Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf67593e-bb55-3189-949b-82571380be68.roa
File:                     bf67593e-bb55-3189-949b-82571380be68.roa (raw, json)
Hash identifier:          lE5ic1nISD09lt1tWudHhT2LGuIVC2Le+EOMRuWTdSA=
Subject key identifier:   EC:13:51:30:81:84:05:2F:EA:D8:CE:34:21:51:41:C4:55:98:7E:7B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F4F07F72C448A0CBD6F09980C
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf67593e-bb55-3189-949b-82571380be68.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     22677
IP address blocks:        16.203.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:f7:2c:44:8a:0c:bd:6f:09:98:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=48abf337-602b-47c5-90a4-36c0a5a34d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ff:f7:13:22:bb:2a:34:f4:65:25:17:6d:d5:
                    e9:3b:7a:20:58:a5:61:b4:ea:26:ac:64:a3:6b:f1:
                    5d:7e:7d:83:ad:a8:3b:46:4e:ee:30:08:ad:c6:ff:
                    5c:d9:77:5d:0d:59:4c:ca:17:fc:82:1e:98:2f:a2:
                    fc:da:a2:40:4f:6f:3d:a9:ad:67:c6:16:96:50:b8:
                    72:88:fd:33:86:90:f2:eb:e1:87:dc:68:09:ae:23:
                    c8:17:d8:b6:83:90:9c:2e:13:f1:5a:80:8d:5e:10:
                    1d:3c:66:8f:3a:65:ee:05:d3:95:db:c9:9b:55:c8:
                    5b:73:29:4c:8c:72:69:6e:7c:0b:b4:5c:3c:aa:8d:
                    b4:df:8c:a6:8e:34:dc:3c:be:72:3e:25:a4:92:d6:
                    ab:b8:47:d5:03:65:f8:98:eb:91:8d:d3:16:65:4e:
                    f1:63:1c:61:29:51:09:22:d5:22:e1:bc:78:b4:25:
                    ef:a7:db:a6:0c:34:a4:a6:d9:a5:d3:4e:cc:ea:10:
                    6a:4d:8f:a3:43:dd:45:b1:38:14:c1:0b:ba:82:91:
                    14:69:e3:4a:24:a5:d8:41:09:8c:66:c2:6d:f9:cf:
                    ed:4a:a4:27:6a:fb:e6:ca:5b:87:f2:2f:b0:b4:73:
                    c8:a3:e7:03:f1:02:12:30:39:38:33:8c:a6:4a:72:
                    d7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:13:51:30:81:84:05:2F:EA:D8:CE:34:21:51:41:C4:55:98:7E:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf67593e-bb55-3189-949b-82571380be68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.203.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:a1:86:8f:3d:d3:f7:db:a9:71:56:8b:37:e0:54:b7:cf:e7:
         ad:74:03:59:91:bb:c2:15:f8:c9:04:f8:09:18:d4:b7:b0:ea:
         3f:25:33:62:9e:06:eb:43:aa:d3:6c:dd:0c:fe:60:bb:af:2b:
         8e:05:2d:4b:84:1d:97:f1:53:fc:96:4f:94:f5:45:3c:fe:6e:
         2d:d3:44:df:ef:83:45:8f:a0:96:c9:69:67:d3:4f:5d:c4:2d:
         7c:90:e6:24:7f:c3:59:16:1b:ea:db:01:49:ed:b1:05:79:97:
         57:d0:e2:e7:2f:34:c9:74:08:dd:57:b2:04:1c:9a:52:05:ae:
         4f:a3:a1:1a:3f:19:63:9b:bf:10:82:1d:2d:aa:82:33:2b:f3:
         24:fe:a9:20:46:41:a4:da:5c:c0:63:8f:a6:08:ae:6c:24:b4:
         e7:45:a8:a8:fd:48:1b:2c:b2:f8:e8:6e:57:a3:7d:63:6f:78:
         df:38:5d:af:70:a9:d2:1b:17:02:a2:9b:db:e4:94:20:1e:dd:
         3c:92:bb:dc:08:f7:c7:e5:9d:16:70:a1:2d:f1:b4:50:3b:98:
         3f:cc:9c:24:87:88:e1:15:d1:0d:26:c4:09:b4:14:dc:90:1f:
         71:20:17:13:97:04:61:e8:0a:00:e3:ab:56:34:dc:83:11:54:
         f1:94:f5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:31:17 2026 by rpki-client