Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/16caa9ad-9e7c-3222-998f-9196456a0581.roa
File:                     16caa9ad-9e7c-3222-998f-9196456a0581.roa (raw, json)
Hash identifier:          ILpCgGZalO3QUVlwxlsEgl+lwPhuBrFL00L5viau3TU=
Subject key identifier:   07:9A:33:02:E7:A1:56:A7:FA:52:46:BE:75:AF:55:57:0C:C8:66:83
Certificate issuer:       /CN=ff081ee5-1af1-4a04-9fee-2540bcef95c3
Certificate serial:       010D0C9F4328584E2D9F103EBB0A35A2EF239340
Authority key identifier: 5C:7A:5D:FA:65:3A:32:DA:E6:35:F9:92:DA:69:5C:AD:F6:7E:82:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/16caa9ad-9e7c-3222-998f-9196456a0581.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     21846
IP address blocks:        64.209.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:10:3e:bb:0a:35:a2:ef:23:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff081ee5-1af1-4a04-9fee-2540bcef95c3
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=257b8ff4-0f45-42e1-b68b-008fce87866e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a2:76:19:59:4d:22:89:bc:8d:c3:d6:5c:4c:
                    d2:af:30:d3:98:60:bc:98:8e:4e:ec:d6:3d:7e:9e:
                    db:6d:ff:8f:ad:31:4a:a5:90:cc:08:be:8a:de:fd:
                    e4:99:7a:97:cc:dc:c3:ed:f4:cc:15:7d:5e:86:09:
                    02:c9:b4:04:bc:24:b1:17:b1:71:24:b3:4a:cf:3b:
                    08:03:3b:37:72:9b:c3:cb:77:60:6f:5e:65:48:d1:
                    f2:29:39:5a:4e:e7:b3:53:62:2a:d1:e0:8d:e1:61:
                    9d:b5:58:3b:96:23:97:00:7b:a5:e3:13:d2:c1:58:
                    39:d6:8b:08:02:d0:ff:f6:2a:79:22:c4:20:8f:49:
                    bf:c6:7f:74:b8:b9:86:da:61:01:74:a9:ac:aa:28:
                    76:a0:75:07:80:da:4b:bf:44:4e:3b:86:05:68:e0:
                    d7:a1:22:68:33:4e:84:36:02:73:01:42:c5:4a:60:
                    29:96:46:ff:40:86:8e:71:25:15:77:7f:22:a1:27:
                    5b:e8:38:05:fd:eb:49:2c:6b:33:d4:08:04:84:ae:
                    a5:af:06:86:06:b7:33:f3:3b:61:1e:3b:82:1c:8a:
                    66:6b:6a:d8:6d:51:5e:a9:55:ab:fc:3f:19:1f:fd:
                    63:3a:b4:b7:02:5f:2c:02:cf:47:6e:80:36:62:56:
                    5e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9A:33:02:E7:A1:56:A7:FA:52:46:BE:75:AF:55:57:0C:C8:66:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/16caa9ad-9e7c-3222-998f-9196456a0581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3/ff081ee5-1af1-4a04-9fee-2540bcef95c3.crl

            X509v3 Authority Key Identifier:
                keyid:5C:7A:5D:FA:65:3A:32:DA:E6:35:F9:92:DA:69:5C:AD:F6:7E:82:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ff081ee5-1af1-4a04-9fee-2540bcef95c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.209.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:92:2a:4a:2c:dc:05:e0:1e:35:b7:16:98:10:2d:8d:08:64:
         39:c4:77:f3:4a:b1:64:3e:28:5b:1a:74:44:18:09:0b:ca:9d:
         fe:16:de:06:bd:ef:16:f1:ca:1b:70:d6:8c:e0:e0:25:67:8f:
         70:04:f8:ec:df:24:51:3c:d5:16:9a:0d:59:b4:35:c0:b6:b0:
         bf:f2:55:19:5d:1f:df:ef:da:13:0d:c4:8b:76:03:14:9f:f2:
         15:0b:bb:93:f8:5f:73:61:cf:05:92:77:1d:f5:3b:18:65:d8:
         87:14:13:28:21:6b:b8:5d:7c:05:bc:1f:e9:0e:3b:fa:51:c7:
         84:8c:0c:80:2d:b8:4a:8c:ad:9e:b7:d0:77:51:68:11:3e:61:
         75:53:17:3b:c5:11:5c:d7:6b:07:41:04:37:da:37:37:e9:5f:
         8a:19:8f:76:6d:98:10:b7:60:ab:b9:b0:c9:70:63:2f:8b:12:
         8f:04:f8:8a:88:3e:49:77:93:a9:55:a9:8c:08:e7:76:64:43:
         55:d5:a8:2c:bd:e4:f8:0a:b8:93:77:68:f0:87:7b:f9:7e:17:
         ab:96:d2:1e:01:f6:4f:86:96:ac:24:d5:b1:c4:3b:8a:aa:33:
         c6:ca:e8:8f:1b:05:41:e9:7b:f1:2c:4e:28:72:59:b0:d3:7c:
         f3:9e:4a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 15:58:51 2026 by rpki-client