Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/c96c620b-bc50-3f60-a167-5552b8cc9d25.roa
File:                     c96c620b-bc50-3f60-a167-5552b8cc9d25.roa (raw, json)
Hash identifier:          f83BdQpZSAh0uI8ikEqL6MaThwZHq8HizFvpiD925Gs=
Subject key identifier:   F1:ED:AF:12:32:06:FE:0C:2A:31:34:FD:EF:D8:DB:54:35:79:9D:A6
Certificate issuer:       /CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d
Certificate serial:       010D0C9F4328584E6F3A3BA1D267064900A23900
Authority key identifier: 20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/c96c620b-bc50-3f60-a167-5552b8cc9d25.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     32121
IP address blocks:        142.152.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:3b:a1:d2:67:06:49:00:a2:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=033307da-2aa1-4d6b-bcbb-9addd8a7abff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8c:56:d6:b8:e3:12:eb:93:e7:22:a2:8e:b8:
                    4f:cf:03:4a:bf:91:63:b7:17:95:8c:be:72:24:93:
                    69:33:45:38:32:50:63:96:43:4c:3d:13:30:02:f4:
                    21:85:b3:23:5b:27:69:c7:db:67:b4:41:f5:8c:8b:
                    0f:f2:a5:56:ec:18:14:1b:83:98:f3:37:bb:76:a3:
                    93:94:08:1f:e5:98:4e:16:2d:55:6c:55:0e:76:a3:
                    ea:a7:26:c7:8f:86:38:57:87:ee:fe:8a:a0:f1:74:
                    eb:9d:a7:76:fc:2c:53:69:f1:4a:b7:e7:05:1d:42:
                    d7:7f:d5:32:e7:bb:76:31:55:96:69:db:5e:f7:cc:
                    6b:f1:f9:7b:54:3d:97:45:6a:9a:46:3d:14:fe:93:
                    45:48:c4:da:cc:78:3c:c0:b0:81:8e:11:17:7b:5e:
                    31:fe:7b:48:af:58:db:e8:e6:ae:85:a4:c5:9f:12:
                    4d:b1:12:75:c6:e9:80:a4:e8:bf:0f:0d:62:44:74:
                    5c:ec:b3:68:f5:13:58:e7:8d:d1:99:0d:76:74:e4:
                    84:f7:01:22:fa:e8:62:c6:58:81:08:4c:d9:69:38:
                    e1:d6:85:5f:c1:17:c3:9d:4b:14:3b:60:9d:32:5c:
                    2b:82:c5:25:90:6d:86:41:7c:ff:a1:d0:a7:41:91:
                    0d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:ED:AF:12:32:06:FE:0C:2A:31:34:FD:EF:D8:DB:54:35:79:9D:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/c96c620b-bc50-3f60-a167-5552b8cc9d25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl

            X509v3 Authority Key Identifier:
                keyid:20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.152.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e8:91:d3:56:41:aa:c9:78:d9:d8:c2:77:dc:69:84:36:a9:
         7f:2f:e1:ef:50:20:e4:8c:8a:70:4e:9f:28:56:e0:04:e3:62:
         81:78:b9:3c:2d:e5:dc:2b:3e:d8:55:c7:59:63:f0:bc:ed:60:
         63:57:46:35:f1:af:75:3f:06:9d:c5:85:7d:fa:d1:1a:58:e6:
         e2:d9:73:21:83:a0:01:c6:89:04:e1:57:78:c2:a8:46:53:ec:
         c6:c9:d6:84:9c:d8:03:90:14:dd:77:89:25:2e:23:ed:14:c8:
         9a:0d:81:96:df:73:13:b9:b4:fd:15:53:64:85:ad:90:a6:c8:
         d3:10:c9:41:60:e7:f5:32:08:99:51:1b:1c:aa:7d:d6:be:8a:
         5d:f4:d8:b3:9a:7b:39:4a:8d:52:2a:14:8c:77:93:8a:c2:79:
         43:aa:fd:6e:79:df:f7:62:f7:9b:81:66:9c:c9:ed:fb:29:a6:
         4b:b6:0a:74:14:e2:cd:e9:9f:79:f6:84:43:12:e8:61:c0:bd:
         1a:c9:b2:43:f2:46:c8:14:72:07:90:a5:79:3e:02:bd:f3:52:
         03:4e:b7:21:dd:7e:56:2f:ca:d0:34:d6:35:2e:8a:14:37:01:
         6f:b0:bd:af:93:2e:9b:78:40:58:f3:42:42:82:d8:38:e0:35:
         58:71:fd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:01:47 2026 by rpki-client