Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6793821d-d94a-30ef-af8a-29ebda4241ad.roa
File:                     6793821d-d94a-30ef-af8a-29ebda4241ad.roa (raw, json)
Hash identifier:          WdbATW/K476xbs2gEt0P3OxLxWDQ7Ywm+Fq/qswqN68=
Subject key identifier:   15:9A:7B:2D:21:DA:72:02:58:78:57:D0:47:A7:8E:58:4B:77:8F:53
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584D869547C9F5DA24D46D363040
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6793821d-d94a-30ef-af8a-29ebda4241ad.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     14061
IP address blocks:        167.99.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:47:c9:f5:da:24:d4:6d:36:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=d7d9bd49-6060-4a80-aba6-c5554509f3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0b:b5:b5:25:1f:82:85:c2:76:8c:66:f2:8e:
                    a4:34:16:d0:d9:96:fa:c7:f9:b4:93:4d:a6:5c:c8:
                    6b:e4:d6:93:98:a5:af:fd:ad:05:42:c5:2c:2d:fe:
                    f8:39:45:18:17:5f:ab:d1:77:85:66:50:b2:6e:33:
                    43:e8:b5:6d:45:7d:d1:34:14:16:04:8a:7c:76:45:
                    fc:38:fd:8b:f2:51:bc:98:32:30:b9:19:60:67:80:
                    7e:14:e5:9b:a8:4b:c6:61:29:6c:ae:86:82:ff:99:
                    92:d0:e0:6a:4c:c0:0f:48:b2:11:df:5b:60:37:c9:
                    c8:33:16:1c:93:8c:b1:f3:be:20:c2:90:26:21:62:
                    27:32:c8:bb:4a:b2:41:ad:e7:37:84:c7:5d:91:d8:
                    c1:8a:30:6a:77:39:2e:4b:3c:09:7e:24:e2:0c:22:
                    9b:d1:aa:9b:0d:91:68:f8:15:4c:7e:41:a4:b1:92:
                    ac:4d:14:96:68:11:41:41:b6:e7:f4:fd:73:2d:72:
                    d2:c0:1c:03:a6:44:c6:81:eb:c9:95:ec:98:71:25:
                    83:08:db:24:bd:54:4f:8d:53:5b:b6:b3:02:ac:60:
                    b2:0e:04:ab:9d:b4:36:36:8d:c7:8b:24:65:99:ff:
                    34:04:60:5d:dc:bb:5a:ce:9b:30:11:a1:fd:9c:5f:
                    19:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9A:7B:2D:21:DA:72:02:58:78:57:D0:47:A7:8E:58:4B:77:8F:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6793821d-d94a-30ef-af8a-29ebda4241ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.99.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:0f:0e:74:33:fd:81:16:8c:f0:12:7b:a3:17:3c:ea:73:9d:
         93:dc:c9:e4:65:b2:05:b5:27:9f:48:58:2a:de:89:a7:05:64:
         90:a3:03:19:a1:56:3e:46:f4:4e:68:27:99:44:d2:e6:ee:36:
         38:71:09:64:29:4c:ec:12:19:82:da:0f:14:ed:40:7e:a0:8d:
         ba:9e:27:cc:2e:66:78:5d:50:6a:f9:bb:d4:18:7e:b7:29:7e:
         9a:e7:82:e1:af:be:0b:52:e2:c9:88:de:1b:e3:e7:ef:98:09:
         80:f9:66:a5:75:97:09:a9:9b:ff:03:82:7e:59:78:b6:15:df:
         49:8b:16:c3:7a:c4:1d:35:cb:5b:ad:d4:d3:44:83:eb:a1:ae:
         5e:e8:84:ea:89:46:6d:73:7e:fc:4b:ee:cd:82:31:98:9b:62:
         08:37:d7:e6:a0:17:9f:b9:41:77:49:35:a9:c1:23:f8:b0:f2:
         e4:ee:5d:bb:06:be:0c:f4:78:f4:a8:93:8c:4b:c3:66:45:9e:
         f1:74:8d:8c:5b:41:0f:ca:40:0d:0f:14:7e:23:db:a2:1a:a2:
         dd:e0:61:0c:94:15:bf:6a:79:d3:36:95:2a:83:08:c9:2b:32:
         6f:5b:b4:16:7f:91:07:ec:c0:3d:53:16:cf:0c:b4:f6:2d:0b:
         b5:e7:32:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:52 2026 by rpki-client