Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fadf197b-5a68-3ad8-b2e9-76811f3a31db.roa
File:                     fadf197b-5a68-3ad8-b2e9-76811f3a31db.roa (raw, json)
Hash identifier:          WqnpQ3BPqi77KkSASAUqqlCnQ3Me+sY5h9EMUk/ntp8=
Subject key identifier:   C5:EE:F9:29:1C:38:0D:DA:54:CE:79:05:84:08:62:45:79:59:D0:F8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655D9D53B006E53CEB094000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fadf197b-5a68-3ad8-b2e9-76811f3a31db.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     11427
IP address blocks:        24.27.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:9d:53:b0:06:e5:3c:eb:09:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=db399a30-7236-4789-ae34-43e9057f624c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:03:9f:95:fe:d3:9e:8b:65:04:6c:b5:a2:84:
                    4d:af:06:8a:13:dd:94:65:67:91:2d:57:fa:86:41:
                    ab:c7:19:98:7a:80:02:9c:0b:55:a9:a9:2c:52:0a:
                    c5:fc:e3:e4:64:49:28:21:57:a7:68:56:5e:08:b0:
                    17:43:bc:e6:4b:fe:d5:f6:ce:09:fe:f9:09:96:fc:
                    23:80:f0:4e:05:bb:e0:67:c4:cc:c0:41:9e:94:3b:
                    ac:2b:94:07:9a:b6:c2:23:83:79:6b:89:c9:b5:c6:
                    58:cc:e3:16:7b:55:b0:dd:8a:92:0f:c4:46:cf:a0:
                    1d:2e:28:f0:94:49:77:09:51:1c:66:bd:31:23:48:
                    de:02:aa:f9:15:2f:42:16:6e:d1:a7:98:49:4c:fc:
                    f7:ce:af:ee:bd:88:42:d5:c3:bc:47:8b:0d:91:c4:
                    23:de:e9:3f:b8:70:d9:59:8c:6a:43:b2:de:38:84:
                    60:1f:f9:6b:6b:a8:8f:2f:e4:51:9c:a9:e0:2e:a8:
                    b8:3b:20:97:01:ed:12:03:58:38:c1:75:b8:8c:c4:
                    7d:62:12:61:a0:7a:08:b7:90:22:ef:60:9b:2d:65:
                    a4:2a:2f:84:25:b1:17:93:29:01:4d:96:d4:f8:e3:
                    c8:2e:56:10:41:10:d0:1b:19:e3:e8:1b:16:db:13:
                    02:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EE:F9:29:1C:38:0D:DA:54:CE:79:05:84:08:62:45:79:59:D0:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fadf197b-5a68-3ad8-b2e9-76811f3a31db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.27.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:20:f6:2e:20:1c:0a:1b:ec:55:75:b7:1c:dc:4d:d2:84:10:
         bd:b3:37:65:ee:44:fc:31:a0:10:80:09:ce:47:9a:3a:5e:e5:
         96:4a:94:a2:95:97:76:2c:85:29:e4:d9:cd:2a:fb:12:36:83:
         db:80:50:7e:5d:c6:49:04:7e:ab:5f:9a:1d:b0:6c:7d:1f:4c:
         87:f8:15:a0:fe:37:72:b2:4a:12:81:39:30:a3:7d:5b:86:2e:
         7d:d9:24:fb:d4:11:de:6e:03:fb:86:c3:6c:23:0b:d0:ad:3c:
         22:4a:75:ad:45:bb:aa:f9:50:84:82:25:29:b4:2a:2c:ba:ea:
         e5:63:c9:c4:f5:f5:5e:6b:b0:57:93:cc:06:a1:3a:02:00:72:
         8f:5a:25:8f:c1:c1:67:95:0f:88:31:8f:47:ed:9e:09:6f:8e:
         2d:37:f2:ae:4e:03:de:0f:c7:6b:67:75:58:7f:42:eb:26:2f:
         aa:2d:93:8e:b9:0f:bd:b8:c3:37:a7:06:ea:28:39:92:14:bf:
         5c:f8:b1:4d:07:fb:39:ac:46:a2:17:e4:95:b2:3f:f0:80:e5:
         8f:ad:04:0a:a2:2f:79:08:2a:35:f1:a9:72:ed:02:c7:7b:ab:
         b8:b2:1a:e0:3a:d4:98:74:14:1f:d2:b5:b0:77:33:37:96:3c:
         1d:e3:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 03:39:24 2026 by rpki-client