Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5817fac6-b9ae-36a6-8ada-c38fb286b084.roa
File:                     5817fac6-b9ae-36a6-8ada-c38fb286b084.roa (raw, json)
Hash identifier:          c48Ubf34bVoAAgePXnRrHbYfSxHR5xKt5F6f+wDbr2s=
Subject key identifier:   2C:93:B4:28:C3:F8:2F:8F:E5:6D:84:0F:C1:B6:F9:01:83:58:72:F7
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584EA93C42E26FFD732A78767FE0
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5817fac6-b9ae-36a6-8ada-c38fb286b084.roa
Signing time:             Wed 29 Jul 2026 15:41:33 +0000
ROA not before:           Wed 29 Jul 2026 15:41:33 +0000
ROA not after:            Tue 20 Oct 2026 14:43:13 +0000
asID:                     140185
IP address blocks:        16.216.32.0/24 maxlen: 24
                          16.216.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a9:3c:42:e2:6f:fd:73:2a:78:76:7f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jul 29 15:41:33 2026 GMT
            Not After : Oct 20 14:43:13 2026 GMT
        Subject: CN=50218588-80cb-4410-8585-2be130a5446c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0e:54:0e:68:3c:5d:14:f5:95:85:a1:f3:43:
                    1a:f0:3c:39:8b:d2:9d:4d:8e:99:ac:49:21:12:a5:
                    10:17:32:a9:05:62:57:8e:ce:e6:4f:97:0a:b7:f0:
                    02:25:1a:ca:82:5b:35:b5:53:95:5b:74:bf:f7:dc:
                    d7:69:46:19:db:e5:d4:a5:82:dd:df:78:7a:a6:7a:
                    b6:70:34:f3:8f:16:f9:fb:ac:55:f8:2a:33:f0:f6:
                    c2:22:13:26:a2:5e:25:ef:25:65:33:e7:88:57:1c:
                    39:ef:19:b4:92:04:15:5b:bd:3c:c0:54:df:00:01:
                    ca:9b:f8:41:f4:46:f2:d2:c0:36:c2:84:78:27:77:
                    02:5b:e2:61:5f:4f:d9:ff:0d:1d:48:4d:ae:92:d9:
                    ad:61:4d:55:73:92:04:4f:4e:0b:e5:d1:5e:50:2e:
                    fe:df:85:84:27:d1:b8:7a:27:f3:28:35:b4:88:f1:
                    06:67:ab:22:50:8d:0d:da:d2:bd:ce:d3:45:62:a5:
                    3c:dc:4a:d6:de:8e:15:12:e4:50:28:a5:54:ea:af:
                    16:91:07:5b:42:85:bd:7f:f0:0e:37:6b:6f:2d:df:
                    14:18:9e:72:0a:91:cb:31:85:b5:da:2d:42:37:f8:
                    f5:5f:8d:87:d3:43:76:95:56:99:b3:08:3c:41:62:
                    aa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:93:B4:28:C3:F8:2F:8F:E5:6D:84:0F:C1:B6:F9:01:83:58:72:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5817fac6-b9ae-36a6-8ada-c38fb286b084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.216.32.0/24
                  16.216.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:dd:00:c0:6c:1c:1f:15:0c:2f:2f:c5:29:c0:0f:e1:b5:8d:
         ad:d5:cd:15:5d:7e:c6:3d:38:92:7f:2e:95:4c:f2:74:fc:22:
         20:1a:e6:eb:c0:10:fd:c2:43:67:19:3c:be:95:4e:b1:bd:02:
         75:de:2f:70:13:5a:ac:ad:99:59:0e:6f:1f:ee:4b:4d:3b:57:
         a1:0d:3b:e6:a8:f1:fb:21:d3:c2:fc:38:ae:76:d9:a3:6c:a4:
         50:b2:a9:aa:cb:69:25:7c:95:cb:4f:fa:a7:9d:ff:0c:49:e8:
         fe:99:91:bb:60:d5:a6:d5:09:bc:ba:46:3c:1b:b5:80:60:75:
         44:3a:b7:1e:aa:cd:67:b1:20:f9:57:a6:85:6c:60:8c:cd:f9:
         e6:62:d4:83:71:94:e3:b3:65:67:04:93:c4:1c:cf:ef:e5:ea:
         f1:a6:cd:9b:e5:dc:fb:dc:27:d8:6f:b9:d4:ac:ac:0d:23:57:
         01:64:60:b5:51:0e:19:47:50:45:f9:2d:92:bd:c7:39:57:5c:
         b2:b9:b8:3b:3f:4d:30:5c:28:6f:d7:e5:f9:a3:f4:d1:b0:c6:
         9f:3c:a3:c9:64:87:0b:5d:21:06:40:a4:40:47:d4:4f:d2:38:
         75:93:d6:cf:5b:3a:bc:79:77:5b:a4:7b:a3:43:25:3a:71:64:
         6b:29:2a:b4
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6pPELib/1zKnh2f+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk
YmZhMB4XDTI2MDcyOTE1NDEzM1oXDTI2MTAyMDE0NDMxM1owLzEtMCsGA1UEAxMk
NTAyMTg1ODgtODBjYi00NDEwLTg1ODUtMmJlMTMwYTU0NDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A5UDmg8XRT1lYWh80Ma8Dw5i9KdTY6ZrEkh
EqUQFzKpBWJXjs7mT5cKt/ACJRrKgls1tVOVW3S/99zXaUYZ2+XUpYLd33h6pnq2
cDTzjxb5+6xV+Coz8PbCIhMmol4l7yVlM+eIVxw57xm0kgQVW708wFTfAAHKm/hB
9Eby0sA2woR4J3cCW+JhX0/Z/w0dSE2uktmtYU1Vc5IET04L5dFeUC7+34WEJ9G4
eifzKDW0iPEGZ6siUI0N2tK9ztNFYqU83ErW3o4VEuRQKKVU6q8WkQdbQoW9f/AO
N2tvLd8UGJ5yCpHLMYW12i1CN/j1X42H00N2lVaZswg8QWKq5wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCyTtCjD+C+P5W2ED8G2+QGDWHL3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj
MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNTgxN2ZhYzYtYjlhZS0z
NmE2LThhZGEtYzM4ZmIyODZiMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2
NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj
ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl
YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAENggAwQA
ENhmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACHdAMBsHB8VDC8vxSnAD+G1ja3VzRVdfsY9OJJ/LpVM8nT8
IiAa5uvAEP3CQ2cZPL6VTrG9AnXeL3ATWqytmVkObx/uS007V6ENO+ao8fsh08L8
OK522aNspFCyqarLaSV8lctP+qed/wxJ6P6Zkbtg1abVCby6RjwbtYBgdUQ6tx6q
zWexIPlXpoVsYIzN+eZi1INxlOOzZWcEk8Qcz+/l6vGmzZvl3PvcJ9hvudSsrA0j
VwFkYLVRDhlHUEX5LZK9xzlXXLK5uDs/TTBcKG/X5fmj9NGwxp88o8lkhwtdIQZA
pEBH1E/SOHWT1s9bOrx5d1uke6NDJTpxZGspKrQ=
-----END CERTIFICATE-----
Generated at Thu Jul 30 06:06:10 2026 by rpki-client