Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/10fd6d49-c41d-308c-b462-641fc6080542.roa
File:                     10fd6d49-c41d-308c-b462-641fc6080542.roa (raw, json)
Hash identifier:          Mah3yogHnhslMkjWRCPFKZEkR4jYlqsWrlZ0DbnPdFc=
Subject key identifier:   21:B5:AA:4D:F2:C9:D2:F5:8D:55:DB:58:B2:6E:AC:C4:DB:62:C8:32
Certificate issuer:       /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial:       010D0C9F4328584CE4D54CD8FCA929112902AF00
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/10fd6d49-c41d-308c-b462-641fc6080542.roa
Signing time:             Tue 17 Feb 2026 14:28:43 +0000
ROA not before:           Tue 17 Feb 2026 14:28:43 +0000
ROA not after:            Mon 18 May 2026 13:28:43 +0000
asID:                     16524
IP address blocks:        72.11.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:d5:4c:d8:fc:a9:29:11:29:02:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
        Validity
            Not Before: Feb 17 14:28:43 2026 GMT
            Not After : May 18 13:28:43 2026 GMT
        Subject: CN=20bbe1c1-2818-432f-9ba7-d3a39117b0b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:0c:25:17:1d:94:a5:bf:e6:a8:de:05:51:
                    45:27:5d:d4:e9:78:34:ea:5b:3c:2f:28:b7:2b:22:
                    14:bb:ac:26:a0:b4:44:a5:05:e1:08:5d:5d:40:8d:
                    4e:01:ba:4c:08:30:17:f3:0b:72:24:50:2c:93:65:
                    6e:02:86:0e:3d:37:b1:e8:92:9c:29:68:c7:6d:e6:
                    ca:84:cd:df:40:ce:e5:3f:48:e8:a2:6a:5b:ee:ee:
                    6b:95:d6:01:63:71:bf:a9:df:29:5b:ef:54:f1:d4:
                    ea:97:39:4e:c1:76:28:28:4d:2e:48:7e:b5:af:e2:
                    7c:6a:74:96:86:18:42:2b:de:d8:c1:cd:9d:f0:57:
                    3c:41:3f:35:8b:5d:68:6d:86:dd:39:50:a5:a4:8d:
                    dc:bc:3b:67:a4:24:ee:20:73:63:e5:92:6f:dc:dd:
                    8a:26:e7:82:53:f4:1f:0e:0c:9a:47:a8:38:6c:65:
                    6a:13:82:04:d8:0c:29:ab:04:8d:5d:e2:9c:24:fb:
                    64:3b:8b:35:e2:55:c6:52:a1:7f:a7:96:11:32:59:
                    88:88:70:34:39:9c:95:61:3d:4a:f0:bd:e0:94:20:
                    44:92:d9:26:53:52:79:0d:2b:56:ca:f8:1c:b5:4a:
                    50:82:19:8f:5e:14:8f:24:22:e0:89:24:27:f2:1c:
                    68:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B5:AA:4D:F2:C9:D2:F5:8D:55:DB:58:B2:6E:AC:C4:DB:62:C8:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/10fd6d49-c41d-308c-b462-641fc6080542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl

            X509v3 Authority Key Identifier:
                keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:46:99:85:1c:f8:83:ad:bb:58:51:da:7d:9f:13:56:3d:f2:
         a5:ec:d1:35:da:c2:c8:f9:9d:e8:73:cd:f1:b3:59:4e:f6:1e:
         29:e8:b1:f6:88:23:53:cd:73:8f:c8:31:7f:fa:d8:2b:bc:a1:
         7a:b2:1f:d2:57:c4:c3:94:b8:5b:5b:63:3e:58:31:12:f0:3c:
         58:a1:a4:9d:12:cb:c3:03:5d:49:ba:02:45:b9:55:d3:63:fc:
         65:45:d2:c0:1e:69:0a:96:cd:24:5e:ec:89:86:aa:df:57:71:
         45:40:e1:51:92:5a:68:13:61:c9:53:35:e5:4a:c5:bb:a2:8e:
         9a:f8:51:fb:d7:bd:e8:ab:71:86:2a:14:89:48:3b:05:f4:62:
         03:c6:ae:c8:b7:84:32:6f:38:65:68:47:9a:87:4b:04:0f:4d:
         22:e5:5a:dd:a3:f0:bc:4d:23:65:71:77:2d:47:ca:6f:84:79:
         b1:be:8c:31:8d:c3:f8:b9:7f:f3:82:99:6c:5a:36:e5:b1:32:
         f2:b7:11:dc:42:69:f6:2b:aa:16:08:df:a2:7b:0c:d1:cc:e4:
         28:22:c1:65:43:e6:ce:bb:78:42:16:00:e0:8b:84:16:66:b0:
         97:61:c8:52:66:16:81:61:25:c7:32:cc:78:86:af:56:ca:1d:
         ad:24:b7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:20:45 2026 by rpki-client