Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7596a96a-ea38-363c-ae51-663f1cd497e4.roa
File:                     7596a96a-ea38-363c-ae51-663f1cd497e4.roa (raw, json)
Hash identifier:          TJgsad3oMepaJCLVdozQXQx+0tGpz9kJk09YQBoaaeY=
Subject key identifier:   41:5F:19:25:9E:F9:C8:50:B3:F2:A2:52:A1:08:81:3A:8F:B7:A2:BD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584E9A7FAE35A2466994F8C4AF80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7596a96a-ea38-363c-ae51-663f1cd497e4.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        16.98.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:ae:35:a2:46:69:94:f8:c4:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=7b121eef-2054-40c6-a143-f52fecc701bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:e1:b3:c9:31:fa:52:ee:73:b3:06:ab:ab:
                    9e:97:a3:85:a4:e4:d3:60:70:37:66:d5:30:4d:1d:
                    30:2a:79:05:5b:e1:a6:e2:62:fb:a8:89:23:79:a1:
                    48:bb:89:a3:ff:2c:d1:62:2d:c3:12:21:c3:8f:6e:
                    60:60:8f:ba:58:a7:3c:d0:d3:ff:2b:7c:2c:4e:4d:
                    60:25:5a:35:ad:ee:de:7d:6d:1c:5a:f7:93:d2:78:
                    57:46:32:c4:ab:6f:0b:58:bd:66:2f:4c:90:dc:1b:
                    e5:b6:f4:84:ed:a7:5e:90:25:45:20:2a:de:45:95:
                    2b:21:6d:2e:5d:49:d5:3f:62:d3:7f:a6:0b:02:55:
                    6c:87:f1:bc:94:f4:24:ec:9c:3a:cc:5b:49:aa:85:
                    9c:29:8c:6c:16:0a:68:fb:12:c7:88:aa:2d:d3:cd:
                    15:58:23:98:37:0d:d3:5e:1a:d8:1c:40:8b:b2:34:
                    fb:e5:42:e1:89:cd:18:12:5c:9c:28:32:9b:18:e6:
                    5f:cd:30:80:4f:b0:f8:14:7f:b1:16:80:14:64:66:
                    61:0b:17:d5:26:ba:79:1c:fb:3f:1a:fa:b3:f7:1b:
                    79:c9:5e:b2:7a:e6:ce:2a:61:fb:8d:c4:6d:5d:48:
                    53:aa:b1:30:15:90:2d:22:64:7e:62:7f:59:cc:13:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5F:19:25:9E:F9:C8:50:B3:F2:A2:52:A1:08:81:3A:8F:B7:A2:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/7596a96a-ea38-363c-ae51-663f1cd497e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.98.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:24:07:26:b1:cb:8f:d1:d6:90:f0:fe:12:63:8b:e8:c3:d2:
         b3:a4:a2:b9:5c:63:d3:90:9b:f1:ee:a0:8d:09:8d:c8:0d:55:
         d8:45:90:09:e9:7d:2b:65:5f:c3:ac:86:4e:48:a3:95:ec:ed:
         50:44:ac:e7:e9:b8:9e:b3:b0:53:17:e4:d6:da:5c:e5:f4:04:
         19:75:02:f7:00:72:9e:c6:22:47:eb:3b:1d:5b:f7:59:7a:74:
         b9:ba:ba:a9:27:f3:25:67:94:b0:b4:1d:28:96:e8:98:b3:45:
         9d:a1:43:73:94:4b:1f:a6:f8:37:60:1b:c9:95:b9:a5:51:b7:
         97:3e:2c:51:8a:d9:a0:36:5e:33:4d:15:e3:43:54:b9:c1:1b:
         83:71:cf:47:7b:e3:44:2c:d3:da:b7:f5:77:90:3c:57:02:de:
         b2:5c:5f:05:b6:d4:b8:69:6f:95:79:e0:43:96:db:6f:75:d3:
         ea:cf:a0:38:ca:42:32:26:0a:ad:77:ec:b5:c4:39:d4:43:f4:
         67:58:79:b1:6e:6c:3e:ef:97:15:52:a5:5b:63:d2:6b:80:09:
         6b:c0:36:19:d1:5a:2f:27:d3:fa:75:7b:14:80:ca:45:cd:f8:
         25:e7:62:13:97:fd:46:c4:cb:a7:bb:41:2d:88:2c:60:45:83:
         32:e7:00:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:10:07 2026 by rpki-client