Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/b2dcc6fb-7b4c-3359-ab33-eb31c699f6f0.roa
File:                     b2dcc6fb-7b4c-3359-ab33-eb31c699f6f0.roa (raw, json)
Hash identifier:          vvFcdsaknBgrplI/s69OTW1bQ7JG3BvMJgitc7lhgPg=
Subject key identifier:   5B:2C:ED:18:D3:A8:D4:39:4B:F6:8F:A1:14:EE:EF:1C:DF:64:FB:EB
Certificate issuer:       /CN=84071564-b087-4d9c-88d0-6fa5a30617a3
Certificate serial:       010D0C9F4328584CC77731D8BD716D6017EE8B80
Authority key identifier: 83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/b2dcc6fb-7b4c-3359-ab33-eb31c699f6f0.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     16717
IP address blocks:        199.116.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:31:d8:bd:71:6d:60:17:ee:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84071564-b087-4d9c-88d0-6fa5a30617a3
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=a0dc1922-a75e-4d1a-8c75-9bd041c21b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:58:c0:53:b6:36:c7:f8:13:69:ab:bd:fd:
                    e8:c0:d9:34:59:83:16:bc:43:d1:7e:73:5e:11:ff:
                    5b:a7:89:a4:33:ec:ab:07:42:2c:26:8c:db:92:28:
                    26:e3:16:b1:89:07:57:a1:0e:56:ac:3a:17:5e:b5:
                    66:8c:d5:ab:9c:fd:9f:17:57:8b:b1:94:52:bb:e6:
                    db:6b:f7:36:ce:09:f2:6e:cb:f3:7d:13:6a:63:87:
                    d0:e5:48:4d:de:76:3d:71:da:27:52:c9:bb:d3:1b:
                    cf:55:07:0a:5b:cf:25:1b:f2:47:74:77:f8:cd:c6:
                    56:39:1f:6a:26:01:bc:f6:4b:13:5e:df:38:bc:54:
                    32:5b:7f:63:5c:80:ba:59:d3:4b:33:0b:8d:db:0b:
                    d6:f3:bf:2c:b6:40:f2:3e:9e:5b:62:15:80:46:23:
                    11:b8:7b:6d:12:5c:46:9e:00:81:ee:fd:62:89:ff:
                    a1:c5:49:f1:8f:6d:2c:9e:69:e4:7e:23:a9:e5:77:
                    57:30:62:d6:5d:b4:80:8a:20:c5:48:e0:8e:aa:40:
                    c5:21:aa:c4:cd:9a:43:e5:40:bb:21:a9:2d:0b:5f:
                    19:d8:0a:9b:ea:de:c9:44:c4:2f:7e:aa:c8:1f:ed:
                    cf:1e:73:b7:05:e7:d1:ea:88:df:d5:16:02:a7:4c:
                    12:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2C:ED:18:D3:A8:D4:39:4B:F6:8F:A1:14:EE:EF:1C:DF:64:FB:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/b2dcc6fb-7b4c-3359-ab33-eb31c699f6f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl

            X509v3 Authority Key Identifier:
                keyid:83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.116.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b6:43:40:e0:da:1d:a4:89:26:3f:47:76:47:82:b1:07:f4:
         03:a1:6c:b5:c4:5f:f6:47:5d:15:4c:89:76:4f:96:6c:3c:7f:
         f1:50:03:4b:b8:42:99:e2:ec:32:62:ed:2b:09:cd:e5:7d:52:
         80:a1:a2:8c:ea:38:61:f5:49:b7:a9:37:6a:af:f4:6a:89:63:
         fa:19:9b:99:24:db:26:9d:a4:ba:c8:80:cd:ae:99:dd:e2:c9:
         5e:c4:a3:cc:10:dc:91:26:2c:a8:f6:9e:85:27:fe:60:95:94:
         67:4c:d7:58:16:6b:99:4a:09:52:08:92:2b:3d:da:8c:e2:e3:
         23:83:cc:74:8c:ba:02:2f:71:cf:2e:60:3b:c8:79:e0:25:66:
         1b:6a:da:09:81:76:ad:f3:65:9c:29:32:d0:eb:f9:30:65:58:
         b8:d1:31:59:de:29:5a:39:f3:9d:d6:35:03:68:54:4a:40:59:
         ca:1c:93:2f:0a:71:48:86:4c:57:80:c0:b1:c7:fa:4f:db:bd:
         24:cf:aa:e0:7d:ad:65:34:3b:4e:81:88:69:1c:5c:48:f3:ba:
         5c:04:f6:63:f4:f0:72:a6:f3:be:70:13:70:b8:98:2c:47:ff:
         ba:77:c0:5b:55:e2:85:1b:02:84:57:dc:4c:18:45:32:76:65:
         2f:33:72:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:10 2026 by rpki-client