Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/2b0dd749-b3f4-3bbe-a6ba-892c1a1e84ba.roa
File:                     2b0dd749-b3f4-3bbe-a6ba-892c1a1e84ba.roa (raw, json)
Hash identifier:          HInkzXHq72MOsQ1C3jRH28AJ7NpeEbxpCPAkGsCSrSo=
Subject key identifier:   DE:F2:B9:E4:EA:F0:1D:F9:FD:FD:6B:B8:F0:4F:93:EE:9F:70:FB:AF
Certificate issuer:       /CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Certificate serial:       010D0C9F4328584ECBD1D8F48E6F0D29F2C1E7C0
Authority key identifier: 34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/2b0dd749-b3f4-3bbe-a6ba-892c1a1e84ba.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     16509
IP address blocks:        192.210.16.0/20 maxlen: 24
                          2620:44:4000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d8:f4:8e:6f:0d:29:f2:c1:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=b23fe311-0809-4734-91d6-a9ad41fb71ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:03:b0:42:d0:31:7c:b4:d6:9a:b0:a2:f8:1e:
                    e2:1c:23:25:16:d4:b3:43:55:22:ac:c0:6a:00:49:
                    6b:3d:67:97:87:d4:fc:f6:77:59:e1:70:28:3f:05:
                    88:9c:23:cb:47:b6:80:2f:dd:93:b9:01:24:80:57:
                    13:38:c4:c9:d6:6b:f6:07:0d:14:37:68:bb:49:1f:
                    fb:0d:27:38:0d:bd:2e:e3:40:b9:28:4b:38:04:2c:
                    0d:a9:db:4a:44:c2:9c:22:50:7c:16:b4:49:28:37:
                    33:b8:e6:57:11:ea:cf:7c:8c:1c:01:62:2f:9b:1b:
                    31:da:bf:5b:34:0e:1f:9a:6f:a2:17:78:62:a0:a8:
                    15:f0:96:76:11:6a:16:17:85:0a:75:75:c0:a1:e0:
                    1a:63:f3:bb:8e:3f:5b:76:0b:a0:01:4f:f8:cc:ff:
                    74:08:3a:8d:73:bb:4a:e9:e8:dd:1a:40:db:a9:11:
                    c5:7c:61:1c:7e:7a:4c:56:a2:06:2a:be:cc:90:b1:
                    e6:2d:df:d3:ee:3a:e8:9e:58:6f:8f:c2:3b:16:56:
                    ec:90:1c:d4:f8:8d:21:ed:c1:41:55:bd:a8:47:c4:
                    61:7c:78:38:13:16:d9:90:65:10:c6:d0:a9:23:5b:
                    bf:73:f5:81:6e:df:e6:1d:7f:bc:d4:48:a7:76:74:
                    02:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F2:B9:E4:EA:F0:1D:F9:FD:FD:6B:B8:F0:4F:93:EE:9F:70:FB:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/2b0dd749-b3f4-3bbe-a6ba-892c1a1e84ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl

            X509v3 Authority Key Identifier:
                keyid:34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.16.0/20
                IPv6:
                  2620:44:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:4b:3c:18:00:6c:e1:6b:09:63:e8:a4:38:c2:64:6f:bc:6f:
         48:5b:fe:3a:1c:95:c8:28:e3:a9:48:c9:a0:63:f4:2f:92:e6:
         b9:e9:1e:50:5a:3c:2c:c7:60:92:ca:d3:78:3e:40:19:d6:8d:
         b8:e9:14:4e:3b:a0:05:f3:2d:01:2a:9e:d1:6d:64:6b:2a:04:
         81:60:6c:5a:d7:dc:e9:42:d6:c1:0d:36:19:57:09:47:83:a1:
         1f:93:79:c6:05:bc:2b:4a:8d:7e:ad:22:2f:70:93:7c:3a:61:
         a3:34:0e:58:05:f2:bd:a6:34:18:44:c8:9c:7e:b1:f0:fc:33:
         e4:f7:d3:1a:29:9e:0b:fc:bf:ec:dd:c3:18:87:73:66:9b:f0:
         b8:d1:10:c9:c8:2e:34:c9:68:69:10:a7:ee:09:c2:b1:4a:cb:
         00:ef:9b:ac:d1:a8:1a:26:57:bb:bb:fe:b5:d5:67:7e:87:d1:
         07:4f:71:d4:94:96:fd:8f:7b:5d:41:f2:29:71:9a:c9:72:d3:
         03:d4:45:b1:ed:de:69:c5:76:29:2f:7a:1a:d0:bb:6b:05:f8:
         26:fc:fc:49:8f:51:0f:38:25:6a:fb:e8:07:09:28:c1:65:ab:
         05:a2:8e:d4:ee:95:29:1e:78:8e:f2:1f:93:79:ad:be:3e:ec:
         8a:04:01:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:39:08 2026 by rpki-client