Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/8f26921d-434d-3723-b8ca-eb6e29241ee3.roa
File:                     8f26921d-434d-3723-b8ca-eb6e29241ee3.roa (raw, json)
Hash identifier:          ucbsq552JS02uD7hL8dnUgcsL64VUeAz6bPgtkrxFWg=
Subject key identifier:   ED:E2:71:97:8D:4F:29:CC:66:1A:CB:05:E7:2E:0A:16:87:19:87:75
Certificate issuer:       /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial:       010D0C9F4328584CE4D62A3017855A147416FC00
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/8f26921d-434d-3723-b8ca-eb6e29241ee3.roa
Signing time:             Tue 17 Feb 2026 14:30:27 +0000
ROA not before:           Tue 17 Feb 2026 14:30:27 +0000
ROA not after:            Mon 18 May 2026 13:30:27 +0000
asID:                     16524
IP address blocks:        72.11.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:d6:2a:30:17:85:5a:14:74:16:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
        Validity
            Not Before: Feb 17 14:30:27 2026 GMT
            Not After : May 18 13:30:27 2026 GMT
        Subject: CN=7def5adc-1bfb-4985-a313-930d914423d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9b:d9:78:d8:e8:97:4f:04:eb:80:b8:61:a1:
                    25:4f:5c:cc:54:a0:c9:a8:a8:22:b5:40:a6:48:16:
                    fb:5c:ca:2e:e9:f9:ae:98:64:e8:5a:b8:a6:a7:ba:
                    e6:ae:2b:88:84:59:32:3b:e4:0d:dd:c8:b0:64:da:
                    e5:3a:21:54:75:65:da:23:7c:80:ca:1f:c0:ed:a5:
                    b6:c8:33:e3:40:63:89:4e:d3:2c:d9:47:0d:89:8e:
                    70:a5:0d:bc:56:ca:63:9e:4e:99:60:e8:42:38:67:
                    2c:bb:16:1f:94:17:71:f5:1b:18:40:18:d4:de:e7:
                    fe:95:22:ef:4d:7d:dd:6e:7f:a7:bc:f6:35:46:4b:
                    e6:4d:f5:0c:2f:9e:2d:c2:e4:d3:6c:59:52:9e:fe:
                    d8:e4:14:ed:2a:5d:70:c0:e5:14:96:df:98:97:e3:
                    a6:47:c9:2b:a1:82:aa:47:22:ae:a8:b3:f3:00:4b:
                    ff:34:c6:64:f0:9e:ab:b2:2e:61:e5:2c:92:6b:2d:
                    52:30:bd:37:bc:61:34:e0:5b:a4:aa:27:01:8d:b2:
                    cb:65:a1:6f:88:60:6d:d3:2d:0d:03:b9:43:d4:64:
                    6a:94:5d:ce:6a:df:94:95:ac:31:c2:78:59:c0:70:
                    0a:67:c1:c4:48:cb:d2:e1:77:1b:31:8e:84:ec:c0:
                    c5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E2:71:97:8D:4F:29:CC:66:1A:CB:05:E7:2E:0A:16:87:19:87:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/8f26921d-434d-3723-b8ca-eb6e29241ee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl

            X509v3 Authority Key Identifier:
                keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:09:a3:c2:72:95:d3:3a:07:f9:05:06:78:80:fd:f2:b2:04:
         ae:fb:11:85:18:b1:95:df:9d:28:e1:dd:a9:ff:ef:10:54:7f:
         b0:80:f7:12:3f:3a:21:a8:71:1b:63:83:e0:a8:41:35:23:1e:
         66:d1:fa:59:6b:5e:93:5a:4b:b7:81:20:2c:30:48:ff:a8:ce:
         58:0a:6e:7e:de:a1:36:09:43:78:c0:96:74:e8:28:f7:ee:e2:
         ec:84:cb:38:52:d0:a7:fb:5f:51:e1:79:1b:17:54:41:4c:7a:
         27:d2:7c:a3:44:3e:7b:14:6d:b8:f4:a5:d1:95:49:c7:c9:e6:
         92:70:1c:9d:a0:52:90:cf:de:32:b2:f8:20:73:3e:b8:4a:f6:
         55:7c:6f:4e:a3:c3:68:cc:70:60:05:bb:7c:58:df:ee:3c:31:
         2b:ce:e6:e8:8c:29:1c:5a:a5:5d:ca:f0:17:6a:cc:bd:ec:86:
         97:90:9b:1f:4f:b5:ce:cd:4e:32:a5:48:48:43:b4:0e:6d:c8:
         cd:9b:cb:83:c8:e5:ae:9c:80:17:87:1a:30:8c:b4:bf:4f:14:
         f2:8a:2e:f4:16:c8:a6:13:8f:46:23:91:b0:3e:41:ab:a2:3a:
         da:a1:05:e6:f1:23:dd:26:e7:c6:b7:66:aa:a3:13:35:77:91:
         fa:c5:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:51:02 2026 by rpki-client