Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/8f26921d-434d-3723-b8ca-eb6e29241ee3.roa
File:                     8f26921d-434d-3723-b8ca-eb6e29241ee3.roa (raw, json)
Hash identifier:          ZeZpri8PVzsOaBUNbMl18tvr3k7ZOWmSlFzmQR0aiP8=
Subject key identifier:   E2:90:B4:C2:E3:FA:8F:61:75:C7:B9:22:E7:FD:93:A4:D7:F3:B8:69
Certificate issuer:       /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial:       010D0C9F4328584EA5AA981A2FCD967BD3B54800
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/8f26921d-434d-3723-b8ca-eb6e29241ee3.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     16524
IP address blocks:        72.11.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:98:1a:2f:cd:96:7b:d3:b5:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=bfe098c1-bc90-49e9-979e-4a4df31691f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7b:e3:43:06:e7:e0:34:8f:3e:a4:ac:7c:76:
                    f9:60:03:8d:81:cf:84:01:2c:f0:f0:ff:66:a3:48:
                    a4:42:df:77:58:52:df:25:aa:88:7c:ec:ce:38:53:
                    24:64:9a:da:cd:c9:97:aa:a5:00:53:6d:c0:c6:ef:
                    35:8d:f7:03:f6:11:9b:91:0a:86:2b:1f:88:1f:e9:
                    51:ab:ae:21:41:f1:d7:b5:8d:13:39:15:70:d6:62:
                    d3:4a:72:e4:e5:0c:f0:64:d1:bf:47:d5:7f:8b:ed:
                    9c:6c:0e:6a:40:a9:20:61:fd:a8:9f:0a:6f:b7:db:
                    88:7d:0c:3d:a7:fe:01:b2:14:58:5d:01:a6:24:90:
                    7f:6d:49:45:68:4b:d8:c8:4b:08:3b:45:da:a4:ea:
                    6c:9f:82:00:7d:c8:e6:45:20:12:b8:94:43:49:3d:
                    cc:05:8d:8d:fb:c0:b2:f6:3d:05:cc:55:13:41:6b:
                    70:5a:e5:39:df:95:b2:50:87:da:ea:21:4e:3d:90:
                    6e:46:ee:9b:d4:c5:3c:52:ab:d5:1b:28:3a:ec:66:
                    fe:de:39:4a:ec:72:1f:df:7b:2c:60:a5:e4:06:4f:
                    a9:42:f9:d6:7a:67:ff:f8:36:2b:07:31:af:f7:97:
                    99:e6:89:87:96:72:a4:b5:ea:c0:e1:bf:75:a7:28:
                    7e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:90:B4:C2:E3:FA:8F:61:75:C7:B9:22:E7:FD:93:A4:D7:F3:B8:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/8f26921d-434d-3723-b8ca-eb6e29241ee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl

            X509v3 Authority Key Identifier:
                keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5b:92:ab:ea:24:da:6e:ac:d1:d1:d7:f9:73:4d:ff:d9:3d:
         26:f3:f9:75:fb:7f:49:00:e3:b3:3c:b3:49:a7:c9:36:12:34:
         56:16:80:59:c4:da:56:90:3a:ec:c4:12:4f:dc:d2:61:43:c2:
         e7:60:e9:17:be:1d:0b:3d:21:5b:d3:45:0d:61:00:4d:0b:3d:
         aa:aa:a5:e9:f6:89:85:2b:16:bb:4f:17:81:10:30:1e:eb:de:
         29:bb:bc:dc:44:61:48:ee:cb:70:2a:6d:74:16:e0:a2:0e:8c:
         92:4a:bc:a9:b3:04:97:d1:60:24:13:fd:26:83:f4:ca:c2:d8:
         65:df:4d:ca:77:5a:8a:b4:d5:8f:13:42:5a:a5:c7:c3:66:82:
         1b:59:0d:5c:65:94:d8:f8:a7:a8:88:7a:27:10:3e:c2:6b:7b:
         9b:75:d2:d0:a8:89:01:93:63:5b:b4:a9:5f:bd:c3:92:1c:81:
         cb:0f:15:4a:cf:d5:7c:04:d0:12:f6:86:13:3f:74:81:e0:84:
         2e:80:68:16:66:28:aa:16:be:6f:59:34:73:84:c8:e9:2f:41:
         b5:42:f1:f8:57:2f:10:43:50:01:f8:66:98:1d:82:c3:6d:7e:
         ba:5a:ad:70:ac:64:b4:41:82:9a:78:10:38:de:41:c8:39:fd:
         87:49:c7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:34:14 2026 by rpki-client