Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cb2a77c7-a777-3c17-addb-c4e0e3e1cdf4.roa
File:                     cb2a77c7-a777-3c17-addb-c4e0e3e1cdf4.roa (raw, json)
Hash identifier:          Nn+UaDGNljFtdQvF9NyQLrMSEMJp8r2187PK/jkrTRY=
Subject key identifier:   28:E1:B3:8E:B5:EC:1B:5D:92:C5:F8:B7:78:35:96:39:8F:4D:D3:76
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F0556A34E3DDFBD62E5E12500
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cb2a77c7-a777-3c17-addb-c4e0e3e1cdf4.roa
Signing time:             Mon 31 Aug 2026 15:29:03 +0000
ROA not before:           Mon 31 Aug 2026 15:29:03 +0000
ROA not after:            Sun 29 Nov 2026 16:29:03 +0000
asID:                     212477
IP address blocks:        16.5.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:56:a3:4e:3d:df:bd:62:e5:e1:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Aug 31 15:29:03 2026 GMT
            Not After : Nov 29 16:29:03 2026 GMT
        Subject: CN=a32850e0-50db-42c9-bd9e-c4bf10779203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4f:7c:21:f5:67:73:cb:66:0a:99:a8:ea:37:
                    92:10:71:70:5e:4d:06:7b:32:69:b1:ac:b5:d5:e5:
                    0e:d4:73:1e:87:22:84:d1:ea:b6:86:58:a5:24:c8:
                    4f:7f:72:49:c0:64:6e:09:04:d5:34:af:fa:1f:84:
                    9b:b7:54:c8:b6:20:97:45:58:6d:01:8f:98:63:c4:
                    a2:32:18:5f:1b:a1:45:07:09:26:cb:53:15:e3:c4:
                    b6:66:9e:02:97:92:c9:db:7d:1b:d1:76:75:b8:a7:
                    69:82:6d:8e:1c:39:21:e8:70:be:53:93:67:4e:8f:
                    0c:ea:61:b9:24:fc:07:fb:a9:46:eb:e9:d1:64:0b:
                    0c:1e:0c:85:ca:d9:a5:15:9c:b1:56:83:33:5b:b9:
                    ec:1e:b0:47:55:e8:af:67:cc:47:26:6b:dc:32:72:
                    77:84:56:9f:dd:49:2a:7f:f6:4e:0c:78:b4:28:fc:
                    6c:a0:0a:1a:f8:ec:eb:18:cc:13:c5:5e:cb:e6:5a:
                    48:98:a6:7d:a2:2d:d6:a0:b0:80:87:0f:ff:ab:eb:
                    43:bb:e1:59:00:11:33:5f:80:e0:ee:78:49:8a:1a:
                    b0:90:68:f1:6e:a4:57:23:dc:ba:cd:69:4a:73:a5:
                    7f:54:36:84:3a:c3:d1:84:b3:78:c8:35:c6:f0:16:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E1:B3:8E:B5:EC:1B:5D:92:C5:F8:B7:78:35:96:39:8F:4D:D3:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cb2a77c7-a777-3c17-addb-c4e0e3e1cdf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.5.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:29:1e:6b:4e:de:8f:cd:a8:db:38:b0:4c:a2:36:50:87:3c:
         6b:72:32:4a:53:1f:9a:3c:76:30:3f:08:ba:8d:7c:25:fb:93:
         a5:2b:44:ee:9f:65:81:6e:15:a9:81:09:6e:c1:c5:16:53:a8:
         f7:0d:06:94:13:6d:d4:77:e3:42:54:4f:1a:d6:02:18:1d:98:
         78:87:67:ee:19:6b:bb:ba:ad:63:d4:2a:51:1d:38:a2:a3:91:
         9b:a0:f8:b6:0e:57:4f:5e:5b:64:6c:ab:00:55:b1:1c:ea:0d:
         54:20:80:5c:c8:8a:1c:0e:90:7b:67:d1:1f:a0:0f:9a:0a:10:
         15:03:83:54:fa:7c:58:4d:c3:be:1b:3f:5c:f5:b1:40:fc:cf:
         ca:63:3f:fb:b3:24:f3:5f:e4:00:2d:00:b7:70:b2:14:f9:71:
         e3:93:8c:6e:1f:6d:a9:1a:9d:2f:71:70:ad:06:f8:bc:a2:b0:
         ba:64:b8:a0:38:d5:75:ee:c0:f0:7a:19:c9:18:82:19:45:17:
         49:f2:f4:ba:0b:aa:ef:59:5b:36:67:da:33:f9:d1:1e:32:7a:
         7d:7d:6f:e2:fa:ee:f2:2a:26:7a:6f:12:00:a8:2c:5c:ef:eb:
         67:73:12:49:05:2c:df:38:b1:d1:03:8e:29:0e:01:97:fe:f2:
         32:27:cf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:23 2026 by rpki-client