Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/28df5f64-221a-36f6-bd0b-ff92ca4864f9.roa
File:                     28df5f64-221a-36f6-bd0b-ff92ca4864f9.roa (raw, json)
Hash identifier:          HwVgl/DHAlu6obQ7WPSQfP3iDeNLX78OLrIU5xzHk04=
Subject key identifier:   ED:1D:6F:D6:C7:4A:7A:17:73:06:E9:80:79:09:EC:41:FC:18:CC:8F
Certificate issuer:       /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial:       010D0C9F4328584D67DFCE3FF1D7C98AFD7CF700
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/28df5f64-221a-36f6-bd0b-ff92ca4864f9.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     26946
IP address blocks:        205.221.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:ce:3f:f1:d7:c9:8a:fd:7c:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=5ad87794-adb0-43ce-a840-81f06093c888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cd:fe:08:15:08:9b:44:bb:d7:a4:f1:07:3f:
                    05:04:fd:27:fb:78:6b:dd:01:20:5b:0a:0d:f5:a7:
                    11:89:46:8e:fd:07:95:5b:2b:9f:57:ca:74:d5:40:
                    33:d0:c2:ca:c9:46:4c:4d:a2:91:6f:4b:a5:fc:60:
                    c0:53:03:b4:d5:a7:38:34:e2:61:f3:6f:a7:d7:10:
                    09:22:0b:f7:90:82:31:c6:e6:ac:a5:9a:8d:16:70:
                    03:72:92:0a:2b:d8:7a:19:8f:33:a0:ea:e4:6d:15:
                    17:5a:19:79:cd:d7:a7:5c:e5:e6:4b:ba:41:b5:da:
                    fc:de:94:e3:f0:4e:f2:60:3a:03:1c:49:24:d1:2a:
                    be:e4:e9:3a:7f:c4:80:9c:3b:49:d3:7f:f1:d8:08:
                    08:34:1d:e4:66:c4:d9:9c:ca:21:7b:a7:19:b0:fb:
                    58:a0:8b:0d:32:ca:e0:84:9c:3a:ab:72:94:60:27:
                    26:77:f5:b2:40:35:ba:5d:a9:70:b8:25:c9:a0:8a:
                    d3:5c:7c:ee:83:26:7f:21:20:4e:c1:cc:9f:8f:e8:
                    bd:85:87:b2:76:fa:25:fd:6e:83:4c:39:5f:0b:7f:
                    b5:8b:df:21:04:73:47:87:b2:4b:b9:d6:d0:08:0f:
                    43:08:95:eb:24:3b:b4:49:4d:ac:9d:88:44:01:82:
                    9c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1D:6F:D6:C7:4A:7A:17:73:06:E9:80:79:09:EC:41:FC:18:CC:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/28df5f64-221a-36f6-bd0b-ff92ca4864f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl

            X509v3 Authority Key Identifier:
                keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.221.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:97:4b:80:dc:26:51:cc:f4:0a:be:8b:8f:b9:8b:1b:3a:62:
         c7:ce:e9:11:a7:24:bd:15:a7:28:f1:9e:48:2b:97:ab:a2:ed:
         f7:75:93:02:48:85:a5:ec:7f:93:1f:3a:df:ce:62:ce:d2:17:
         54:4d:53:41:f5:f8:72:94:28:9e:dd:3a:dc:37:11:bb:bc:62:
         6e:27:3a:bb:1f:f2:d0:e4:13:db:6a:a0:fd:da:15:fb:9a:8b:
         2a:66:73:83:21:30:1c:0e:51:bd:bf:d2:0a:b6:ca:99:ff:31:
         89:51:67:f2:8a:a5:99:53:f9:96:fb:14:d1:d6:38:92:d2:0f:
         8e:25:7f:8f:f9:f1:ec:88:67:cf:23:23:89:c3:12:7e:81:e9:
         9e:9a:85:1a:aa:81:80:8a:da:bd:04:ea:ff:40:57:22:eb:ad:
         22:ab:7f:17:c4:61:ea:15:48:e1:44:43:01:a8:d6:c5:b1:64:
         b2:99:6c:39:93:17:fc:14:4a:f2:6a:92:f1:7d:0c:7d:e2:c9:
         c9:f2:19:eb:e0:7d:f2:1d:e0:18:2c:5b:b0:bf:fa:45:67:da:
         51:fe:66:6e:35:38:1f:46:b6:4b:4f:be:e0:b9:d6:05:4b:b4:
         a9:d7:ee:89:6c:10:0a:d1:95:ab:4e:1a:0d:e2:8a:dd:92:9f:
         d3:69:02:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:32:23 2026 by rpki-client