Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/28dd8de9-ccc5-3bf3-bf52-26369ef16956.roa
File:                     28dd8de9-ccc5-3bf3-bf52-26369ef16956.roa (raw, json)
Hash identifier:          d/AUe0FU2FqZmRTnHCquCFq09sxOIMemJKlQxzNFarg=
Subject key identifier:   A0:C8:54:E6:63:0C:B3:54:47:BB:26:B7:FB:7A:9F:5A:20:89:1F:8F
Certificate issuer:       /CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3
Certificate serial:       010D0C9F4328584EA78711A63B8422A174EBE1C0
Authority key identifier: DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/28dd8de9-ccc5-3bf3-bf52-26369ef16956.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16851
IP address blocks:        199.36.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:11:a6:3b:84:22:a1:74:eb:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b4ea5bc2-8c06-4381-a78b-891cc57dfdc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:57:cf:de:6f:30:0a:66:a6:84:0c:f5:1d:
                    20:e0:79:8d:1d:0e:97:9d:6f:78:d3:81:de:28:4f:
                    05:db:dc:ac:55:71:6b:ff:dd:e4:d6:c2:8f:e6:24:
                    01:59:92:33:1d:59:7a:b9:5d:18:2b:4b:30:bf:bf:
                    32:5e:35:8b:2f:dc:95:c2:3a:9a:a0:be:99:8f:4f:
                    73:25:a4:d5:5d:30:10:b8:d0:6a:e2:29:5a:87:08:
                    8b:73:6c:74:5f:01:8a:4c:69:73:7a:60:5a:88:e0:
                    d8:32:75:f4:06:8a:c5:c9:fc:60:88:c1:c4:ac:55:
                    3f:ba:e3:ad:6f:cf:a1:6b:21:e7:89:9f:70:9a:f3:
                    b7:8b:f0:ed:e6:5f:e4:f7:3b:b5:9a:e4:ef:ca:eb:
                    23:46:08:d1:8f:42:7c:ae:f6:cd:ce:c4:d3:e2:dd:
                    6d:5a:e5:f1:55:28:dc:4c:10:67:01:5d:c9:46:a6:
                    a9:9e:4b:56:70:f5:e5:67:72:29:24:b4:fe:5a:af:
                    a1:32:ed:0f:46:da:96:c5:79:2d:a2:04:1c:8f:2f:
                    5d:99:ad:39:dd:47:2b:0c:f1:58:59:94:23:fe:e4:
                    ce:19:48:40:18:9d:31:bf:d3:ad:c7:a9:04:95:87:
                    94:5b:bc:45:ff:4f:17:3a:3c:67:eb:21:07:24:88:
                    52:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C8:54:E6:63:0C:B3:54:47:BB:26:B7:FB:7A:9F:5A:20:89:1F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/28dd8de9-ccc5-3bf3-bf52-26369ef16956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl

            X509v3 Authority Key Identifier:
                keyid:DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:23:ad:4d:6a:39:4d:2e:ac:50:0d:ea:5f:df:4f:a1:df:21:
         f1:c8:29:fd:0d:2f:3a:03:d1:bd:43:8c:f0:59:50:f0:a9:4d:
         94:70:db:e3:74:2e:29:7c:da:f1:23:99:f9:bd:a3:46:62:7f:
         20:3d:c0:2b:69:4b:41:30:7e:6c:d7:bb:71:ab:fb:55:8c:f1:
         aa:40:12:3d:3f:b6:44:56:d9:a9:19:29:ba:f9:45:ea:6c:3c:
         fb:9a:65:74:04:ce:4f:d1:34:22:48:8d:5e:d4:42:d8:29:27:
         d4:eb:21:3d:be:0f:fc:12:0c:9b:0c:6c:6a:04:56:89:7e:d2:
         ed:cc:f3:75:92:81:ae:98:d1:82:a8:ff:66:8e:df:8f:41:65:
         ed:af:f2:a3:50:f2:97:fe:ec:e4:21:b5:6f:96:1a:1d:d8:79:
         f3:72:1c:4d:34:13:8f:10:58:18:75:6a:7a:3d:cb:0d:26:6b:
         bd:93:17:ef:a3:1c:a8:07:b2:9f:5d:07:97:53:96:a3:a2:83:
         d6:da:90:a8:d0:82:bd:f6:62:85:8f:ed:e1:ce:d5:03:aa:5c:
         82:a9:f4:9b:e8:68:e7:e5:f5:f2:8f:2e:87:db:28:69:28:32:
         a9:e2:a2:00:ac:1b:c1:80:75:07:37:7b:6f:21:4e:b5:7b:6d:
         69:d6:63:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:57:37 2026 by rpki-client