Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ab708923-0613-3a2c-b170-cadae0fe2f49.roa
File:                     ab708923-0613-3a2c-b170-cadae0fe2f49.roa (raw, json)
Hash identifier:          NxGgUpCtzV4U/ODkANd4GaObEcO5YxbWv1Wx6Bn2Aq8=
Subject key identifier:   41:6B:FC:29:22:0A:B4:A0:12:E3:04:2B:40:3A:86:C9:2C:F9:58:0E
Certificate issuer:       /CN=91c894d6-b991-4966-bec4-7c58dac779b5
Certificate serial:       010D0C9F4328584E2AD4541C91BD9DFE3C6E3E78
Authority key identifier: 13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ab708923-0613-3a2c-b170-cadae0fe2f49.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        199.87.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:54:1c:91:bd:9d:fe:3c:6e:3e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c894d6-b991-4966-bec4-7c58dac779b5
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=48aa23ae-9fb1-4d6f-a3b2-f3f9291a48d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f7:0f:86:d1:32:a6:a5:63:f2:84:20:21:60:
                    13:ff:af:76:ff:a3:62:7e:99:23:af:83:f8:f7:a8:
                    59:f4:23:4a:df:ee:c4:45:f8:78:6e:2b:1c:43:0d:
                    d9:c5:93:d8:6c:61:3f:f3:08:29:20:33:df:f0:70:
                    fa:d0:5d:04:2a:b3:ec:41:fc:20:03:e4:72:bc:4d:
                    84:06:37:18:74:9c:f1:b9:06:c0:31:b9:1a:38:86:
                    2a:7f:13:da:d5:f3:42:11:62:85:db:25:3e:cc:aa:
                    e4:9b:f4:6a:17:53:1b:3e:66:44:80:52:62:b8:5d:
                    9a:dd:b6:09:34:3d:68:2f:46:8d:30:4c:12:68:e1:
                    5d:ba:4c:19:25:fe:c1:d2:4e:61:ee:85:2e:8a:32:
                    f5:ed:fa:6b:94:84:b4:aa:93:0b:49:d0:10:cf:a4:
                    52:a3:9d:d8:0a:1d:57:35:16:89:4a:6a:d9:b4:36:
                    39:d8:43:86:50:d2:5f:48:eb:af:4a:38:90:35:90:
                    c0:00:d2:b1:35:8e:3b:83:dd:bb:d3:b5:f4:07:84:
                    64:63:ae:26:54:80:f0:3a:d2:9c:cc:74:50:c5:d7:
                    47:74:26:e3:ba:a3:1e:f8:3c:3d:59:1b:5c:2f:be:
                    00:64:ed:02:1b:77:57:62:62:9b:15:ae:1a:90:0b:
                    64:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6B:FC:29:22:0A:B4:A0:12:E3:04:2B:40:3A:86:C9:2C:F9:58:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ab708923-0613-3a2c-b170-cadae0fe2f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl

            X509v3 Authority Key Identifier:
                keyid:13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:34:d8:ff:1c:f8:87:5e:21:90:f7:d2:0e:61:53:34:ed:03:
         9f:e2:ce:ca:02:43:4a:fa:db:10:8b:f6:02:a8:a6:39:17:2d:
         e2:fd:20:73:67:00:92:f6:fe:90:22:39:3c:93:ec:c7:5f:9d:
         71:53:a2:17:21:10:03:3d:cf:9f:98:02:e5:e1:53:32:fe:15:
         84:a4:52:25:23:54:03:8f:18:44:de:7d:92:a5:fa:4e:06:ac:
         24:95:50:3f:11:58:43:26:56:2d:db:9d:d9:39:6b:4b:06:21:
         d5:a0:27:45:06:6b:e6:91:e4:70:14:15:eb:61:db:25:74:9d:
         19:2b:c1:2d:9f:16:23:2a:47:bb:27:7f:12:7e:ff:65:ce:6f:
         30:a1:8a:1a:8e:5f:62:21:c7:90:0e:d4:7c:bd:bb:1d:8a:7e:
         da:93:77:20:7f:e8:da:3b:9f:f0:60:79:62:2a:db:26:ad:22:
         52:de:48:df:04:18:d6:6f:c7:91:96:2d:da:17:c5:ee:8e:b6:
         72:a0:ec:28:20:c0:8a:4f:13:7c:8f:fa:d6:46:a5:83:f0:0f:
         b7:81:46:39:32:db:92:95:48:d0:8d:24:1f:48:a0:bb:0b:13:
         ab:86:59:45:81:15:1c:a2:4e:35:18:06:c0:a9:3f:a3:d2:73:
         75:fe:22:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:29 2026 by rpki-client