Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/a7b53f6d-f75c-38aa-b245-52716ae64eed.roa
File:                     a7b53f6d-f75c-38aa-b245-52716ae64eed.roa (raw, json)
Hash identifier:          hMjzedelNs7S0DwqZ7zVsFN1AJYAmFuL0owG1Kl7Dbc=
Subject key identifier:   BF:B7:70:E6:F6:BE:C2:F3:97:2D:69:12:78:03:2D:91:6C:45:E0:22
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E796DF4E2BC98185B4BE32300
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/a7b53f6d-f75c-38aa-b245-52716ae64eed.roa
Signing time:             Sun 12 Jul 2026 12:42:52 +0000
ROA not before:           Sun 12 Jul 2026 12:42:52 +0000
ROA not after:            Sat 10 Oct 2026 11:18:36 +0000
asID:                     7029
IP address blocks:        16.216.216.0/24 maxlen: 24
                          16.217.100.0/22 maxlen: 24
                          16.217.104.0/22 maxlen: 24
                          16.217.108.0/22 maxlen: 24
                          16.217.112.0/22 maxlen: 24
                          16.217.217.0/24 maxlen: 24
                          136.162.148.0/22 maxlen: 24
                          136.162.152.0/22 maxlen: 24
                          136.162.156.0/22 maxlen: 24
                          136.162.160.0/22 maxlen: 24
                          136.162.240.0/22 maxlen: 24
                          136.162.244.0/22 maxlen: 24
                          136.162.252.0/22 maxlen: 24
                          161.114.64.0/22 maxlen: 24
                          161.114.140.0/22 maxlen: 24
                          161.114.144.0/22 maxlen: 24
                          161.114.148.0/22 maxlen: 24
                          161.114.152.0/22 maxlen: 24
                          161.114.156.0/22 maxlen: 24
                          161.114.160.0/22 maxlen: 24
                          161.114.208.0/22 maxlen: 24
                          192.26.60.0/22 maxlen: 24
                          192.26.64.0/24 maxlen: 24
                          192.26.65.0/24 maxlen: 24
                          192.26.66.0/24 maxlen: 24
                          192.26.67.0/24 maxlen: 24
                          192.26.76.0/22 maxlen: 24
                          192.26.80.0/23 maxlen: 24
                          192.48.153.0/24 maxlen: 24
                          192.82.162.0/23 maxlen: 24
                          192.82.176.0/21 maxlen: 24
                          192.132.112.0/24 maxlen: 24
                          192.132.113.0/24 maxlen: 24
                          192.132.114.0/24 maxlen: 24
                          192.132.115.0/24 maxlen: 24
                          192.132.116.0/24 maxlen: 24
                          192.132.117.0/24 maxlen: 24
                          192.132.118.0/24 maxlen: 24
                          192.132.119.0/24 maxlen: 24
                          192.132.120.0/24 maxlen: 24
                          192.132.121.0/24 maxlen: 24
                          192.132.122.0/24 maxlen: 24
                          192.132.123.0/24 maxlen: 24
                          192.132.124.0/22 maxlen: 24
                          198.29.82.0/24 maxlen: 24
                          198.29.83.0/24 maxlen: 24
                          198.29.84.0/24 maxlen: 24
                          198.29.85.0/24 maxlen: 24
                          198.29.86.0/23 maxlen: 24
                          198.29.88.0/24 maxlen: 24
                          198.29.89.0/24 maxlen: 24
                          198.29.90.0/24 maxlen: 24
                          198.29.91.0/24 maxlen: 24
                          198.29.92.0/24 maxlen: 24
