14:1c:fc:3c:7b:2b:25:da:f6:fa:
         45:83:28:1c:0b:b9:ce:ca:c9:c4:39:b2:b5:16:33:bd:36:17:
         5a:b0:97:9e:53:c2:15:b4:5a:19:09:53:7f:a8:02:34:05:da:
         7f:a5:0a:55:b8:ea:8e:7d:39:62:7a:e1:75:79:b2:19:ba:fb:
         1b:f9:a8:bd:fe:82:2e:e7:0e:47:33:f2:ee:f6:95:33:ee:86:
         90:21:7c:af:de:e4:f6:a2:fe:d8:ee:e5:3d:97:3a:8c:0d:da:
         1b:f3:8c:e9:3e:78:dc:05:0b:e2:9d:49:4a:a6:99:27:1b:f2:
         5d:16:ab:f0:ae:28:43:b8:01:a2:a2:c2:cd:c8:37:0c:68:7e:
         33:63:e5:a6:0c:d5:52:37:23:69:16:eb:fb:ea:de:09:55:53:
         8c:04:af:e1:a8:03:09:38:30:3b:6c:c5:3c:af:37:26:c8:6b:
         3b:8c:6d:1f:1f:ac:29:a2:06:44:6d:a9:9e:af:25:ff:11:a9:
         58:b6:45:72:30:69:00:bf:44:51:b6:1e:ec:95:4c:62:ec:14:
         2a:cf:38:d1:9d:2e:19:d8:ce:0c:bb:d1:82:51:5e:da:e8:c4:
         3f:95:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:26 2026 by rpki-client