Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/16a74fd4-d655-3c81-b3bc-1642cf6ab389.roa
File:                     16a74fd4-d655-3c81-b3bc-1642cf6ab389.roa (raw, json)
Hash identifier:          dqnV4ePCdv72GBGycjhtXwkl4ymgLdjFLCpITRDGgNE=
Subject key identifier:   98:F8:41:40:C6:4B:3E:FB:61:22:4F:23:92:BF:D1:F2:3C:36:53:ED
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584D0D426D160A44558D57146210
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/16a74fd4-d655-3c81-b3bc-1642cf6ab389.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        64.99.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:6d:16:0a:44:55:8d:57:14:62:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=f9721e9a-7ace-420e-9280-a6f36bdee2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2b:fa:84:00:4f:bc:ad:7c:ff:41:f9:2b:b9:
                    3c:b1:d8:87:3d:3f:fb:d9:34:7f:85:d5:fb:83:69:
                    f3:d6:3e:43:99:f8:c0:3d:cd:14:b6:07:84:a8:52:
                    7e:19:8a:4e:a5:fe:76:dd:90:70:53:5a:8b:d5:96:
                    c8:2e:8d:85:24:53:50:9a:63:09:6e:39:a8:bf:6a:
                    f2:bd:3f:a5:47:8f:33:e3:cf:2d:6c:74:e3:53:51:
                    ec:e7:3f:ab:18:56:14:83:d1:53:3e:65:0c:be:be:
                    bb:5f:7a:a9:c8:90:50:3b:61:5f:2d:c8:83:5a:d9:
                    63:3a:2d:37:ab:5f:fd:41:4b:70:7b:0d:d4:cb:1a:
                    b9:67:ab:b5:7d:3e:92:2f:12:53:f7:5b:c1:1c:6e:
                    bc:3f:ed:6e:f8:f1:ca:33:a4:d7:d7:1b:e9:dd:cf:
                    6a:52:99:2a:df:9e:2e:ab:96:74:da:02:50:14:ba:
                    08:11:97:c3:23:53:27:f8:5b:4c:8d:c7:02:8d:94:
                    57:55:e7:53:0f:ed:06:7c:e0:44:31:11:e5:01:4e:
                    a9:af:4a:b4:00:f2:b4:3a:1a:87:92:34:62:fb:83:
                    a5:23:eb:26:82:7c:3e:bb:fa:f7:92:13:0e:a2:ff:
                    19:32:a2:7a:c8:d2:de:7d:20:33:a1:85:16:0b:6d:
                    32:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F8:41:40:C6:4B:3E:FB:61:22:4F:23:92:BF:D1:F2:3C:36:53:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/16a74fd4-d655-3c81-b3bc-1642cf6ab389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:de:04:90:2e:1f:41:3d:15:0e:c0:11:a2:3c:2d:ec:fd:91:
         04:b2:49:53:f1:9a:94:21:4e:aa:56:de:3a:73:24:cc:b3:4f:
         59:57:a1:90:2d:0f:60:f9:e0:76:30:e9:7f:66:71:ba:e3:29:
         70:68:7f:91:55:90:00:17:53:c7:d1:56:b0:98:47:1d:56:d4:
         df:5d:64:89:a6:0a:a7:cf:34:33:8c:40:a5:fd:6e:51:92:f2:
         18:76:98:65:b7:81:36:07:70:6a:ab:8b:34:57:bc:99:b4:f8:
         be:f6:0f:49:66:ed:48:78:ff:e0:a2:9e:ab:03:fd:21:e0:f5:
         10:19:c0:f8:70:5f:97:e4:95:94:99:c4:06:fd:3f:6c:40:67:
         f8:6c:0d:d7:b1:52:67:86:19:96:d8:ea:71:4d:28:87:21:cb:
         ec:c5:e9:35:75:2e:ae:58:55:65:12:54:48:49:03:6d:25:50:
         50:bf:a7:b7:1d:8f:ca:26:41:f4:18:16:f1:01:2f:12:bf:e7:
         ae:7b:61:ea:34:67:2f:9b:2e:34:6c:8b:de:1c:44:09:f9:e1:
         84:e4:5d:07:34:3d:e1:18:ca:27:c1:64:c2:ca:f3:02:69:6f:
         10:89:94:cd:ea:0e:1f:7d:f1:c4:38:ff:d5:26:d5:d7:c0:15:
         a0:ce:90:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQm0WCkRVjVcUYhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk
ZDBiMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk
Zjk3MjFlOWEtN2FjZS00MjBlLTkyODAtYTZmMzZiZGVlMmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSv6hABPvK18/0H5K7k8sdiHPT/72TR/hdX7
g2nz1j5DmfjAPc0UtgeEqFJ+GYpOpf523ZBwU1qL1ZbILo2FJFNQmmMJbjmov2ry
vT+lR48z488tbHTjU1Hs5z+rGFYUg9FTPmUMvr67X3qpyJBQO2FfLciDWtljOi03
q1/9QUtwew3Uyxq5Z6u1fT6SLxJT91vBHG68P+1u+PHKM6TX1xvp3c9qUpkq354u
q5Z02gJQFLoIEZfDI1Mn+FtMjccCjZRXVedTD+0GfOBEMRHlAU6pr0q0APK0OhqH
kjRi+4OlI+smgnw+u/r3khMOov8ZMqJ6yNLefSAzoYUWC20yZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJj4QUDGSz77YSJPI5K/0fI8NlPtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5
MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvMTZhNzRmZDQtZDY1NS0z
YzgxLWIzYmMtMTY0MmNmNmFiMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy
YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3
ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy
M2VhN2RkMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQGNXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKveBJAuH0E9FQ7AEaI8Lez9kQSySVPxmpQhTqpW3jpzJMyzT1lXoZAt
D2D54HYw6X9mcbrjKXBof5FVkAAXU8fRVrCYRx1W1N9dZImmCqfPNDOMQKX9blGS
8hh2mGW3gTYHcGqrizRXvJm0+L72D0lm7Uh4/+CinqsD/SHg9RAZwPhwX5fklZSZ
xAb9P2xAZ/hsDdexUmeGGZbY6nFNKIchy+zF6TV1Lq5YVWUSVEhJA20lUFC/p7cd
j8omQfQYFvEBLxK/5657Yeo0Zy+bLjRsi94cRAn54YTkXQc0PeEYyifBZMLK8wJp
bxCJlM3qDh998cQ4/9Um1dfAFaDOkG8=
-----END CERTIFICATE-----
Generated at Sun Mar 15 19:24:08 2026 by rpki-client