Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6793821d-d94a-30ef-af8a-29ebda4241ad.roa
File:                     6793821d-d94a-30ef-af8a-29ebda4241ad.roa (raw, json)
Hash identifier:          i3sqKOKNu9b+79THRj9ydwqnY3YhoDbi3yWaAW23L3Q=
Subject key identifier:   B6:31:B3:2F:20:6E:0A:72:72:40:0C:34:AC:BD:FE:A5:03:9E:02:8E
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584F093CDB4131D90F42FEC19800
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6793821d-d94a-30ef-af8a-29ebda4241ad.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     14061
IP address blocks:        167.99.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:db:41:31:d9:0f:42:fe:c1:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=1c78eed2-a7b5-4d47-b0be-49872fcb3568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:62:c4:ce:cf:66:6e:13:d8:20:ed:70:e0:
                    27:0d:dd:54:0a:90:44:d0:71:ad:5d:ad:a7:2a:31:
                    32:93:bf:83:37:b0:f4:38:d4:e7:ad:2b:76:07:43:
                    23:bb:f8:74:32:34:03:b1:53:d5:f3:c5:59:86:7d:
                    49:39:f7:61:50:2d:a2:f7:3e:16:79:47:e4:67:10:
                    5f:c2:4e:c8:9b:26:01:b2:ec:61:a0:a0:eb:6e:b2:
                    07:2d:14:36:48:e8:b5:46:37:ae:65:5e:73:c8:71:
                    c4:63:bd:28:d8:8e:23:60:6d:2c:bc:a7:31:d4:08:
                    6b:a7:45:ca:88:e8:22:3a:5a:ce:0f:21:9a:d2:80:
                    44:fc:3c:6c:7b:52:6e:2c:73:cb:2f:26:a0:34:e3:
                    5a:b5:ea:ca:dc:5e:b3:1e:f1:3c:28:fb:10:82:1f:
                    82:f6:1c:f9:e7:21:45:56:5b:7f:f1:88:14:fb:83:
                    9f:7a:d6:6a:68:32:ae:96:8f:a9:08:da:66:6a:f6:
                    e9:79:35:93:9d:c3:a9:1b:32:28:56:f5:b1:e8:52:
                    e4:12:f1:03:c1:ea:ff:01:d8:6d:ea:45:9c:72:f5:
                    0e:69:d5:9c:06:43:91:dd:0d:17:0a:64:15:1a:ca:
                    67:97:0f:0e:34:1b:98:3e:90:6b:74:6d:b9:9b:b3:
                    b9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:31:B3:2F:20:6E:0A:72:72:40:0C:34:AC:BD:FE:A5:03:9E:02:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6793821d-d94a-30ef-af8a-29ebda4241ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.99.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:06:0d:7d:51:ed:bc:57:a6:4a:75:56:63:ad:7a:91:df:7c:
         67:98:69:8f:6c:84:be:c0:85:20:78:f8:91:83:74:7e:19:9a:
         d1:3c:79:21:c2:69:c0:08:7f:11:a8:e7:f9:e2:d1:e8:04:a4:
         25:89:f6:df:ee:01:ef:c4:1d:ce:04:98:39:30:fb:48:1f:df:
         ac:f0:de:06:1d:a5:3a:9c:3e:1c:20:7f:3e:b7:86:a7:26:9d:
         89:48:94:a2:6e:95:88:2a:fc:9e:09:0e:c6:dd:c2:a0:d2:27:
         2e:2e:cb:ad:16:4b:14:71:6f:57:2b:94:2e:76:3b:7b:46:2d:
         7d:e6:6c:cb:10:da:46:6c:3b:c2:80:dd:60:4a:8c:30:fb:8a:
         4d:3b:ea:eb:35:16:29:c1:02:d6:95:a2:a7:b7:38:54:97:3a:
         ea:16:a4:11:c3:4a:3b:f0:0f:5d:69:6f:ea:ab:fb:4a:db:8f:
         b4:90:a2:76:93:97:9b:2a:06:98:95:5c:da:56:4b:2d:70:46:
         6b:c8:e4:37:74:26:d9:5f:c1:5b:de:6f:46:f9:e7:45:e5:e5:
         0f:33:d5:d0:18:fe:f6:0e:56:3f:cc:d7:03:f1:42:58:2e:6c:
         21:f4:a3:d4:18:ec:25:87:59:68:55:5d:f4:32:f1:a4:e0:c4:
         7a:f6:33:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:14:20 2026 by rpki-client