Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/977346bf-5e25-3bc4-a60b-1e4b568e18df.roa
File:                     977346bf-5e25-3bc4-a60b-1e4b568e18df.roa (raw, json)
Hash identifier:          h0RZDkWahGtvUVYgQmRXNs7oQLtM1hjWNro6LedN0PI=
Subject key identifier:   DD:59:1E:8A:C0:6B:57:32:25:5F:46:23:0F:6A:3F:25:0F:1E:02:50
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584ED0D36970EAE476DC06C33D00
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/977346bf-5e25-3bc4-a60b-1e4b568e18df.roa
Signing time:             Wed 12 Aug 2026 20:02:37 +0000
ROA not before:           Wed 12 Aug 2026 20:02:37 +0000
ROA not after:            Tue 10 Nov 2026 21:02:37 +0000
asID:                     219008
IP address blocks:        16.5.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:d3:69:70:ea:e4:76:dc:06:c3:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Aug 12 20:02:37 2026 GMT
            Not After : Nov 10 21:02:37 2026 GMT
        Subject: CN=6ae4589e-9fb7-406f-9ab3-ca93c1f3a35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3d:97:a2:27:cb:66:d7:0a:60:6d:b1:5e:c9:
                    a5:14:d1:61:ac:6b:c0:32:73:1e:6f:66:4b:5a:f1:
                    c2:1b:04:e8:5d:76:0e:63:3d:5c:2e:9c:78:a1:0a:
                    94:40:b5:4c:f3:17:bf:ab:ae:1e:de:0c:72:69:b8:
                    12:d6:a7:cf:c0:38:c6:4e:89:30:91:67:c2:50:e1:
                    bb:02:ae:7b:ce:67:57:c5:ca:b6:99:32:c9:eb:43:
                    c3:2f:4f:52:60:5a:3e:04:51:08:a4:84:1b:29:6c:
                    d8:33:b9:a7:13:a4:9b:bf:00:83:ff:c7:8e:ff:63:
                    97:dc:be:18:19:92:ab:2d:77:55:a9:d9:01:4c:5b:
                    20:b4:40:f7:81:ba:09:38:c4:a6:bb:6b:e2:cb:51:
                    a2:06:ab:ef:b9:c6:e4:db:94:3c:d6:f9:55:14:06:
                    ca:b1:e1:02:a3:99:94:33:28:f7:2b:b9:f0:83:fe:
                    68:be:80:02:d9:fa:ed:49:32:93:94:fa:6e:d0:f8:
                    46:38:01:f1:12:6c:f1:a6:74:2c:d7:d5:c4:96:b4:
                    49:6e:cf:93:7c:5b:ea:84:85:b2:0c:60:bc:8d:18:
                    0d:08:f2:6a:ac:a3:67:47:7e:cb:a3:ff:07:5c:d5:
                    6f:b8:b8:dd:2c:41:97:cc:8d:ba:02:15:8e:5f:a5:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:59:1E:8A:C0:6B:57:32:25:5F:46:23:0F:6A:3F:25:0F:1E:02:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/977346bf-5e25-3bc4-a60b-1e4b568e18df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.5.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:13:d2:64:26:05:fb:3b:77:b4:c9:3d:c7:24:41:6e:40:33:
         ac:dc:86:a3:c2:c8:9d:9e:63:1e:a7:a7:79:8f:52:04:a6:ed:
         4e:88:cf:c4:01:80:2f:18:d9:71:21:e1:2b:45:e8:34:91:1e:
         db:69:8d:ce:3a:c8:d8:d7:89:77:83:bd:4f:ec:b8:7b:93:92:
         3d:d9:a8:74:ce:6f:e7:d9:f0:c0:f4:4b:54:57:78:6b:be:bc:
         1a:7b:86:b2:65:f4:80:45:cf:dc:ea:b7:4b:d1:a4:9b:c9:a5:
         28:33:f8:be:df:b9:20:5a:52:10:c8:8d:a7:4e:03:88:7b:91:
         d7:33:b2:c9:68:13:31:1d:db:ad:fa:30:40:1b:a2:a9:67:3c:
         dd:00:e6:30:d9:72:72:0b:29:c0:1d:1a:60:85:7c:b7:01:fe:
         8a:f0:70:e5:06:0f:69:70:8e:13:bc:90:5b:99:60:84:ca:9b:
         a6:91:42:b3:48:77:5d:60:39:39:11:86:ff:77:16:a6:42:da:
         b4:99:cb:75:ec:71:c3:44:40:ee:e3:f0:c0:02:61:53:a9:46:
         2f:cf:25:0b:9e:14:f1:7e:c7:36:6f:a7:cb:f0:38:31:c9:55:
         59:29:46:b0:65:41:2f:7c:8a:4b:a1:a4:9e:74:d7:32:19:3c:
         44:49:44:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:35 2026 by rpki-client