Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/9ca2189a-2339-3b56-9df2-519f6e198c16.roa
File:                     9ca2189a-2339-3b56-9df2-519f6e198c16.roa (raw, json)
Hash identifier:          4Rd2aX66efseARLPypKHpCFotQinLOG4gPonQfxlVv8=
Subject key identifier:   83:59:C6:D3:20:D5:1E:13:93:77:BA:2C:86:DD:8B:93:4D:99:7F:62
Certificate issuer:       /CN=f16b1ed2-491f-4ed7-be99-59b20310c475
Certificate serial:       010D0C9F4328584EF2E767EC391DEAC6CEEE8640
Authority key identifier: 10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/9ca2189a-2339-3b56-9df2-519f6e198c16.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     22485
IP address blocks:        199.187.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:67:ec:39:1d:ea:c6:ce:ee:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b1ed2-491f-4ed7-be99-59b20310c475
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=1ef63544-deef-4afe-95c7-6a880a34e62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:21:6c:d3:7b:18:c4:d7:8e:08:6a:03:5d:
                    72:4a:08:75:f2:81:0b:75:fc:76:f6:8a:ba:04:38:
                    b0:23:2d:c3:0c:40:5b:e2:90:92:ac:5d:80:f3:c3:
                    ae:2a:9d:9a:56:e5:d7:7a:67:6c:76:83:54:7a:2d:
                    78:98:10:e7:5e:f3:91:33:31:85:2e:23:e4:11:29:
                    42:5d:db:79:de:6e:84:54:c0:2e:2f:56:eb:c9:f2:
                    9a:ab:65:c1:4f:b3:36:3d:48:8a:a7:9f:f3:e7:8b:
                    dc:18:ea:0c:6f:1f:d3:99:f2:91:a0:8d:26:01:2d:
                    d4:2a:47:c2:ec:57:2e:3c:2b:78:9e:be:12:31:43:
                    65:d6:e8:d9:71:72:d3:33:d5:50:11:5b:51:15:c5:
                    98:03:78:c1:3c:a5:80:e7:a1:bf:cb:b7:bb:11:1e:
                    58:98:bb:dc:5d:43:d5:06:ab:2e:11:9a:ed:6f:e7:
                    46:11:0d:6c:3f:46:f3:7d:72:21:56:6f:1d:eb:a5:
                    70:ef:fc:bc:84:f1:e5:af:40:b3:83:5f:6f:3d:bc:
                    ca:40:90:e2:e8:39:53:88:3f:d3:d0:cb:b2:c2:8a:
                    b0:79:89:13:bc:a8:fb:4a:73:be:5a:b6:7d:f3:0b:
                    49:a3:2c:8c:2b:9a:7a:cd:46:02:c5:41:b0:27:11:
                    23:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:59:C6:D3:20:D5:1E:13:93:77:BA:2C:86:DD:8B:93:4D:99:7F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/9ca2189a-2339-3b56-9df2-519f6e198c16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl

            X509v3 Authority Key Identifier:
                keyid:10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e6:dd:77:44:d5:71:d4:aa:22:8f:b4:67:69:0b:b1:19:a2:
         8f:57:e0:78:1f:29:8a:30:61:4e:08:62:18:ab:51:9d:4e:48:
         83:7b:62:91:b2:aa:90:c7:1b:8e:d8:41:d9:0b:ad:0e:77:97:
         78:39:ec:bc:81:b9:be:89:3b:54:b2:f8:de:92:fd:15:85:74:
         0e:2b:d1:f6:89:4a:25:dc:08:e0:ee:e1:c8:7d:09:0d:d1:b6:
         bf:62:e3:a0:7a:16:b1:54:7b:66:5f:f0:04:93:2b:b6:4a:2e:
         77:2a:02:86:00:cc:a7:68:d9:8c:a8:19:10:b5:89:85:e3:e9:
         23:a7:f7:8a:86:59:14:d1:eb:e1:63:80:b3:b0:17:4e:b7:be:
         a1:7d:54:2a:5e:91:7d:07:e5:5c:31:ad:35:93:d5:76:f6:56:
         e6:c6:d6:fa:7c:b7:80:ed:de:2a:96:c1:55:8b:56:28:c6:34:
         4d:cd:b9:ba:76:80:a2:83:2a:99:59:03:8d:b6:06:37:9d:8a:
         9f:49:fe:a6:ed:e8:04:28:bd:74:2b:36:41:86:28:95:cb:aa:
         a9:b5:a6:c8:b0:82:d5:18:1c:af:49:11:f8:c5:a7:32:98:3f:
         b8:2e:87:9f:fb:12:8d:a0:1b:54:a3:f7:ed:20:1c:cd:53:17:
         e5:23:98:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:19:01 2026 by rpki-client