Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/c6b48f3f-616a-3a3d-9427-9dda22461f48.roa
File:                     c6b48f3f-616a-3a3d-9427-9dda22461f48.roa (raw, json)
Hash identifier:          ZGovFKRIp59gZ5vqYRqDAbXO0p7EP9iq2o7ziw+L5jU=
Subject key identifier:   5A:8B:56:13:F3:3B:A2:FC:94:04:D3:46:63:21:9B:39:C9:1D:A7:6C
Certificate issuer:       /CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
Certificate serial:       010D0C9F4328584EE0C21E2DAAA06444919347C0
Authority key identifier: F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/c6b48f3f-616a-3a3d-9427-9dda22461f48.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     16527
IP address blocks:        216.177.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:1e:2d:aa:a0:64:44:91:93:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=9fabff2d-107f-41e3-b61f-7b1c39b6b07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:eb:c2:b0:b1:5e:a5:06:0b:67:3c:23:99:ca:
                    2a:37:03:63:eb:33:a0:69:9a:96:2c:20:8e:ab:af:
                    b7:86:58:d3:36:bf:d0:49:9a:de:38:57:01:83:f0:
                    52:b6:2c:9f:f7:d1:4d:ad:c6:23:f5:af:41:43:64:
                    d4:98:34:22:ae:ef:d2:ae:c0:1f:a3:ab:68:4b:dd:
                    54:03:18:bb:00:b6:36:12:5a:5b:af:02:05:2b:b2:
                    3d:ce:d1:94:c4:40:e5:fd:dd:f1:4c:04:a3:44:e8:
                    2a:19:1b:ae:58:40:56:7c:7f:e8:0b:49:13:df:22:
                    25:9b:7f:f3:2d:f8:09:92:e1:af:b3:77:cb:93:13:
                    ed:18:7e:e4:c8:91:3e:ad:6f:7d:ec:9d:ab:30:75:
                    72:3c:18:74:97:8c:ab:5c:38:83:8c:0b:bf:37:cb:
                    3b:2e:65:2b:00:3d:ac:92:c7:27:f4:84:dc:a9:e9:
                    bc:fd:96:7d:0d:cf:6f:97:92:ce:a1:58:d9:e1:83:
                    b4:9a:e5:c2:4b:2d:cc:5c:05:20:49:83:cf:13:79:
                    cd:92:27:63:8a:57:2a:b7:c0:7d:b2:64:f6:3b:88:
                    52:41:c8:67:ed:07:53:8a:d4:35:30:da:74:dd:7a:
                    08:aa:da:b6:eb:c7:3b:66:9d:e1:52:71:68:f7:28:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8B:56:13:F3:3B:A2:FC:94:04:D3:46:63:21:9B:39:C9:1D:A7:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/c6b48f3f-616a-3a3d-9427-9dda22461f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.crl

            X509v3 Authority Key Identifier:
                keyid:F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:c3:86:ee:ec:bb:1f:05:42:c1:4d:5c:b3:15:38:38:5b:26:
         43:6f:1e:69:90:7c:fa:44:a6:8b:c2:ff:c4:b6:3f:a3:8c:07:
         8e:2d:bb:bd:c0:0f:ee:7b:a8:64:c1:c6:a1:43:68:4d:ed:c5:
         e4:5d:3e:b8:5f:0d:de:f5:f3:6a:41:63:43:bb:a8:d1:b6:46:
         f0:ad:18:fc:a7:ce:9c:ca:ee:a8:54:7f:ce:0d:92:4f:35:39:
         38:d4:54:30:70:52:ab:59:54:a6:00:aa:54:b4:7b:ae:3a:08:
         10:ee:3b:5f:93:0c:71:6d:69:5c:a7:c6:9c:86:ce:aa:b2:ab:
         76:11:e4:ba:6f:1a:53:77:60:4a:fb:61:b4:5a:4b:00:34:d3:
         0c:0a:92:87:e4:fd:51:b2:fb:21:66:30:34:4a:b8:50:ab:ba:
         fd:41:77:3d:b6:87:88:5e:d0:47:e6:8e:cc:2b:76:c7:16:4f:
         10:1c:da:9c:13:ef:e4:2c:6f:b2:fc:f0:42:e9:49:06:51:6a:
         c8:90:46:aa:cd:a6:4d:13:59:1b:c0:83:3e:b1:d8:6a:f7:3d:
         05:61:17:db:a0:9d:c6:1e:06:7d:0e:d2:fc:5c:7a:56:de:b4:
         d2:b3:a2:d3:49:31:f7:03:2a:4a:98:ec:d3:fb:40:61:40:f9:
         1e:d2:48:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:51:09 2026 by rpki-client