Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/37455c02-1b1b-3930-8a3d-68e79db901c0.roa
File:                     37455c02-1b1b-3930-8a3d-68e79db901c0.roa (raw, json)
Hash identifier:          LhcVfh1Et0I8gkPjOye4th5lHPwZC2W8d/j8GPE3ytc=
Subject key identifier:   34:C6:09:EB:37:9C:E4:8A:E8:C2:13:6E:E3:79:95:DE:7F:FD:15:A3
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F1BB44BECC7D8A4305B8C4640
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/37455c02-1b1b-3930-8a3d-68e79db901c0.roa
Signing time:             Tue 08 Sep 2026 15:45:33 +0000
ROA not before:           Tue 08 Sep 2026 15:45:33 +0000
ROA not after:            Tue 10 Nov 2026 21:09:51 +0000
asID:                     11404
IP address blocks:        16.220.0.0/18 maxlen: 24
                          16.220.64.0/18 maxlen: 24
                          16.220.128.0/22 maxlen: 24
                          16.220.132.0/22 maxlen: 24
                          16.220.136.0/22 maxlen: 24
                          16.220.140.0/22 maxlen: 24
                          16.220.144.0/21 maxlen: 24
                          16.220.160.0/19 maxlen: 24
                          16.220.192.0/18 maxlen: 24
                          16.221.0.0/20 maxlen: 24
                          16.221.16.0/20 maxlen: 24
                          16.224.0.0/16 maxlen: 24
                          16.225.0.0/17 maxlen: 24
                          16.225.128.0/19 maxlen: 24
                          16.225.160.0/19 maxlen: 24
                          16.225.192.0/18 maxlen: 24
                          16.226.0.0/17 maxlen: 24
                          16.226.128.0/17 maxlen: 24
                          16.227.0.0/17 maxlen: 24
                          16.227.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:b4:4b:ec:c7:d8:a4:30:5b:8c:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Sep  8 15:45:33 2026 GMT
            Not After : Nov 10 21:09:51 2026 GMT
        Subject: CN=91ec9801-8d33-46db-9c67-e5bf19d333fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:15:36:a1:d6:8e:c4:43:1d:22:46:70:72:b8:
                    d0:7e:88:25:b7:2c:ec:26:37:16:d9:58:39:e6:95:
                    3f:83:39:af:39:6d:8e:33:df:82:d4:48:c4:b0:44:
                    ca:53:1e:9c:e7:a3:ad:b8:52:aa:8b:0a:c2:4f:24:
                    ca:2e:c1:1f:67:fb:4a:83:0f:ca:3d:d7:ab:b6:73:
                    b7:97:09:e8:57:1f:11:ff:a5:19:67:10:bc:8f:dc:
                    f1:ea:62:fd:3c:dc:d2:11:e7:74:a5:56:d9:d9:68:
                    1b:23:4a:c6:70:ef:1d:1d:35:96:99:f7:d4:67:f7:
                    3a:53:9b:cc:04:e3:93:5f:e9:0d:87:10:01:46:93:
                    da:e4:c2:11:a4:92:bd:34:8f:9c:0f:36:a3:e5:12:
                    f4:40:b4:c3:cd:6c:7b:25:41:73:5a:af:2a:32:bb:
                    51:f1:01:64:f8:84:d0:c6:fe:6f:b5:0d:b7:ef:e7:
                    0a:6f:57:c2:a2:df:5f:ea:7a:4d:f4:22:cd:f7:07:
                    7c:01:0f:4a:89:18:40:71:49:bc:31:38:b2:6a:a8:
                    33:e3:26:0e:54:16:34:6b:1a:73:d7:70:fe:0e:45:
                    36:3c:e0:8f:4f:14:71:b3:ed:58:9a:4b:d5:e0:9e:
                    1c:d0:78:9e:c5:6a:fe:f2:73:9f:bd:3e:71:e0:e1:
                    53:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C6:09:EB:37:9C:E4:8A:E8:C2:13:6E:E3:79:95:DE:7F:FD:15:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/37455c02-1b1b-3930-8a3d-68e79db901c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.220.0.0-16.220.151.255
                  16.220.160.0-16.221.31.255
                  16.224.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:45:f1:c7:e1:8b:16:d7:5e:86:47:66:6d:8f:e4:5f:63:64:
         61:af:3f:44:71:24:09:8e:09:88:71:6c:b9:35:a9:42:f0:46:
         d2:77:9d:fe:0a:6e:89:25:f8:e4:29:aa:f4:98:a7:ee:72:98:
         11:a5:09:64:44:62:33:4b:58:d2:a0:45:3f:e1:f2:55:9c:7e:
         89:24:74:d3:ff:19:5b:4c:d7:0d:d3:0c:8f:84:0f:04:95:e4:
         1f:67:8f:9c:e5:97:ad:0d:a7:74:f4:d1:8d:46:30:63:29:5d:
         a5:f7:3e:ca:38:83:b1:79:66:81:7b:b3:95:0c:1c:76:55:54:
         19:c8:b4:1e:d9:a1:ab:99:7a:03:f3:1a:b4:1f:1a:7b:25:5b:
         94:98:0b:4f:65:77:26:6e:b2:59:39:39:d0:1a:cd:0b:e9:88:
         6a:22:03:3e:9d:92:32:96:31:57:ff:64:00:33:d3:b6:78:0f:
         57:49:6e:ab:83:43:88:23:95:f4:bf:6c:be:17:ea:8d:40:e8:
         cf:3c:7c:ef:04:42:f1:84:03:b9:78:43:65:25:b4:fe:0c:a1:
         42:c8:9f:0a:ad:c6:47:be:26:6f:ed:ef:c4:5a:61:5c:ef:40:
         46:d2:82:20:21:2a:3e:47:e7:dc:60:01:99:7a:f0:07:8d:24:
         dc:c9:6b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 07:04:47 2026 by rpki-client