Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/c5c446b7-a32c-3135-b07e-ce54a5444e06.roa
File:                     c5c446b7-a32c-3135-b07e-ce54a5444e06.roa (raw, json)
Hash identifier:          I/f/Fb0HLSmxTGRBt4O3NPA+M6fn5dolN47GHif4tug=
Subject key identifier:   FD:2F:04:AD:67:9C:A3:F8:CB:C4:E1:13:B5:81:4E:CB:17:1B:F1:51
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F4328584DD4C076288901FB017BF1F5E0
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/c5c446b7-a32c-3135-b07e-ce54a5444e06.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     21559
IP address blocks:        200.5.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:76:28:89:01:fb:01:7b:f1:f5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=68ebb0d4-757e-4c41-8165-76a20d868a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e9:46:19:46:1a:95:cb:79:61:de:7f:ce:5e:
                    30:0b:ab:31:8a:2a:21:db:7b:c2:26:2f:d8:b1:5a:
                    3b:e7:39:31:e8:9f:50:df:15:0b:b9:70:68:92:64:
                    70:1e:00:e6:14:97:5c:8a:4e:3a:9f:67:e5:5b:4b:
                    23:16:d5:bb:d6:fa:e5:19:8b:73:ee:e2:4e:91:22:
                    df:f6:c5:5b:e0:37:c4:48:9d:3b:8d:09:3b:00:ce:
                    7f:a1:df:86:a5:93:11:e7:1f:63:4c:b8:5b:e1:cf:
                    e7:41:ca:77:7f:61:0a:a6:a3:41:e6:98:39:32:05:
                    01:76:c7:80:23:84:3b:db:2d:71:2b:ba:cf:03:ca:
                    00:3a:5b:14:b8:5b:e0:0b:2e:2f:cb:61:93:f8:8c:
                    11:b7:9e:94:85:0c:07:f1:59:02:74:7a:d9:81:13:
                    4a:87:e2:1a:ba:b8:6f:fa:6d:8d:37:da:a2:a0:0a:
                    0c:1f:60:04:a9:5c:7a:03:ec:9e:39:24:ea:44:3e:
                    86:a8:48:44:86:2a:e0:d2:28:c9:4e:92:89:b6:a0:
                    77:2f:21:46:18:6e:62:75:a1:ce:6b:56:8f:e2:05:
                    d5:de:da:56:84:22:59:67:5c:ac:af:b1:48:93:7c:
                    d4:27:8f:b5:e7:f1:ce:1b:f1:97:91:df:dd:df:1c:
                    42:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2F:04:AD:67:9C:A3:F8:CB:C4:E1:13:B5:81:4E:CB:17:1B:F1:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/c5c446b7-a32c-3135-b07e-ce54a5444e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:fc:f3:62:b1:db:b0:cc:42:18:bc:ea:60:60:b5:ca:d2:
         68:94:79:a0:ed:2f:95:53:cb:2b:89:a3:7d:d9:f1:ef:23:df:
         6d:5b:fe:58:14:b6:16:31:61:b6:1d:57:1f:2d:d4:35:9e:70:
         2b:31:cb:a5:4f:b0:85:17:59:fb:d4:70:89:15:8f:a8:0d:1a:
         63:04:91:d1:69:75:8b:b0:f9:75:d6:24:a9:21:64:87:dc:a0:
         ac:44:18:36:6b:d8:c3:5f:24:8a:ba:7e:34:12:cc:68:1e:bc:
         13:0c:5f:66:52:d5:16:f3:84:14:ed:5b:3a:75:00:74:1e:c2:
         38:60:a1:18:4d:34:14:80:de:19:7f:b9:6e:4c:2d:97:7f:15:
         32:e0:fc:f3:cb:f6:f0:36:d3:7d:d7:32:6e:1b:dd:34:77:55:
         6a:f6:84:51:a5:d7:eb:db:22:92:8d:6a:3b:65:db:e8:38:f9:
         35:a3:88:3f:66:6c:42:87:5d:2e:bd:1f:d6:69:fc:27:89:da:
         f4:49:dd:5b:39:22:1c:c4:09:e3:5d:f3:9c:48:1d:1e:8d:96:
         80:ad:01:6c:32:f4:bc:31:8c:c6:d5:05:6a:ea:27:78:ee:de:
         7e:1e:65:0a:e8:7b:f1:51:cc:d8:e3:41:9a:97:80:2a:ad:b7:
         b8:71:a9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:18 2026 by rpki-client