Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa
File:                     e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa (raw, json)
Hash identifier:          AuNfjgvEEmjaS2XhOB0Cqo1JoOtt4cJZgSWBoN5P990=
Subject key identifier:   0D:DA:B2:44:49:D9:FC:74:F8:43:98:9C:66:E8:9E:87:A0:1B:5D:32
Certificate issuer:       /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
Certificate serial:       010D0C9F4328584EA5AA962B3B58704578A1E900
Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     16524
IP address blocks:        72.11.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:96:2b:3b:58:70:45:78:a1:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=1b16de58-55d1-496e-a89e-936d2f521f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:75:ad:dc:c1:b1:ac:29:eb:53:07:18:be:62:
                    cd:07:51:03:ce:1e:f3:79:82:4f:83:64:53:18:32:
                    23:b0:bf:67:e0:a3:68:3b:63:55:d4:86:b8:ef:0c:
                    91:1d:43:c7:70:4d:30:3a:0b:87:95:f9:5c:a0:4d:
                    e9:42:ee:2a:e9:de:3e:08:c3:e7:08:64:fb:38:40:
                    ff:28:25:85:43:d8:42:0d:19:0c:fd:ea:66:24:0f:
                    e4:dd:ba:c6:e1:4e:43:dc:39:16:8c:75:3d:e6:8c:
                    07:b4:32:29:48:a2:22:2b:56:c8:c0:dd:8e:76:e3:
                    72:1e:52:b2:de:73:25:b2:d3:5d:a4:f1:7d:75:8a:
                    27:eb:fb:98:fc:e8:37:e6:d7:34:4b:1e:ea:82:a4:
                    0d:1c:48:a0:50:3a:ca:c7:b3:a4:8d:b8:fb:16:a6:
                    2e:ff:1a:5d:ad:13:a0:74:fe:15:4d:59:3f:22:85:
                    92:a9:07:e8:ea:2f:61:a1:91:6b:e4:25:a6:02:61:
                    cf:50:ef:9a:f9:72:e2:b3:71:27:60:28:10:22:4e:
                    fc:46:00:ee:05:19:6c:9e:27:64:34:32:b5:5b:1d:
                    58:f4:4c:6b:3a:30:f5:33:72:67:da:ab:3c:46:f0:
                    d5:07:75:e1:18:fd:b2:21:37:6f:65:83:51:6d:e4:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DA:B2:44:49:D9:FC:74:F8:43:98:9C:66:E8:9E:87:A0:1B:5D:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/e8a359e6-b837-3dbf-b00e-3aa64ee4d604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl

            X509v3 Authority Key Identifier:
                keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.11.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:7e:58:09:bc:2d:98:70:bc:03:25:4c:ab:89:5f:09:8b:0a:
         9b:d8:b1:33:b0:19:b9:e0:2b:28:a9:26:52:a0:d7:e1:29:b4:
         b0:a4:e7:f0:26:47:74:78:0c:4a:f2:fa:db:02:71:2f:a6:2e:
         a4:92:f6:70:a3:58:a8:a8:a8:b1:19:e0:10:f4:3c:0a:1d:ac:
         ce:f1:50:de:17:fc:24:64:b9:20:94:d0:57:ac:de:10:7a:e9:
         f5:7d:c5:5a:1f:e4:30:d7:30:ba:7b:e6:6f:68:32:22:8e:6d:
         e4:0a:54:d0:d5:00:9c:36:1a:ef:58:67:56:04:2d:78:6e:9c:
         59:b3:11:dd:57:4c:9e:b6:7b:c0:db:31:15:43:84:69:67:80:
         30:15:ca:67:d3:fc:4f:bf:36:32:62:11:09:a1:d3:c0:bf:20:
         e9:c8:d0:c9:7f:51:b2:a8:9b:e5:ad:a2:01:f8:39:9a:71:c6:
         0b:d4:60:76:0e:c2:f4:13:53:c7:99:85:c0:60:6b:95:1a:3c:
         5b:9c:76:b8:59:be:18:4f:d0:c5:5f:ad:24:d0:4f:e6:74:54:
         4c:19:e0:4e:d8:54:14:03:bd:bf:78:bb:9a:c6:ac:fe:71:5d:
         ee:cc:f1:fd:bf:23:d8:c0:ad:0b:7c:1f:37:b1:e7:ef:6a:33:
         8a:72:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:30:31 2026 by rpki-client