Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/b34c9821-5d98-3a19-957d-209a693fb3f2.roa
File:                     b34c9821-5d98-3a19-957d-209a693fb3f2.roa (raw, json)
Hash identifier:          VDe/c5Giu/oA3W8OfP5yYcm+XfKCpEBhIXE+VcPquWg=
Subject key identifier:   3A:77:2E:59:A5:A2:8A:0A:9F:14:FB:B1:D1:58:86:AD:81:8D:D0:A6
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584EE0B4C5A6E2ACFFE76BD93100
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/b34c9821-5d98-3a19-957d-209a693fb3f2.roa
Signing time:             Tue 18 Aug 2026 12:33:49 +0000
ROA not before:           Tue 18 Aug 2026 12:33:49 +0000
ROA not after:            Mon 16 Nov 2026 13:33:49 +0000
asID:                     11421
IP address blocks:        16.5.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:b4:c5:a6:e2:ac:ff:e7:6b:d9:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Aug 18 12:33:49 2026 GMT
            Not After : Nov 16 13:33:49 2026 GMT
        Subject: CN=db6b8a64-9198-4111-b2b2-8f24f354a5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:a9:fa:a9:0b:32:11:33:5b:6b:b0:d9:6e:
                    4a:b2:c7:70:f6:69:d4:32:b4:e1:73:ff:0a:e0:bb:
                    56:16:c7:a6:75:de:82:b5:a5:65:19:ec:be:0b:82:
                    7c:77:96:9c:6e:59:04:e5:03:eb:af:2a:6e:5d:2e:
                    53:57:01:c6:d7:24:27:9d:d7:e6:df:af:c6:18:65:
                    8d:ca:0f:a3:93:84:fc:14:0c:0f:8a:81:ea:68:eb:
                    d7:3c:01:b6:27:a1:f5:62:9d:0e:82:00:ac:24:54:
                    65:5d:4d:27:74:c6:70:32:03:3a:ac:1b:2a:cc:23:
                    82:97:79:9b:f9:0d:aa:3c:1c:7b:0f:12:07:42:dc:
                    74:46:e3:32:64:13:12:dd:17:cd:81:aa:e6:f9:bd:
                    62:03:9a:1d:5c:55:f6:87:a1:07:66:e0:3c:ca:88:
                    29:4a:e1:85:88:ad:50:20:4d:95:4b:c7:8a:92:18:
                    dc:60:21:4f:9d:88:65:ca:a1:ad:52:86:12:ca:8b:
                    b9:85:aa:e2:0f:e6:94:d8:8c:30:9d:74:d6:80:2e:
                    ff:3c:fd:d0:ff:c6:91:f6:33:15:c2:a3:56:1d:b1:
                    88:d0:1e:c5:99:0f:0c:c3:cb:52:18:c2:fd:54:f4:
                    0e:7a:ab:7c:a6:e0:1a:6c:53:f2:2f:7b:dc:ae:bd:
                    8e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:77:2E:59:A5:A2:8A:0A:9F:14:FB:B1:D1:58:86:AD:81:8D:D0:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/b34c9821-5d98-3a19-957d-209a693fb3f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.5.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5f:fb:54:f1:27:05:a9:72:86:44:04:22:94:6c:33:c0:cb:
         6e:2a:21:04:61:ae:36:fb:2d:44:c2:b7:fa:4b:b1:8a:92:95:
         57:b2:c9:25:8b:97:d9:c3:af:af:46:5f:8f:1d:ad:49:ec:7b:
         de:50:c3:8f:2f:eb:97:c1:b9:83:5b:f9:91:b0:1c:79:d2:4a:
         4f:5d:76:99:d0:c3:c5:e4:5a:cf:c2:d7:60:b4:c0:68:bb:43:
         40:ad:45:24:ce:90:33:55:57:70:f7:a2:07:e6:ac:73:5d:95:
         13:41:16:23:ae:7b:7e:f9:86:0b:32:74:85:99:2a:f8:1e:39:
         b8:c8:45:87:62:06:fe:28:ce:1a:c3:54:09:df:80:d9:c4:27:
         68:55:c1:d8:03:29:bb:76:fb:5c:af:c6:1c:08:81:46:65:4b:
         40:3c:ad:58:93:28:9b:61:f0:fd:3f:dd:5d:4c:2c:f9:b7:08:
         34:30:3f:2a:c1:59:26:27:5c:75:bf:25:89:37:2d:65:24:35:
         66:16:d5:30:f6:5a:05:d4:cb:52:6f:72:9b:0d:c9:38:be:97:
         aa:38:46:2b:54:34:89:6a:73:e1:00:ed:ff:7c:3d:3e:92:0e:
         32:94:c7:b2:fe:1e:75:41:54:c2:ef:fd:77:11:42:78:f3:b9:
         1f:3e:11:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 17:48:43 2026 by rpki-client