Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/516e72f9-ee03-33d3-8fcc-32a077cc5f0b.roa
File:                     516e72f9-ee03-33d3-8fcc-32a077cc5f0b.roa (raw, json)
Hash identifier:          BF6WxJwA+Gs7ZlvKdF0UdYuLs2Lw9PD8RUsiVnquT+k=
Subject key identifier:   78:58:CD:4B:3B:BD:6B:FC:7E:96:84:3D:B2:31:FB:AA:F9:11:4B:99
Certificate issuer:       /CN=24f82d36-633a-44e0-9b31-a523e1609720
Certificate serial:       010D0C9F4328584F20F7B6CB0CB30FA4C45DDFC0
Authority key identifier: A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/516e72f9-ee03-33d3-8fcc-32a077cc5f0b.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        64.16.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b6:cb:0c:b3:0f:a4:c4:5d:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f82d36-633a-44e0-9b31-a523e1609720
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=8ec8a2e3-f0f1-4e37-a85a-9a36096ae835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0f:39:8f:2d:35:51:23:ee:4b:e3:f9:02:70:
                    e6:f9:eb:44:49:0f:00:65:28:e0:df:3a:4f:81:1a:
                    e9:03:42:cd:08:83:86:48:d8:05:82:ac:9d:cb:79:
                    df:a5:ff:e7:8e:a0:14:1e:ab:59:8c:f9:96:61:05:
                    36:62:c1:bd:bb:76:f3:e5:ef:f2:22:5a:00:1d:18:
                    30:38:14:7e:4a:4b:ef:15:29:e2:cd:6a:38:17:49:
                    ab:20:70:ed:68:49:7f:f8:75:60:4b:74:7b:17:bc:
                    c6:d9:c8:31:a0:92:45:42:99:36:8c:af:50:00:5b:
                    cc:75:83:9f:d5:22:63:25:2a:4f:1d:f0:89:c0:f0:
                    6b:17:9a:a1:5b:35:26:72:50:87:95:b8:79:88:34:
                    e4:e9:39:67:95:81:8c:98:ff:93:76:2d:10:23:1d:
                    f8:85:9c:22:b1:53:3d:ba:6f:0e:cb:08:d5:6f:a9:
                    5d:02:61:be:1b:64:5e:e4:6b:34:48:42:05:5b:d1:
                    0c:99:e9:5a:6e:6a:8f:e3:32:71:c1:12:5d:98:8a:
                    61:8c:6a:43:59:5e:e4:54:6a:7f:44:e7:25:1a:94:
                    19:ae:39:30:f0:18:11:3a:cb:8e:63:3e:9c:55:34:
                    00:48:ce:05:12:2c:96:e5:c2:71:d3:3f:e4:d4:d2:
                    f4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:58:CD:4B:3B:BD:6B:FC:7E:96:84:3D:B2:31:FB:AA:F9:11:4B:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/516e72f9-ee03-33d3-8fcc-32a077cc5f0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720/24f82d36-633a-44e0-9b31-a523e1609720.crl

            X509v3 Authority Key Identifier:
                keyid:A9:1D:CF:6E:69:E3:B3:DF:31:25:12:CB:CD:C9:85:3B:F6:DD:CF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/24f82d36-633a-44e0-9b31-a523e1609720.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.16.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:1a:29:d2:92:37:85:01:ab:24:b8:12:b5:28:67:c9:59:bf:
         cb:58:14:54:93:3e:ee:5e:69:21:80:03:17:14:10:30:ac:08:
         5b:8d:40:0a:62:97:f1:83:54:d8:aa:be:56:a0:03:b0:57:9e:
         fc:e6:e7:28:f1:48:64:92:f4:f1:55:b0:b5:e2:0c:df:68:8d:
         e3:47:41:60:bd:0c:9f:26:7c:6d:fd:54:12:d6:4b:4b:f7:b1:
         2d:5f:97:12:19:bd:d7:1a:37:d6:bf:be:3d:e7:a5:6a:00:4b:
         f1:b8:50:d1:a9:11:da:bc:dd:74:5e:02:13:60:5e:97:36:5f:
         02:9c:ef:c1:39:8e:26:8d:94:6d:b0:13:80:52:86:1d:d7:ce:
         19:26:47:14:ad:53:b7:85:dc:55:e6:ae:0d:1e:2c:ee:63:ad:
         db:71:b4:79:a1:64:2f:c6:67:e5:63:cb:72:e3:27:f1:d3:3f:
         50:2c:4f:2f:00:b5:63:01:fa:1a:45:c2:25:36:07:e5:3c:4a:
         5a:86:14:fd:41:03:83:bd:c5:3b:62:9a:4b:0a:a6:81:24:d3:
         b6:89:23:c0:ac:57:9d:97:a3:e1:56:39:95:ee:79:e7:61:8a:
         f8:5e:49:4f:61:16:ea:30:5b:54:28:eb:0f:05:86:07:dd:f0:
         6b:76:66:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:40:10 2026 by rpki-client