Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/7fec39fd-cfdb-369b-bfc3-76e6f54f0981.roa
File:                     7fec39fd-cfdb-369b-bfc3-76e6f54f0981.roa (raw, json)
Hash identifier:          W1trJBW1SZ1UkINxU3XJSd35N1lC3+vGsIiXi9PXBBQ=
Subject key identifier:   3B:99:82:BF:E6:C4:C8:86:1B:8D:D6:17:B9:1B:99:7E:89:4B:31:FB
Certificate issuer:       /CN=509049fe-e6ce-45c8-b45a-8efc9d25e864
Certificate serial:       010D0C9F4328584EB84727337F1DF3CF0B5D3500
Authority key identifier: A3:06:43:C3:45:D0:FC:38:27:1D:0E:D7:CB:A5:B6:FB:93:7D:43:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/7fec39fd-cfdb-369b-bfc3-76e6f54f0981.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        216.235.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/509049fe-e6ce-45c8-b45a-8efc9d25e864.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/509049fe-e6ce-45c8-b45a-8efc9d25e864.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:27:33:7f:1d:f3:cf:0b:5d:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509049fe-e6ce-45c8-b45a-8efc9d25e864
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=f03accfd-2931-42ea-ab07-9ad9bded7aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:7f:e6:0a:69:22:f0:11:33:56:70:84:b6:
                    2e:d3:4c:c8:83:27:60:be:42:ee:bc:71:2c:55:d8:
                    80:9c:91:d4:35:03:c1:c0:4e:13:58:6a:5c:ed:45:
                    80:f8:91:79:f5:e8:51:c1:3a:35:2a:0c:0a:5b:34:
                    b6:52:cd:24:2f:cb:e8:e0:a3:f9:fe:23:42:c3:1d:
                    a7:13:b5:06:ae:5d:f4:8a:e5:5b:af:fb:a3:6d:4b:
                    5b:c4:45:ac:a5:75:d1:ff:91:8a:72:c3:0d:e5:84:
                    3d:fe:12:35:ae:8b:26:e9:e5:2f:73:a8:35:59:db:
                    e3:f4:75:c8:d9:a3:dc:08:c9:f8:7b:b8:a7:7b:98:
                    8d:18:f8:9f:e0:cc:b6:ec:0b:2a:6b:fc:ce:fe:47:
                    9d:b2:d6:d2:a1:35:9e:ef:a0:df:6d:cd:d4:a0:25:
                    a1:a5:e5:38:ac:4a:b0:c8:25:03:7b:80:9c:f2:ea:
                    c3:cf:3b:01:56:1b:29:70:9f:1a:bc:7e:05:05:50:
                    d6:90:81:f4:62:ea:e6:f2:69:a7:fb:06:56:d5:4d:
                    f9:66:fa:0a:8d:d9:eb:24:49:3e:5a:22:a9:08:b0:
                    c6:95:16:09:e5:13:18:63:ed:ff:e1:24:9e:f5:51:
                    3a:c1:09:89:de:df:b9:1d:22:32:1c:a5:17:43:3d:
                    7f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:99:82:BF:E6:C4:C8:86:1B:8D:D6:17:B9:1B:99:7E:89:4B:31:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/7fec39fd-cfdb-369b-bfc3-76e6f54f0981.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864/509049fe-e6ce-45c8-b45a-8efc9d25e864.crl

            X509v3 Authority Key Identifier:
                keyid:A3:06:43:C3:45:D0:FC:38:27:1D:0E:D7:CB:A5:B6:FB:93:7D:43:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/509049fe-e6ce-45c8-b45a-8efc9d25e864.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.235.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:77:f7:93:19:f2:f6:c0:b9:ef:96:25:04:4a:f7:7d:e4:15:
         1d:9b:c1:3d:61:64:e7:2d:1a:83:a9:7d:0d:62:84:2c:ed:aa:
         a9:fe:f0:6a:72:0a:42:ee:27:04:ba:c2:ed:ac:3e:b6:bb:0e:
         3d:e9:53:97:4a:65:d3:93:51:8d:2c:65:f0:48:72:79:34:8e:
         f5:d9:29:37:4e:4c:85:e0:08:15:66:d9:f6:32:7c:d3:2e:5d:
         4e:2f:f0:a3:9c:69:cc:96:9e:a3:bb:82:7c:2f:be:f2:42:97:
         ea:6c:3a:41:7b:a5:0d:db:ae:68:af:ef:58:a7:21:70:95:97:
         b9:87:f0:89:d8:3e:f8:71:2d:e6:01:5a:03:9c:20:d2:80:01:
         94:64:87:a2:49:ed:97:9d:e8:bb:51:5e:b0:8a:d8:a7:04:80:
         93:1a:d5:c3:7c:fc:f7:2c:00:7d:75:e4:61:ba:41:a2:07:22:
         37:71:25:64:97:95:c4:6a:36:c8:3a:de:9d:1f:70:4a:ac:40:
         1e:1e:84:51:61:33:b9:5d:8f:80:49:53:4e:37:44:1d:03:d9:
         06:c4:7e:4d:2b:67:43:67:0b:cf:55:57:a8:4e:19:88:14:45:
         a6:f8:cd:6a:81:3f:ee:8e:e3:90:95:fa:e9:0a:27:bc:92:a9:
         c0:4e:fa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:43 2026 by rpki-client