Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/98e34c05-e0f4-3b9f-8bb3-caeb91d81482.roa
File:                     98e34c05-e0f4-3b9f-8bb3-caeb91d81482.roa (raw, json)
Hash identifier:          xvVWYEc7F+bdPxzKoEGld2MFILkxAN3h1lIuOn3XA0A=
Subject key identifier:   05:0C:D6:93:6F:D1:10:14:E2:7A:84:E5:03:5F:AF:1E:B4:89:45:55
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F054C6D3FE3E4493F8431AE80
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/98e34c05-e0f4-3b9f-8bb3-caeb91d81482.roa
Signing time:             Mon 31 Aug 2026 15:08:29 +0000
ROA not before:           Mon 31 Aug 2026 15:08:29 +0000
ROA not after:            Sun 29 Nov 2026 16:08:29 +0000
asID:                     13335
IP address blocks:        16.5.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:4c:6d:3f:e3:e4:49:3f:84:31:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Aug 31 15:08:29 2026 GMT
            Not After : Nov 29 16:08:29 2026 GMT
        Subject: CN=6658754c-2e6c-422c-b861-dedbc58ddfe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:ff:2e:cb:91:16:35:e7:7b:6a:ea:2c:fd:
                    01:f2:3c:5d:1b:6a:5a:cb:a6:08:8a:08:00:dc:07:
                    fb:f1:46:cc:a1:6f:45:6d:7a:49:dd:c5:15:48:86:
                    7b:af:b9:0e:e0:51:df:a9:85:c3:fb:4c:b9:da:03:
                    8a:12:05:98:e7:1f:d8:73:a8:82:68:e0:85:47:f5:
                    4c:ba:4a:46:5c:0c:d6:1b:36:ad:6e:97:f0:6c:a7:
                    33:20:be:f1:63:b9:d5:89:8f:5e:59:46:2b:72:1a:
                    47:0a:ba:9e:50:32:c9:a4:06:ab:c8:c1:3c:20:b9:
                    74:ff:54:84:89:0e:f7:a1:a0:12:38:a7:2c:fe:0c:
                    00:26:c0:d6:e7:57:84:05:5e:2c:6a:7b:b9:c5:2d:
                    98:46:2b:ce:cd:74:6a:03:f4:88:71:91:0d:3e:6b:
                    05:26:6d:24:34:2d:86:b4:74:5e:1d:fa:02:15:c4:
                    a6:73:1d:78:13:aa:41:b3:9d:76:e0:15:5e:f0:77:
                    68:0c:c7:44:18:0d:55:de:d2:ae:7a:4b:38:75:76:
                    cb:ef:42:4a:50:ce:65:1d:40:a1:34:1b:fe:d8:51:
                    bc:fd:db:a7:d0:95:c4:fb:91:c8:42:5b:0e:ed:ca:
                    e6:5b:f4:88:d8:dc:3b:7e:91:00:15:2f:77:58:51:
                    5d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0C:D6:93:6F:D1:10:14:E2:7A:84:E5:03:5F:AF:1E:B4:89:45:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/98e34c05-e0f4-3b9f-8bb3-caeb91d81482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.5.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:19:73:26:28:e4:c3:81:9a:e0:e6:26:45:17:ec:0f:f7:20:
         a3:e7:75:2e:36:03:ca:bd:68:51:66:92:1d:1d:cb:fd:8f:3b:
         85:45:7f:99:e8:ce:50:c5:ad:f0:2a:52:3c:0e:15:0f:55:82:
         8c:51:e6:42:c5:2c:e6:55:7b:80:59:65:95:de:76:5c:40:91:
         00:e8:c4:74:a6:be:9c:48:d6:bb:b5:57:c9:19:24:23:65:4e:
         78:f0:0f:e0:29:a6:17:4d:74:4e:cc:9f:ec:ab:c6:b6:7f:2a:
         63:c1:eb:7a:18:93:50:55:ba:9d:a9:e5:42:97:9a:b5:cc:0e:
         4b:fa:02:b3:11:b6:f9:c7:49:37:a2:f3:f3:31:4f:aa:8f:d6:
         4d:16:47:2b:96:25:8d:05:fa:38:11:4d:3d:32:16:ab:ca:43:
         86:21:0d:6c:76:c9:3f:4d:e9:9e:a2:46:36:68:b9:b2:7f:ed:
         48:17:06:e2:6c:3f:5d:fd:96:f5:23:92:7f:09:97:97:26:da:
         9e:45:b6:9a:2e:85:0f:a3:b0:c5:d8:df:07:28:6d:d5:31:6c:
         9c:9e:c1:1e:ac:0a:88:bb:a8:88:88:d7:ca:24:b3:18:36:af:
         d5:90:bc:77:d7:48:62:ee:74:d1:1a:63:d9:ab:94:cf:f6:01:
         a1:7e:96:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:05 2026 by rpki-client