Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/2cbe554b-29d8-3146-8353-6cf9c38631b9.roa
File:                     2cbe554b-29d8-3146-8353-6cf9c38631b9.roa (raw, json)
Hash identifier:          dFAcqxG0Xt/U9jLAB1FvN5GVXIp/VByzXlP/7Uki+5w=
Subject key identifier:   2F:43:BC:9D:88:D2:0D:FB:FA:E7:1D:72:56:C2:FD:62:6B:B3:19:75
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E85C6945CE7151E5EC8255780
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/2cbe554b-29d8-3146-8353-6cf9c38631b9.roa
Signing time:             Thu 16 Jul 2026 22:51:08 +0000
ROA not before:           Thu 16 Jul 2026 22:51:08 +0000
ROA not after:            Mon 14 Sep 2026 16:15:15 +0000
asID:                     215152
IP address blocks:        16.5.88.0/24 maxlen: 24
                          16.5.105.0/24 maxlen: 24
                          16.5.107.0/24 maxlen: 24
                          16.5.124.0/24 maxlen: 24
                          16.5.136.0/24 maxlen: 24
                          16.5.188.0/24 maxlen: 24
                          16.5.189.0/24 maxlen: 24
                          16.5.204.0/24 maxlen: 24
                          16.5.209.0/24 maxlen: 24
                          16.5.215.0/24 maxlen: 24
                          16.5.225.0/24 maxlen: 24
                          16.5.254.0/24 maxlen: 24
                          16.217.22.0/24 maxlen: 24
                          16.217.28.0/24 maxlen: 24
                          16.217.31.0/24 maxlen: 24
                          16.217.35.0/24 maxlen: 24
                          16.217.51.0/24 maxlen: 24
                          16.217.55.0/24 maxlen: 24
                          16.217.72.0/24 maxlen: 24
                          16.217.74.0/24 maxlen: 24
                          16.217.78.0/24 maxlen: 24
                          16.217.82.0/24 maxlen: 24
                          16.217.176.0/24 maxlen: 24
                          16.217.179.0/24 maxlen: 24
                          16.217.183.0/24 maxlen: 24
                          16.217.185.0/24 maxlen: 24
                          16.217.187.0/24 maxlen: 24
                          16.217.190.0/24 maxlen: 24
                          16.217.200.0/24 maxlen: 24
                          16.217.210.0/24 maxlen: 24
                          16.217.212.0/24 maxlen: 24
                          16.217.215.0/24 maxlen: 24
                          16.217.226.0/24 maxlen: 24
                          16.217.227.0/24 maxlen: 24
                          16.217.234.0/24 maxlen: 24
                          16.217.235.0/24 maxlen: 24
                          16.217.237.0/24 maxlen: 24
                          16.217.244.0/24 maxlen: 24
                          16.217.245.0/24 maxlen: 24
                          16.217.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:c6:94:5c:e7:15:1e:5e:c8:25:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jul 16 22:51:08 2026 GMT
            Not After : Sep 14 16:15:15 2026 GMT
        Subject: CN=555ae628-8134-46fe-a352-eb8c8866b2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:57:e5:ad:e0:c8:77:40:10:39:91:99:bb:88:
                    d0:ad:ac:72:15:97:7f:e4:e0:40:ba:7a:ff:f5:4c:
                    3d:77:dd:68:94:c6:24:e8:26:26:27:9f:03:2b:37:
                    96:2d:bd:f1:39:f6:98:b3:27:2c:9b:51:20:1d:a1:
