Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/55326049-743a-31e2-ab8a-1bfb79705563.roa
File:                     55326049-743a-31e2-ab8a-1bfb79705563.roa (raw, json)
Hash identifier:          LfW+oAeBEWLQj0oJ+fciKHjlvoFJXGfIqmYwQov4Kv0=
Subject key identifier:   23:91:F4:65:01:B8:3D:43:71:3E:F6:0F:51:11:FA:B0:67:7C:4A:8C
Certificate issuer:       /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Certificate serial:       010D0C9F4328584ED861E7FB82232D749CFBE070
Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/55326049-743a-31e2-ab8a-1bfb79705563.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        216.99.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:e7:fb:82:23:2d:74:9c:fb:e0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=20599e7b-151a-44ff-a542-9ef1a51057da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:df:bb:5f:cd:54:f2:83:dd:31:8e:a1:35:8a:
                    6c:6b:9b:24:a3:2f:34:bf:9d:9d:4c:28:18:74:b9:
                    e9:9e:0e:1a:cc:1c:99:01:e9:71:f0:e0:ce:7b:0c:
                    59:ba:6d:88:04:b4:d3:0b:be:d9:68:0b:26:39:af:
                    62:71:0f:a7:91:b1:a3:31:1b:08:02:6d:93:6d:7d:
                    53:20:c8:61:02:8a:63:07:84:67:ca:33:56:04:0f:
                    00:13:76:2d:ce:37:22:84:bb:58:11:e0:d8:0a:bb:
                    85:c1:43:12:d0:9c:24:9b:43:9c:83:bc:67:81:ac:
                    e4:0b:31:d7:1f:ed:6a:08:ca:96:39:60:da:25:d7:
                    f0:0a:1d:99:42:65:66:d9:ef:5d:fe:09:79:92:48:
                    ff:48:ef:e7:aa:29:20:a6:3f:65:5d:52:fe:d8:44:
                    63:ed:b0:c4:55:4c:db:2b:d2:5e:9d:9e:1d:b0:2c:
                    16:26:40:27:84:05:13:f0:e3:a0:08:8f:18:ce:83:
                    78:39:e2:be:57:68:08:89:06:75:ca:4b:22:73:25:
                    41:78:18:70:26:96:97:02:5c:98:7b:e0:3e:d2:48:
                    a9:ff:aa:61:8d:27:59:0c:78:ff:e7:89:ec:50:eb:
                    77:12:1b:0b:d9:d9:0f:30:25:ff:77:fa:8a:33:ec:
                    5d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:91:F4:65:01:B8:3D:43:71:3E:F6:0F:51:11:FA:B0:67:7C:4A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/55326049-743a-31e2-ab8a-1bfb79705563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl

            X509v3 Authority Key Identifier:
                keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:36:93:98:02:86:d2:a7:c4:ff:67:a0:81:ac:2c:ba:7f:
         70:17:fe:2f:f8:82:4b:b3:27:4b:5d:11:0b:7f:34:de:4c:c0:
         13:41:2e:39:12:7f:45:a0:a8:ba:36:fb:3b:65:7c:92:44:6a:
         75:f5:da:74:42:1a:5b:0d:43:41:3c:ed:f3:57:6e:dc:b8:1e:
         c6:59:3f:74:b7:f9:6a:aa:37:3a:3e:dc:49:7c:73:d7:4e:c7:
         9e:10:5b:b3:fe:48:d0:d6:07:00:6e:87:c6:6b:dc:c4:8a:6f:
         d2:99:76:a1:bd:ca:f5:22:5d:ea:ee:ac:c1:2b:96:e8:63:8d:
         e5:c7:c4:bd:a2:8f:b2:07:0f:e8:b4:b0:5e:23:5f:7a:4c:a1:
         93:e6:a6:75:dd:ca:34:e8:bc:fa:c6:45:ce:0f:d3:d6:0f:56:
         1f:67:49:d4:92:6b:fa:72:ff:10:98:fc:bd:dd:46:d3:89:5b:
         6d:9f:87:ba:2e:25:9c:c3:e8:2b:90:c4:3d:b4:61:85:14:a4:
         6f:50:3e:3c:5b:f6:0d:a6:00:e6:83:01:a7:ce:35:f5:a3:1b:
         1f:23:a2:ce:dc:62:97:9d:ea:b9:36:6a:b7:c5:dd:58:2c:1e:
         73:fd:33:11:b7:6c:8a:0f:80:cd:45:ac:d6:eb:b9:5c:9c:4c:
         03:20:2f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:03:28 2026 by rpki-client