Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/f16ae95f-fe51-3df3-ba21-8607ee13a727.roa
File:                     f16ae95f-fe51-3df3-ba21-8607ee13a727.roa (raw, json)
Hash identifier:          kGvHkyKCJ+eCDU8PQETiBr/KkDKV2hNf+u7PJYLIO2s=
Subject key identifier:   2D:CE:90:31:B1:18:E2:1D:21:0E:23:C4:E9:18:E1:71:4A:C3:4C:47
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584F66C2C111E7B81750EF72D810
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/f16ae95f-fe51-3df3-ba21-8607ee13a727.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     397423
IP address blocks:        216.185.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:c1:11:e7:b8:17:50:ef:72:d8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=50d40dca-45b4-4d63-966e-bdf094b2c579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:88:44:06:bb:66:34:89:55:c7:40:9b:d8:
                    1c:16:6f:c7:8e:5d:cf:6d:eb:f5:41:44:ba:05:47:
                    36:14:5b:e8:80:b3:7d:c4:15:e1:4a:b5:e8:35:6c:
                    77:b6:79:bb:5e:c8:7f:fa:2c:a2:de:ca:c1:27:7e:
                    5c:49:ec:2c:8f:91:b1:df:9f:f9:73:0e:b9:1f:1a:
                    0c:60:83:9a:f0:8f:c8:47:9c:19:75:17:63:b8:dc:
                    15:27:6e:9a:74:ca:f5:46:cf:f2:9d:37:69:d1:91:
                    24:4b:1d:5e:03:db:00:0f:03:b9:fd:f5:3e:71:f3:
                    11:70:1e:57:75:ae:cb:23:9d:68:59:3d:aa:4a:23:
                    79:44:a2:c7:49:e2:6f:7f:ec:b8:35:6f:56:c4:fb:
                    83:fc:28:6e:4b:9f:51:ec:05:e5:b4:48:75:2e:cb:
                    96:d5:fe:c2:92:ca:61:25:10:f4:b1:ac:08:67:e8:
                    41:06:1b:f4:41:ed:83:5f:66:b2:b6:a9:c5:2f:3a:
                    7f:b5:6f:d7:e2:d8:a8:68:b9:f0:7a:3d:dc:d4:88:
                    08:a6:e8:13:a4:57:07:ff:b5:9c:5a:9f:72:2e:f0:
                    8c:14:fb:81:10:fe:51:4a:bc:c3:d3:20:1d:31:34:
                    69:5a:8b:bb:9b:b7:28:15:d4:23:1a:c8:73:b6:79:
                    72:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CE:90:31:B1:18:E2:1D:21:0E:23:C4:E9:18:E1:71:4A:C3:4C:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/f16ae95f-fe51-3df3-ba21-8607ee13a727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ce:a9:5d:e9:a8:8d:54:7a:74:4d:34:01:f2:50:00:e0:7c:
         91:6d:1c:ea:e2:8e:60:07:a9:eb:80:df:8f:61:1d:91:9e:20:
         25:ac:80:6e:74:28:42:81:79:4e:27:e1:08:3e:72:d4:4f:3a:
         b9:48:e1:b0:ba:a0:6a:55:c4:ad:62:73:e1:51:23:b6:26:83:
         64:67:14:10:16:f7:fc:b1:6f:97:06:24:06:40:96:9f:d6:d4:
         fd:37:70:01:df:1f:6c:8e:c2:32:dd:86:e4:b9:c8:ed:73:1a:
         32:3e:a7:83:12:bb:ca:46:c1:81:bc:6b:12:c9:54:96:9c:1a:
         75:9f:cb:1d:1a:49:19:7d:2b:ac:f6:f9:5c:51:ea:3f:4c:f4:
         89:17:1b:ae:7f:89:c6:93:61:b9:de:9f:c0:6b:13:3a:a6:1c:
         d5:13:04:b7:c1:28:e8:ec:64:cd:4c:96:f4:a3:48:ff:09:79:
         a2:04:a8:d3:a2:da:5e:1d:9f:10:18:00:28:46:99:db:cb:ba:
         fb:9d:8d:b0:dc:cc:ab:3f:0e:be:85:77:72:29:02:5e:4f:b5:
         1d:82:2e:30:88:72:df:c1:77:08:cd:96:1d:ab:0f:38:bd:fa:
         fa:9f:d1:28:f6:d0:75:13:2c:1e:4c:e1:c1:66:a8:f0:3f:75:
         15:5b:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 15:17:11 2026 by rpki-client