                          198.29.93.0/24 maxlen: 24
                          198.29.94.0/24 maxlen: 24
                          198.29.95.0/24 maxlen: 24
                          199.74.32.0/20 maxlen: 24
                          199.74.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:79:6d:f4:e2:bc:98:18:5b:4b:e3:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jul 12 12:42:52 2026 GMT
            Not After : Oct 10 11:18:36 2026 GMT
        Subject: CN=7109177c-4425-42d5-8e8d-3d36afcef3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:57:69:96:31:ec:63:b1:15:03:86:64:e9:
                    7e:4a:82:85:1d:02:b2:2a:b7:72:39:ef:41:83:3c:
                    2e:6b:06:90:d6:36:f0:ce:09:a6:75:8f:58:25:53:
                    25:4d:3e:5a:5a:fc:bc:03:8b:e5:47:8f:f5:5a:6e:
                    10:81:13:ad:35:f6:7b:74:25:83:22:94:a1:ec:00:
                    45:f0:db:93:8c:fa:eb:47:24:5c:3e:ee:35:65:47:
                    06:23:28:7a:bf:aa:5d:75:33:99:62:d4:48:3e:f5:
                    2d:00:91:34:4e:de:22:80:33:5c:57:c7:80:62:55:
                    5c:c4:6b:d1:d5:3e:07:2b:22:ec:6a:1e:1d:c0:be:
                    64:67:e9:31:92:ff:41:e8:7e:e6:d4:1d:1b:a1:b0:
                    8c:0f:15:95:86:9c:3f:3b:5c:c6:13:71:44:88:c5:
                    6a:c9:7f:6e:95:71:f0:48:bd:91:d2:f3:b9:53:7a:
                    cd:15:1a:08:65:aa:c3:c6:28:f9:99:0e:db:a9:df:
                    2a:db:78:3a:57:44:75:ac:fc:e8:de:69:24:85:c8:
                    a3:d2:eb:4b:88:af:60:86:d6:76:77:92:6c:00:4b:
                    13:a5:d1:d6:52:16:62:01:15:14:dd:f0:3a:fa:62:
                    05:b2:72:a1:6b:b6:c1:61:43:4c:17:94:ad:f0:d6:
                    a9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B7:70:E6:F6:BE:C2:F3:97:2D:69:12:78:03:2D:91:6C:45:E0:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/a7b53f6d-f75c-38aa-b245-52716ae64eed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.216.216.0/24
                  16.217.100.0-16.217.115.255
                  16.217.217.0/24
                  136.162.148.0-136.162.163.255
                  136.162.240.0/21
                  136.162.252.0/22
                  161.114.64.0/22
                  161.114.140.0-161.114.163.255
                  161.114.208.0/22
                  192.26.60.0-192.26.67.255
                  192.26.76.0-192.26.81.255
                  192.48.153.0/24
                  192.82.162.0/23
                  192.82.176.0/21
                  192.132.112.0/20
                  198.29.82.0-198.29.95.255
                  199.74.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:93:d3:c9:9b:f0:f5:d9:c0:33:25:0f:b1:b3:c3:dc:74:cf:
         43:fe:2d:ce:57:0e:ee:db:a7:21:b8:e9:bd:b4:e0:cf:ed:22:
         1f:89:fd:77:8f:23:6c:2e:d8:cd:83:63:64:1d:d7:4c:3d:c6:
         13:67:33:86:ed:94:11:a7:aa:5c:3d:87:c8:c2:10:11:86:1f:
         39:6b:51:51:f9:45:b5:aa:eb:1a:1e:9f:e4:5b:be:43:53:db:
         47:b7:9c:6e:54:43:f4:4f:ea:1d:50:11:a8:20:9b:8c:7c:7b:
         7c:47:0d:39:5d:2f:97:a1:eb:d4:be:66:11:42:37:fa:51:76:
         0e:c7:8b:e0:f8:32:78:3e:73:e9:22:20:26:49:29:30:52:df:
         22:bd:ab:4d:f7:9b:91:77:48:2f:b5:9c:5d:09:a5:c5:a4:f2:
         08:8c:a9:4a:41:04:ff:24:35:2d:47:d2:f2:89:9d:71:a1:86:
         3b:b4:df:74:00:8a:5e:ac:4a:f7:b4:eb:eb:ac:88:4d:60:01:
         c9:f8:1e:ab:e9:4d:c7:47:f6:cc:d0:4e:a2:8c:52:a3:32:e8:
         8d:8d:25:e4:0c:26:50:e0:aa:0c:e5:f7:d7:98:87:56:45:bb:
         9f:69:20:e4:62:96:65:10:20:20:4c:c1:34:0b:be:2c:4b:58:
         b9:6b:28:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:26 2026 by rpki-client