Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/d18712d7-1c3b-34d4-9c05-3acd863f04f1.roa
File:                     d18712d7-1c3b-34d4-9c05-3acd863f04f1.roa (raw, json)
Hash identifier:          DXhxaXJy+Y2ISG59omOx/inx3qd00i9YDxU1B9aJ7Tk=
Subject key identifier:   C9:F5:E4:B1:EB:88:33:24:24:EF:1D:49:EC:40:44:F8:6C:2B:25:BB
Certificate issuer:       /CN=fff22b91-ff6b-40b0-b626-033566818ca6
Certificate serial:       010D0C9F4328584F20F7BE13E01D2E0111A08440
Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/d18712d7-1c3b-34d4-9c05-3acd863f04f1.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        216.59.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:be:13:e0:1d:2e:01:11:a0:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=6f46af6d-5f56-4054-bc84-3caafc44d4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:9d:88:73:4a:6e:c2:c7:82:41:30:0e:35:83:
                    ad:14:93:62:f9:97:1e:2f:d3:7d:3a:e2:f0:43:b2:
                    29:72:e9:76:0a:93:b6:e9:5c:3c:ef:b2:0b:f2:6c:
                    dc:45:c3:ae:d4:ce:14:f2:76:3e:43:8a:85:3b:1e:
                    17:ec:e7:31:80:91:93:26:b4:00:32:5e:b6:53:4e:
                    21:a6:a6:32:12:53:a8:b5:3b:46:7a:a3:f0:e4:bc:
                    34:c3:90:9e:68:73:b3:9c:86:64:97:7e:c0:0e:01:
                    7d:7f:b5:eb:b6:de:75:6c:23:95:06:6e:e3:4f:14:
                    20:06:f6:db:c0:13:ac:01:45:18:9e:ee:49:c3:04:
                    8a:2a:a8:21:74:ac:91:02:1e:01:dc:5c:d4:0e:5e:
                    6f:9e:13:04:7e:72:a9:ac:e5:e3:a5:18:e6:ab:3e:
                    4e:1b:06:36:ff:17:b1:93:6a:2f:0d:01:2b:42:aa:
                    69:38:8c:b0:3d:47:60:ee:67:26:25:8f:84:2b:f3:
                    16:48:ad:20:ee:31:f2:11:87:fd:93:76:3a:22:8f:
                    5e:d1:07:94:21:e8:42:b5:9e:6c:0f:cf:f2:f2:e6:
                    d4:cf:87:19:57:2f:47:45:73:3c:a9:ff:f4:8d:c7:
                    fc:1e:22:e9:c8:69:f6:9c:3e:aa:1c:06:52:b2:a2:
                    26:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F5:E4:B1:EB:88:33:24:24:EF:1D:49:EC:40:44:F8:6C:2B:25:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/d18712d7-1c3b-34d4-9c05-3acd863f04f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl

            X509v3 Authority Key Identifier:
                keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:cc:2e:93:c4:7d:b8:d5:8c:66:46:a9:a3:8a:90:c5:90:0b:
         51:ae:9b:1f:67:41:f1:19:39:b0:fd:73:cc:45:b4:19:53:59:
         4a:d4:25:bb:36:eb:ef:43:91:89:44:c1:91:b6:43:23:fc:a5:
         1b:95:f9:25:3a:57:d2:2b:1e:18:4e:96:16:e3:80:73:33:a3:
         0c:c7:da:e7:2d:97:5d:1b:90:26:d7:63:a4:fe:06:85:05:40:
         c6:ca:0a:6b:15:f1:76:2d:22:dc:ee:e3:79:b3:e5:f5:39:18:
         9b:dc:22:68:29:63:f7:ba:30:53:77:7c:5c:ea:06:05:e9:57:
         b0:6e:14:c6:9f:72:17:5c:fa:e8:8c:84:cf:60:07:b0:6a:1e:
         9c:51:b6:d2:fe:3c:e9:f4:36:0c:f4:ee:e5:79:10:7e:3e:a8:
         5e:24:0b:eb:df:9f:c4:af:4d:89:c0:5b:83:29:b1:59:0e:2e:
         21:11:99:2e:e8:87:e2:47:7b:b0:22:26:88:c5:35:6d:bc:9e:
         17:c4:20:3d:af:fa:a2:20:1e:d6:61:29:ff:d4:7c:f4:9a:b2:
         81:71:84:40:02:b4:80:09:8d:e2:72:b8:04:4a:75:b6:26:d0:
         36:6c:67:c8:29:be:30:e4:63:fb:a3:41:de:bc:fd:98:3f:f6:
         82:d6:5a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 16:09:54 2026 by rpki-client