Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4781ac7e-cff3-35ab-aa8f-0015a825fdb2.roa
File:                     4781ac7e-cff3-35ab-aa8f-0015a825fdb2.roa (raw, json)
Hash identifier:          ZL71Ob+y8ZRI0alURP3T7r38vi2pE0eJDApgLZM39cA=
Subject key identifier:   7A:F8:1C:F2:B1:38:23:C2:AC:A3:B7:8C:6A:80:0E:32:27:4C:3E:CB
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E0738D0A0C73716D902792C80
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4781ac7e-cff3-35ab-aa8f-0015a825fdb2.roa
Signing time:             Mon 01 Jun 2026 14:53:39 +0000
ROA not before:           Mon 01 Jun 2026 14:53:39 +0000
ROA not after:            Sun 30 Aug 2026 14:53:39 +0000
asID:                     207343
IP address blocks:        16.216.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:38:d0:a0:c7:37:16:d9:02:79:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jun  1 14:53:39 2026 GMT
            Not After : Aug 30 14:53:39 2026 GMT
        Subject: CN=7c129e99-f0f3-4833-9830-8ccdc378f3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:91:89:19:38:f9:5f:7c:a5:ca:cf:22:bd:cb:
                    23:ec:41:f2:0b:28:26:c6:a7:a6:25:ea:3b:e6:93:
                    e3:01:9c:3b:3b:b9:99:31:73:ae:1e:52:06:5a:c5:
                    4e:f6:2e:af:5d:f7:8b:ca:77:4b:ed:ea:dd:67:81:
                    7d:96:37:fe:9b:d2:58:40:57:74:c6:82:22:4a:65:
                    52:8d:46:91:19:87:0c:8d:33:ab:d5:46:77:90:ba:
                    69:a5:9b:17:79:d1:cf:9c:a9:30:5b:a6:57:43:ae:
                    37:fa:0e:71:f0:67:3f:9b:a7:5c:b9:cb:81:68:4f:
                    4f:c8:25:d0:33:82:98:75:6c:4e:b1:2a:89:b6:24:
                    b9:4f:e1:b4:24:3e:3f:25:78:53:d2:83:bb:12:51:
                    35:ab:69:1d:d0:c2:27:9f:88:bd:c5:51:22:33:83:
                    ac:f5:1f:27:0e:55:ba:e4:0d:7f:61:45:1f:40:8f:
                    6e:7e:9d:0d:85:e0:de:d0:1d:9b:2b:d0:c4:97:99:
                    82:26:a4:3c:13:d9:e2:20:32:20:bf:8e:4c:e0:db:
                    83:ba:cc:b5:b3:4a:70:65:14:1e:98:f2:26:af:6c:
                    6b:13:75:e1:d4:84:41:6a:c3:dc:d5:2b:7a:33:9f:
                    4f:3a:36:1c:49:f2:ea:8a:2b:b8:b6:cf:9a:43:2c:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F8:1C:F2:B1:38:23:C2:AC:A3:B7:8C:6A:80:0E:32:27:4C:3E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4781ac7e-cff3-35ab-aa8f-0015a825fdb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.216.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:1d:f6:7d:45:bc:f1:75:1a:6f:c7:46:a5:35:4a:72:45:cd:
         e4:0d:03:2e:99:38:a1:9a:c5:8e:99:1b:57:2c:10:f0:f2:41:
         aa:d5:20:22:b1:3e:59:72:16:da:37:00:7e:98:e4:03:4f:e6:
         8e:d9:63:01:50:7c:5e:a6:99:f3:ae:1d:fe:6f:e9:36:0c:2f:
         c6:8d:b5:8b:1a:a6:4f:43:32:87:d4:de:50:fa:5f:9a:dc:07:
         6d:a0:9b:b1:0d:e0:9b:c8:08:ae:b8:f2:36:e7:33:46:64:15:
         83:9a:2b:de:31:ba:08:9a:e2:fb:3c:97:bd:cd:a3:4c:06:4e:
         72:bc:73:45:5c:b9:9b:a1:e5:53:26:02:84:3d:c9:73:f5:24:
         d5:c6:6a:27:28:34:80:1b:ab:4d:a5:60:d8:94:49:c8:79:d1:
         13:cc:60:fa:93:b5:bb:86:48:dc:60:ed:97:16:92:38:eb:58:
         10:52:0f:45:a1:c0:c1:6c:4f:8c:6b:0b:e2:80:87:c2:7f:c6:
         ae:49:d6:cb:c1:46:01:b3:e4:55:70:f4:ec:71:7c:20:59:10:
         9d:0d:31:d7:af:ea:81:f8:00:f6:0d:3d:c0:45:5a:dc:f6:23:
         ab:59:45:19:6b:a7:0a:71:6c:98:df:d7:40:af:a5:95:a9:0e:
         a7:1e:c0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:00:11 2026 by rpki-client