Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16a29dc6-6fd4-344f-91dc-8c37c980adb1.roa
File:                     16a29dc6-6fd4-344f-91dc-8c37c980adb1.roa (raw, json)
Hash identifier:          VJR2gFUE8YYmNHzncnCnDFualcADF4sITM6yOGuv1G8=
Subject key identifier:   A5:77:4B:4E:A1:3F:E5:E8:28:9D:0E:F2:00:DD:67:C9:D0:3D:83:1D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D1F4A5C003B5CA24187558000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16a29dc6-6fd4-344f-91dc-8c37c980adb1.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     396982
IP address blocks:        104.199.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:5c:00:3b:5c:a2:41:87:55:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=24a37009-2313-4b4f-bb2a-068671a60cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:82:5d:e6:1d:48:98:53:b8:a7:38:b6:b0:e6:
                    ff:d5:ca:fa:b0:e1:ef:c7:c2:24:b0:da:30:e9:35:
                    e9:12:76:bf:bf:88:d0:31:dc:a0:83:0f:7e:ab:4f:
                    5f:ea:d8:0b:bc:0d:b6:07:f3:43:79:25:1d:d2:d5:
                    f5:10:10:40:d4:4f:66:6e:15:11:97:1b:f5:47:6e:
                    6d:10:ad:52:4f:93:c8:21:cd:7d:28:73:b1:56:f4:
                    e3:7a:13:27:1c:77:8f:f4:80:cb:ae:f6:9a:89:c0:
                    95:e4:1d:06:77:43:a3:13:80:23:1b:01:a0:18:78:
                    3e:1f:b8:e4:ea:59:47:4b:17:e6:34:48:1d:a2:35:
                    22:d1:87:e6:49:5c:be:0a:8f:a2:8c:b0:61:0c:4e:
                    f6:8c:57:bc:62:ac:53:95:d3:94:9b:e5:3e:0c:7f:
                    9e:b5:9b:7f:53:f5:73:83:31:43:22:18:94:90:57:
                    50:90:ad:f9:fb:aa:29:c7:0e:a7:a2:34:df:06:bc:
                    9e:89:fc:47:a0:b5:27:b9:4b:e6:21:a5:74:64:00:
                    f8:89:58:e9:c4:ed:46:35:ca:f1:a0:79:33:47:e2:
                    85:fb:0b:c2:b8:ae:19:63:ba:9b:2e:cd:32:9e:04:
                    0e:c3:ab:5e:d2:f5:a0:a0:38:d5:d9:da:7c:0a:ba:
                    24:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:77:4B:4E:A1:3F:E5:E8:28:9D:0E:F2:00:DD:67:C9:D0:3D:83:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16a29dc6-6fd4-344f-91dc-8c37c980adb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.199.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:6f:c5:da:cb:ff:c6:35:66:a0:53:24:96:fd:eb:11:1d:fa:
         33:e5:39:de:b0:d3:6e:45:1a:15:32:6e:5d:f4:71:f7:b9:92:
         f0:b0:a1:39:ef:b7:27:3a:54:5c:fd:17:0a:22:ad:6c:36:db:
         d8:ed:b1:1a:a1:21:8f:d2:55:c1:28:89:6e:71:55:97:96:42:
         a3:7d:6c:7c:bd:ab:0e:5b:00:57:c6:1d:67:5c:b9:b3:91:ff:
         ca:f3:c2:b0:c6:a2:a0:4b:e4:57:89:05:8d:4b:b5:0f:64:26:
         eb:ba:89:e7:b4:2f:b7:c3:37:87:04:5f:5d:ee:cd:89:52:52:
         f3:6f:f0:e2:e0:9c:3b:60:18:45:d0:93:22:f5:ec:24:65:b7:
         4a:7b:42:df:98:c1:58:63:86:b5:42:4f:ba:f2:d6:56:82:46:
         aa:9e:25:17:95:42:9d:c5:e3:0e:b9:51:73:89:6b:94:c8:44:
         d2:32:3f:99:15:f8:f7:90:b0:30:6f:52:16:cc:9a:60:eb:4f:
         75:09:5b:5a:32:b0:b4:52:53:87:96:7a:82:20:68:42:b4:34:
         dc:0c:c9:40:75:d2:a3:a3:c1:53:b2:03:a0:42:27:21:5a:b0:
         d1:af:8b:33:bc:7a:99:8d:bd:81:68:7c:ac:36:04:c6:04:c8:
         ec:75:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:51:23 2026 by rpki-client