                    8b:2b:f6:13:03:ee:9c:93:c2:9b:37:8c:52:08:19:
                    c0:21:5b:b3:e3:d2:e7:90:c3:14:4f:98:0c:ef:34:
                    b0:e0:97:aa:8e:fa:18:ce:a5:0e:51:32:c7:0d:9a:
                    15:49:be:20:25:0a:6c:4f:dd:46:25:27:25:d3:14:
                    ec:04:1a:1d:3a:40:9e:37:07:ee:86:19:c2:c4:fb:
                    ed:15:35:72:9e:21:f5:e8:09:d1:be:b5:04:0b:f6:
                    08:1c:00:e0:eb:03:e6:d6:0d:0c:99:48:64:cb:93:
                    1f:54:dd:65:4a:89:f4:0e:33:ff:87:d8:3a:71:0e:
                    67:c2:ef:76:8e:57:89:02:61:8a:bb:f3:61:82:31:
                    35:a8:03:a3:14:cd:f0:dc:fe:d7:cc:e9:3c:fc:39:
                    61:d1:31:ef:31:12:7a:a5:a4:03:f3:0e:72:09:2d:
                    91:fa:9b:48:23:32:57:91:fe:57:55:da:3c:e0:0d:
                    fb:93:79:51:e8:bc:7d:d1:92:ca:fb:95:4f:e5:b8:
                    f5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:43:BC:9D:88:D2:0D:FB:FA:E7:1D:72:56:C2:FD:62:6B:B3:19:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/2cbe554b-29d8-3146-8353-6cf9c38631b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.5.88.0/24
                  16.5.105.0/24
                  16.5.107.0/24
                  16.5.124.0/24
                  16.5.136.0/24
                  16.5.188.0/23
                  16.5.204.0/24
                  16.5.209.0/24
                  16.5.215.0/24
                  16.5.225.0/24
                  16.5.254.0/24
                  16.217.22.0/24
                  16.217.28.0/24
                  16.217.31.0/24
                  16.217.35.0/24
                  16.217.51.0/24
                  16.217.55.0/24
                  16.217.72.0/24
                  16.217.74.0/24
                  16.217.78.0/24
                  16.217.82.0/24
                  16.217.176.0/24
                  16.217.179.0/24
                  16.217.183.0/24
                  16.217.185.0/24
                  16.217.187.0/24
                  16.217.190.0/24
                  16.217.200.0/24
                  16.217.210.0/24
                  16.217.212.0/24
                  16.217.215.0/24
                  16.217.226.0/23
                  16.217.234.0/23
                  16.217.237.0/24
                  16.217.244.0/23
                  16.217.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ad:d5:ab:b6:b4:71:bc:bb:5c:be:7f:ec:49:1c:d2:90:c2:
         a4:a1:45:b7:4f:15:16:76:70:48:3f:b4:9e:b5:d7:fd:a3:9a:
         b5:dd:b3:c0:b2:15:48:9c:f4:48:c7:0e:87:17:01:d5:a5:47:
         13:fd:48:c2:6c:37:fe:6e:55:ea:eb:c7:6d:e2:bd:8f:23:a5:
         73:43:e2:55:c6:ab:a5:21:db:69:f3:4b:07:c2:e4:e0:3e:b7:
         12:4c:0b:c2:41:76:f7:99:db:95:b5:2e:84:cf:4b:2e:5f:de:
         20:ef:35:fd:e0:df:48:ac:d0:cb:3a:ef:b5:82:11:d4:9d:33:
         cb:38:fa:43:76:a5:e7:7c:c7:6e:3f:7c:af:db:2c:28:85:54:
         a8:08:9c:ee:ff:82:fb:e7:e9:52:97:02:d3:2d:c7:b5:2a:36:
         fe:49:c4:51:8a:05:b4:0a:ec:cc:fb:36:95:f7:ee:ed:bb:ce:
         e8:44:87:47:02:bd:d9:c1:b5:0d:9c:32:a7:03:46:1c:52:eb:
         2d:81:44:bb:93:29:e0:83:00:d4:aa:f5:de:ba:a1:39:d2:08:
         b0:91:fb:0c:ef:a3:22:83:fa:d0:cf:7b:66:c4:97:aa:1e:48:
         56:7a:3c:59:de:93:0a:f2:2d:c5:64:04:fe:f3:80:ba:7f:88:
         ee:8f:c4:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:09:29 2026 by rpki-client