Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aba3f5c8-0fe9-346d-9e33-81d32e40ff44.roa
File:                     aba3f5c8-0fe9-346d-9e33-81d32e40ff44.roa (raw, json)
Hash identifier:          mROtSW52znSNhHbWx3RWYSZDahxKMWdvPgBNbdxgu/Y=
Subject key identifier:   98:EF:3C:16:E1:D4:9D:58:80:A9:E6:54:F3:95:21:B3:CD:DF:97:7D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F06724F162B2F2A2A302FA400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aba3f5c8-0fe9-346d-9e33-81d32e40ff44.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        184.27.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:4f:16:2b:2f:2a:2a:30:2f:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=72421731-ef0b-4305-b49f-b2ece2e49682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2d:e3:e0:9b:87:8b:f9:00:e7:69:c1:3a:3c:
                    94:79:2a:f1:95:c2:43:1d:bf:9c:3e:32:6d:32:27:
                    e8:15:f2:36:d1:68:32:42:2d:2e:02:ad:32:fb:cb:
                    e5:42:bb:31:09:e3:d0:f3:8b:a7:81:4a:f2:83:bd:
                    25:d4:14:a1:9c:6a:f4:84:91:df:10:c4:2f:d8:e3:
                    ab:6b:b8:90:39:5b:81:2d:2c:1a:d6:4e:d1:a6:18:
                    06:0c:4b:4f:7c:2f:60:12:74:93:a6:73:c8:8d:20:
                    b0:89:56:19:6b:15:2f:37:c4:19:3b:e1:d6:a1:4f:
                    18:82:1a:f8:63:52:19:03:72:95:30:30:81:63:08:
                    0f:a5:db:d0:e4:2b:28:5c:b9:5b:59:87:3b:5f:20:
                    e4:d4:56:d5:67:5a:43:cb:3b:5b:82:27:0e:6c:ca:
                    46:31:e7:52:dc:a8:8b:ff:5f:6b:d7:c8:08:7b:df:
                    5c:4f:10:93:10:44:02:f6:f9:9e:d0:97:d1:c5:5d:
                    b3:95:ef:75:6f:60:71:ca:75:2f:f6:e1:4a:9d:b6:
                    47:2b:06:5b:85:5e:52:f7:04:9f:6d:01:f7:a6:3f:
                    fd:72:aa:7f:f4:b1:46:7e:73:fe:e8:6e:4b:bf:7b:
                    08:02:6b:fe:09:2e:fa:00:2f:06:66:87:d7:13:ce:
                    47:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EF:3C:16:E1:D4:9D:58:80:A9:E6:54:F3:95:21:B3:CD:DF:97:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aba3f5c8-0fe9-346d-9e33-81d32e40ff44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.27.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e3:aa:51:f0:9b:56:ac:db:e9:5c:67:e3:ce:e3:2f:1d:40:
         a4:60:25:d2:4d:d3:56:2e:a1:b2:35:42:c4:29:7a:fb:fa:40:
         fb:3d:a9:d8:37:a4:54:1d:a4:0d:ec:39:6d:4b:68:e7:0c:12:
         5c:c2:d5:cf:3b:1c:d5:fa:68:2d:d3:8e:8f:7b:a7:d3:a3:af:
         90:cd:b7:a7:83:75:86:ad:f8:5f:45:e5:1e:ca:44:92:60:ac:
         9f:b4:d6:1d:f4:47:91:b8:64:c2:b5:c6:50:74:0c:32:c6:f3:
         68:9a:61:4a:74:5d:b4:ca:8f:d2:0c:e2:dc:a8:22:66:8b:d2:
         7b:03:e7:27:39:e5:6a:81:88:fc:92:e9:98:d6:29:ea:08:01:
         65:93:37:cf:dd:fd:35:08:71:7d:d5:7b:a6:67:7d:0b:f2:22:
         58:81:f0:29:10:e1:6a:c8:2c:f8:de:fb:70:94:76:21:06:59:
         a3:73:a0:77:c9:4f:14:c6:76:ab:3f:47:b6:30:23:0c:18:10:
         e8:c7:b5:4d:93:1e:17:3e:62:e2:0d:bf:c3:41:31:42:52:6c:
         fd:89:ef:d8:9b:84:96:fb:ce:29:92:f0:22:63:e0:23:9d:dd:
         45:ef:c5:cc:6e:73:1e:a5:0c:99:6f:4e:4a:f9:91:fc:08:49:
         4f:77:ff:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:10:19 2026 by rpki-client