Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/25988580-4265-3e67-b9da-0bcc5b7a589f.roa
File:                     25988580-4265-3e67-b9da-0bcc5b7a589f.roa (raw, json)
Hash identifier:          ZyFelcR7sn01f5QdPOE0LRwV+mted4nlFReHsna51Yg=
Subject key identifier:   BB:FB:11:B6:F0:F7:7E:60:B7:05:AF:E4:FD:AE:27:E5:74:E9:5B:68
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584ED001E40637B62DA645020880
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/25988580-4265-3e67-b9da-0bcc5b7a589f.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        173.199.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e4:06:37:b6:2d:a6:45:02:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=9f244529-243a-411b-9345-82c0a471cb1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3b:c5:89:e0:4b:a7:e3:ec:91:3c:5f:f0:bb:
                    c5:b4:05:c5:76:f1:93:fd:e1:00:c3:f6:2f:f3:ef:
                    32:63:83:a9:50:be:37:51:85:72:6c:82:93:e3:62:
                    70:de:09:a5:32:a0:85:a2:59:31:97:4b:5e:5c:1e:
                    da:a4:f6:1b:d4:be:96:94:70:80:00:e0:ac:77:01:
                    37:af:02:4c:c0:65:d0:93:85:c5:4e:b2:42:b9:27:
                    d5:3c:bc:d1:22:bc:6b:86:11:96:7f:a6:1d:37:93:
                    c2:ab:2b:69:55:68:87:89:96:cb:12:41:ab:24:f9:
                    ce:9b:82:15:7f:ba:cf:20:b4:bb:87:6f:33:35:fa:
                    2f:06:37:3e:4e:3c:19:54:ac:c8:4f:d4:71:40:b5:
                    06:d6:7a:88:be:25:99:ba:4d:d0:65:2e:dc:3b:2e:
                    fc:79:0e:b4:c7:0d:cf:27:94:b0:6c:fe:bb:24:af:
                    52:27:b6:29:9f:f5:20:2a:8f:a2:2b:1b:36:05:8b:
                    bf:1f:ed:2d:80:eb:74:91:26:9d:78:9b:14:d8:90:
                    5c:29:c5:24:24:8b:11:2d:f7:6d:e5:95:1e:c3:16:
                    c0:00:3e:b4:fc:18:7d:b8:f9:8a:a1:43:2a:62:d3:
                    f8:79:7a:c0:a0:ad:6b:0c:4f:c4:8f:1c:90:7e:a0:
                    44:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FB:11:B6:F0:F7:7E:60:B7:05:AF:E4:FD:AE:27:E5:74:E9:5B:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/25988580-4265-3e67-b9da-0bcc5b7a589f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:ab:49:b6:bf:61:ec:11:76:24:54:c2:3d:4a:01:7a:2f:dd:
         f6:6a:9b:6c:e0:dd:71:ce:9a:31:a0:bf:6c:5a:23:3b:50:37:
         12:75:81:bf:f1:4a:7f:34:c7:7a:6e:ea:96:20:e3:80:eb:18:
         da:09:e7:fb:a8:57:78:c1:0c:d8:ca:4b:e4:21:b5:ac:16:11:
         fb:c2:eb:ae:07:2f:6b:57:6e:df:68:93:01:bd:d0:49:98:56:
         19:47:76:94:42:d0:30:c2:66:cf:25:03:09:6b:0a:2d:54:53:
         f2:0c:fa:84:74:a7:64:65:d2:8d:59:ed:33:e2:94:fc:c8:32:
         27:b9:8e:26:87:fd:62:c3:f8:f7:0b:01:aa:ab:b1:b6:f2:c2:
         da:be:d4:7c:61:75:19:33:e7:0d:4b:1c:3c:56:2a:19:77:94:
         37:a5:42:30:36:f6:71:80:bd:26:cc:bc:2d:19:4d:d7:c3:7c:
         9f:5d:dc:7a:30:0e:2f:01:24:cc:4e:50:59:b3:c9:a6:f3:19:
         9b:4c:78:48:7e:d2:d9:50:1f:33:f4:5d:bb:b6:a9:5c:04:88:
         e9:0b:f0:43:68:12:6e:2e:99:51:b4:29:c9:6a:9e:01:ef:be:
         62:10:86:97:12:75:25:c1:42:76:59:e0:97:b8:50:a9:c2:64:
         9d:45:0f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:20 2026 by rpki-client