Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/716a8d26-15cf-38d5-bfc8-7081f6e667d9.roa
File:                     716a8d26-15cf-38d5-bfc8-7081f6e667d9.roa (raw, json)
Hash identifier:          TPyfb19G2ka5+O5VI1Bn90ARYvPEMYccF5MvcN6ytqM=
Subject key identifier:   26:B2:71:B0:16:91:32:E2:A8:6C:DD:85:C3:2A:71:7D:10:94:12:CA
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584D2BDA201EE6B244E64D905400
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/716a8d26-15cf-38d5-bfc8-7081f6e667d9.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     11090
IP address blocks:        216.137.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:20:1e:e6:b2:44:e6:4d:90:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=cd84fd86-50ec-4de6-bb08-b81e85164314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3e:88:4a:d0:48:a8:f9:7b:b1:d3:5b:09:d2:
                    b6:bf:ce:65:05:d2:19:f5:ac:6d:98:58:30:ba:2f:
                    3e:6c:b2:e5:8c:f7:3c:09:68:2d:75:9c:b3:56:60:
                    e6:58:ec:bc:3d:be:50:56:e1:63:52:16:d3:eb:c1:
                    8d:74:f3:4c:42:47:e2:d4:f8:ae:3a:ca:b3:63:84:
                    1a:11:e8:f8:6d:a7:7a:94:4c:8a:a4:d1:62:b9:5d:
                    df:86:4a:db:6b:47:00:ea:11:06:5c:a1:55:a2:16:
                    fd:da:97:92:b0:f4:55:54:d6:03:ba:2b:84:fd:3e:
                    77:12:6d:89:94:7e:4f:ac:4f:25:02:8c:81:69:88:
                    b3:2c:13:6e:9a:16:ac:53:6e:cb:6a:b4:1f:85:20:
                    77:0e:5b:3d:18:db:d3:f7:97:c1:37:4e:1c:39:c2:
                    de:52:e9:5c:5e:85:7e:1b:3f:72:ab:c6:dc:84:a0:
                    7d:b3:6d:ac:f9:6d:2b:d8:62:46:02:7b:6d:4c:66:
                    7c:ae:44:ad:ea:26:5b:8b:d0:13:d8:bd:96:9b:76:
                    7f:4a:af:79:52:73:e1:ed:9d:34:be:31:ca:b5:0c:
                    21:16:0d:9d:d3:1d:26:c0:c9:fc:09:60:2a:a9:f0:
                    74:a4:60:30:7d:10:b8:3a:ae:99:e6:a5:3f:c5:b9:
                    34:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B2:71:B0:16:91:32:E2:A8:6C:DD:85:C3:2A:71:7D:10:94:12:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/716a8d26-15cf-38d5-bfc8-7081f6e667d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:d3:1a:75:3b:ff:21:51:24:0a:46:e0:1a:75:a4:67:85:
         5b:9a:3a:b5:07:79:e2:46:a7:05:b8:99:6d:13:1e:7a:7a:1d:
         7d:af:d1:38:d2:aa:e0:c6:f2:d9:5e:dc:81:3e:81:f9:04:ec:
         40:b4:a9:50:1e:32:25:f5:41:3b:8a:96:e3:3e:d8:27:90:c7:
         1a:61:89:8e:4a:d3:4b:8f:14:28:f5:00:bb:31:b5:75:d2:dd:
         fc:04:50:fb:fa:69:79:2e:66:80:3c:6d:25:56:12:4c:d1:d4:
         8a:eb:5f:c3:9a:1c:6b:b1:16:49:fd:25:45:15:7f:88:a5:a7:
         4c:8c:d6:d4:0d:0b:cf:23:d9:c6:c7:07:b7:73:4d:44:9f:e7:
         82:5b:d3:9f:57:54:22:f2:10:4b:be:3d:65:ed:a9:a8:49:f5:
         97:37:56:08:38:45:53:5a:65:ee:2b:4e:66:ac:5c:47:39:e9:
         93:7f:a6:9d:ac:17:01:17:b3:ac:f6:96:7f:ea:2c:3a:14:c9:
         d2:cb:07:dd:6d:01:b9:c3:06:bb:74:cc:69:20:5c:ec:5f:05:
         86:5a:fc:c4:ba:48:94:e8:ff:ba:1e:ac:31:39:1a:d8:43:0c:
         fa:98:9f:43:2e:28:5b:09:c6:a3:64:7d:ef:ba:b5:c9:52:da:
         37:59:df:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:02:24 2026 by rpki-client