Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a97c73ed-a622-355b-8118-efdd099a2bcc.roa
File:                     a97c73ed-a622-355b-8118-efdd099a2bcc.roa (raw, json)
Hash identifier:          qeyu8jqRi94tuaH99EBuUt2/Odi+PAwFwpACHQilvpE=
Subject key identifier:   34:04:9F:89:1C:6B:79:66:FA:2F:9F:6F:5A:8F:8F:FD:EA:6B:AF:BA
Certificate issuer:       /CN=748884b0-2456-4700-984f-d893a56dbcdd
Certificate serial:       010D0C9F4328584EC4D71126CFE6C881BF2DAA80
Authority key identifier: E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a97c73ed-a622-355b-8118-efdd099a2bcc.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     393844
IP address blocks:        168.203.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:11:26:cf:e6:c8:81:bf:2d:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=748884b0-2456-4700-984f-d893a56dbcdd
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=05643cc0-f89a-44f6-b73a-67b2f625dc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4a:6c:40:1f:7f:df:0e:b9:58:2d:d3:48:6e:
                    fb:0b:de:98:58:0c:c8:a0:b2:47:c4:15:e4:21:53:
                    42:a9:bb:63:66:65:91:f8:7a:9f:29:30:7a:24:6d:
                    99:fd:a1:da:37:a0:6c:eb:9f:44:33:28:05:02:9f:
                    e4:63:8c:b1:b9:31:1f:d0:50:e1:2f:3f:d7:fb:78:
                    83:c3:45:d3:be:d0:71:8e:03:56:61:aa:d2:ca:96:
                    d4:76:48:ec:c0:ef:dd:f1:b1:68:48:79:69:06:21:
                    5c:3f:10:0d:54:07:27:63:32:13:e3:1e:20:88:3e:
                    14:2e:e0:a3:40:bb:8b:bd:02:d4:80:be:6b:59:81:
                    c4:a3:52:40:e6:f2:76:ee:b2:a5:a4:95:8c:68:f2:
                    3b:e6:d5:29:48:b6:f0:45:b6:7f:fb:3e:62:0c:c5:
                    39:98:92:75:d6:45:1d:ec:8c:1b:24:84:ce:05:83:
                    5f:6e:3a:76:04:e9:e2:eb:15:7e:34:3e:59:e5:87:
                    1a:e9:17:da:c7:00:c0:cc:eb:21:96:61:2b:d6:b3:
                    5c:46:fc:2d:e0:b1:61:a5:58:00:ae:9b:28:3f:b7:
                    22:10:11:ae:8c:a0:da:3a:c7:74:71:72:4b:37:14:
                    37:c1:f6:6c:64:30:b0:2d:2d:d3:63:d6:a1:44:56:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:04:9F:89:1C:6B:79:66:FA:2F:9F:6F:5A:8F:8F:FD:EA:6B:AF:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/a97c73ed-a622-355b-8118-efdd099a2bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd/748884b0-2456-4700-984f-d893a56dbcdd.crl

            X509v3 Authority Key Identifier:
                keyid:E2:B1:73:CA:CC:4D:2F:9D:D2:C5:6A:A9:F8:AE:2A:E3:9F:12:60:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/748884b0-2456-4700-984f-d893a56dbcdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:1e:6c:74:d9:84:44:6f:66:9f:f4:60:b9:aa:06:ae:5d:5e:
         4b:79:70:05:d7:73:5f:3b:c4:70:69:df:5b:68:cc:a7:3a:81:
         ba:76:32:2a:6e:9d:46:52:4c:54:57:dd:64:09:39:d5:ae:ad:
         f6:a7:9c:18:6b:a0:29:6c:1f:4d:e9:15:0d:fc:27:e5:f4:27:
         ae:39:0e:ee:53:c1:3d:7a:b9:7b:6c:6e:88:65:5b:df:64:0f:
         10:5b:72:41:85:58:13:d5:78:f5:2b:1e:a3:6c:60:0d:3a:23:
         cf:8d:0c:d8:98:b8:8e:56:58:a7:e2:53:f0:be:a7:ea:99:dc:
         71:e9:df:29:6c:0c:1e:39:25:8b:bd:ae:9b:8c:e6:81:e2:b1:
         67:9c:8e:41:e0:8d:17:ce:79:fe:36:99:a0:05:8c:5c:a2:8b:
         c3:5d:64:1c:83:22:d3:3c:91:bb:2d:b4:8c:3f:a1:cf:f9:78:
         e9:6e:af:e0:d4:eb:7d:54:8f:ba:4c:d5:08:a2:e3:52:5a:04:
         b9:49:c1:1f:0b:bb:c4:8e:e8:f8:2f:8d:6e:42:3b:35:45:14:
         2b:10:1d:7e:bd:9d:8c:1a:15:38:d0:f3:5f:ba:65:1c:c4:6a:
         a3:e2:66:99:d0:f2:f9:96:42:ae:63:c4:dd:cb:05:12:7f:ff:
         cb:5f:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:03:13 2026 by rpki-client