Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa
File:                     17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa (raw, json)
Hash identifier:          SzRtJjEV/HMJV7OB/QWJQmqS1Cz41dd2ippbK+LU/7k=
Subject key identifier:   1C:24:9D:33:9F:F1:10:4D:95:9C:45:DA:27:34:09:06:AE:F1:73:EF
Certificate issuer:       /CN=9e36a683-142b-41cd-932c-e115603de431
Certificate serial:       010D0C9F4328584EC7A1CD26D1F3E3F146374700
Authority key identifier: 5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        209.163.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:cd:26:d1:f3:e3:f1:46:37:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e36a683-142b-41cd-932c-e115603de431
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=8f5881a0-9016-43d7-9953-cc503486ca5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:65:6e:53:8f:75:23:35:fc:7c:ca:ca:10:58:
                    28:31:6d:51:d0:91:6d:a9:74:24:1d:fe:a1:6e:f6:
                    39:e2:e3:f2:62:d1:b4:4e:aa:fd:9a:a9:6e:37:bd:
                    1e:b6:99:34:04:11:59:d5:8b:f3:66:ee:66:20:57:
                    2d:ab:61:02:2f:71:99:b3:0c:d4:f6:c0:a1:3e:14:
                    a8:d8:35:62:b8:52:06:05:68:36:8e:dd:a6:5c:99:
                    29:6e:c9:6a:7c:01:f7:ec:05:c5:79:85:57:5d:c4:
                    62:5c:5b:54:5a:de:9f:81:36:95:a4:13:97:ce:a5:
                    86:b1:28:9c:c7:62:76:fa:be:9f:d7:11:a4:32:83:
                    ae:b2:10:78:7d:d9:7d:86:fe:25:ee:15:53:34:e6:
                    18:80:c3:79:0e:61:bd:57:c5:8a:4c:7e:08:45:2c:
                    15:9b:43:68:cc:bc:ea:c7:e5:52:9f:4d:be:e2:87:
                    18:e6:0b:82:50:f4:e8:e5:9e:7c:19:a8:2e:05:25:
                    73:f3:e7:72:8b:cc:cc:92:a2:15:5d:16:3b:a3:35:
                    c1:32:48:14:b8:ab:36:35:5d:4a:e2:89:5b:e9:a5:
                    84:93:cc:48:92:fd:82:0a:9f:45:9a:b5:b8:15:2a:
                    fd:e1:bc:b5:57:63:17:6a:25:55:46:e7:c6:23:73:
                    59:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:24:9D:33:9F:F1:10:4D:95:9C:45:DA:27:34:09:06:AE:F1:73:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl

            X509v3 Authority Key Identifier:
                keyid:5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.163.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:28:59:79:64:19:c4:99:fc:fd:ff:b0:2f:a0:27:f8:76:7e:
         07:93:c7:92:74:57:46:a5:e6:d7:de:d6:0a:a2:d5:4e:86:b5:
         72:57:ad:49:5e:6a:e8:9e:cf:b3:f3:98:6d:b9:3a:f6:6c:93:
         31:50:fb:63:c0:ee:8b:49:0f:2d:03:ea:14:6d:d0:97:f3:49:
         8d:61:51:23:13:1d:85:6d:1c:8d:1d:11:ff:a3:5f:9f:8e:9b:
         e1:a8:64:3d:8e:30:ca:18:ca:c8:55:98:2f:83:10:61:15:f5:
         98:ec:1a:cb:0d:18:2d:aa:8a:8f:51:25:e4:82:d0:7c:30:01:
         07:d9:32:7a:33:04:26:3a:42:a2:21:c8:78:0a:3c:33:8b:9a:
         ac:1c:96:e3:0e:ff:ea:1a:a9:65:2f:90:0f:1e:33:b4:26:cd:
         81:32:a6:51:f2:f0:b4:49:2c:d0:09:94:d4:f9:38:58:7a:9f:
         fe:d1:1a:d4:32:4b:b2:dd:10:20:ce:30:53:1b:6a:f6:32:11:
         7e:78:e2:47:21:4d:41:d3:56:3a:73:8c:81:8f:30:41:1a:2c:
         c0:d0:6d:b5:48:53:fa:22:5d:8d:83:17:a0:7b:59:4a:03:b8:
         84:35:58:20:17:f3:6e:7d:90:57:f4:a7:7b:2b:c8:ea:d6:03:
         44:cf:74:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:27 2026 by rpki-client