Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/ca41f978-1d3e-3538-b87d-f15e2497272c.roa
File:                     ca41f978-1d3e-3538-b87d-f15e2497272c.roa (raw, json)
Hash identifier:          6Ex2sN5mSxNGCSkTBKl+IZ9gVS3hVnWjjRyC4CaJN7Y=
Subject key identifier:   B3:18:91:AE:54:BB:75:86:1B:5F:D2:07:65:42:E3:8A:32:26:B4:70
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584CE792243F455472FE4B4378C0
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/ca41f978-1d3e-3538-b87d-f15e2497272c.roa
Signing time:             Wed 18 Feb 2026 14:00:41 +0000
ROA not before:           Wed 18 Feb 2026 14:00:41 +0000
ROA not after:            Tue 19 May 2026 13:00:41 +0000
asID:                     32133
IP address blocks:        64.99.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e7:92:24:3f:45:54:72:fe:4b:43:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Feb 18 14:00:41 2026 GMT
            Not After : May 19 13:00:41 2026 GMT
        Subject: CN=d80da8b1-f1d7-42b6-8669-4c295109951b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:e4:94:39:7e:25:df:51:51:49:e9:25:57:
                    f0:75:37:43:6b:43:a6:55:c5:7d:45:bc:ee:cd:b3:
                    95:be:30:ad:ef:90:2e:d2:59:63:ec:8e:4d:bd:a5:
                    3f:cc:40:a1:35:27:d2:e6:9b:4d:d7:4f:5c:8e:dc:
                    30:7c:50:18:7d:ad:c3:9c:d8:d8:fe:47:86:8c:ff:
                    0d:e8:4c:74:da:f0:e2:99:ec:c6:89:af:3c:13:8e:
                    7f:bd:34:c6:81:65:db:16:a1:81:de:ae:b6:28:7f:
                    af:5d:53:69:ee:4c:8a:a3:43:b9:76:42:1f:8a:f0:
                    8c:bc:54:b4:20:b9:d1:f8:15:f7:64:30:30:34:e3:
                    0a:67:af:1a:17:dd:3a:20:62:7b:d2:1f:69:b7:d5:
                    08:ab:c7:e6:e4:96:b2:aa:6b:dd:f5:f9:b8:02:6f:
                    a0:54:e7:d8:c6:34:f9:ce:5b:68:db:c5:81:ed:72:
                    a9:8a:9b:bd:43:94:73:26:d8:8b:9c:3c:25:6c:b5:
                    74:3e:21:2a:4c:a7:d2:a8:b3:a3:e7:2e:7e:9f:13:
                    67:ac:90:a0:d2:74:39:87:be:9c:5c:9f:b7:1a:21:
                    d9:f3:3d:1b:b7:34:d4:ce:70:a1:e3:da:f1:27:a5:
                    58:86:b3:6f:ff:b2:dc:4b:e9:83:40:73:a5:37:eb:
                    46:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:18:91:AE:54:BB:75:86:1B:5F:D2:07:65:42:E3:8A:32:26:B4:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/ca41f978-1d3e-3538-b87d-f15e2497272c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e9:fc:d1:00:9a:75:d1:29:ae:fe:5a:e0:4e:10:95:d2:05:
         9f:17:9a:b0:d3:b8:ce:40:7a:f7:3d:e5:26:ac:74:ad:24:8a:
         67:e5:02:99:2e:8a:93:eb:95:30:c0:54:32:fb:08:a6:1c:b9:
         ab:57:21:97:72:96:43:26:d8:a6:d0:80:85:cf:91:9b:dc:f5:
         5f:7f:a9:a1:b6:b1:44:99:e2:32:09:6d:86:08:8d:89:7d:96:
         9a:42:88:cf:f8:f9:2a:17:66:8f:36:48:29:15:4a:9f:7c:05:
         ab:87:05:c3:c0:46:9a:a5:ad:af:7a:05:b6:9f:63:64:95:fd:
         5a:70:96:25:09:82:e4:44:7f:ed:db:96:46:37:77:5f:75:73:
         bb:9b:06:0a:81:12:77:f8:b1:56:92:a0:1f:d7:5d:0d:d5:0a:
         ec:2a:22:b5:b8:ec:ff:66:07:c6:97:bc:ef:b1:fb:a1:10:4a:
         89:cb:41:da:bc:ce:d6:c5:ce:25:a6:48:25:86:07:61:3a:66:
         7f:83:e3:7f:18:91:f8:c0:2f:cd:a7:b2:a1:a7:3e:52:26:f8:
         97:6d:d6:c8:ab:a1:e8:c7:81:c1:22:49:87:54:55:3a:1c:5e:
         91:1e:1e:d4:a7:53:75:50:6e:27:1c:f5:59:e8:27:fa:4d:d4:
         61:15:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:50 2026 by rpki-client