Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d51e5a45-29f9-3598-bfaf-021a5254d21b.roa
File:                     d51e5a45-29f9-3598-bfaf-021a5254d21b.roa (raw, json)
Hash identifier:          xniywEJZ3T1B1xRR30LnM6WwlJdsMT/lCky16Jr2cJo=
Subject key identifier:   29:E9:0B:4C:E7:D3:D5:B6:99:3E:BA:04:2A:AB:19:D6:E0:25:91:33
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E2BCFFAAA7414C2E0856AEF00
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d51e5a45-29f9-3598-bfaf-021a5254d21b.roa
Signing time:             Sun 14 Jun 2026 17:27:19 +0000
ROA not before:           Sun 14 Jun 2026 17:27:19 +0000
ROA not after:            Sun 30 Aug 2026 14:55:16 +0000
asID:                     33355
IP address blocks:        16.216.73.0/24 maxlen: 24
                          16.217.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2b:cf:fa:aa:74:14:c2:e0:85:6a:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jun 14 17:27:19 2026 GMT
            Not After : Aug 30 14:55:16 2026 GMT
        Subject: CN=5d92cec1-57bf-4b03-a85e-7d3e5d7a97fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fc:92:5a:b9:59:12:59:29:d8:88:8d:37:c6:
                    29:e0:ae:91:73:01:3c:44:b8:da:50:7d:29:06:cd:
                    85:2f:7f:62:80:f9:28:42:85:25:92:48:69:ed:19:
                    1f:2e:65:ea:f9:c0:da:ce:b9:4c:7a:ae:88:14:0f:
                    37:d4:4c:8a:3a:01:eb:1a:fc:54:44:ae:5b:67:40:
                    a0:dd:89:9b:f2:d7:c3:96:ea:e9:61:e9:57:c2:19:
                    6b:fb:08:2f:7d:1a:05:f8:90:e1:bc:0b:1a:f0:13:
                    6f:c6:8a:fb:5a:a5:90:dc:cf:e7:7a:68:1f:72:c2:
                    18:39:96:e0:fe:11:24:7a:ee:0b:ca:a1:44:b9:ba:
                    1f:e9:ca:c2:82:ba:10:08:77:62:67:24:3d:dc:5b:
                    3f:03:cb:4d:d4:5c:4b:3b:e4:1a:a0:bb:16:db:3f:
                    64:50:64:e4:b4:c8:ae:d9:50:39:e5:7d:af:99:7a:
                    e9:ab:6d:f2:f2:57:ce:78:a2:a4:4d:7d:53:33:e9:
                    5f:91:84:74:f0:e0:98:3a:b7:ea:52:7e:5d:03:19:
                    c6:b2:f2:03:18:90:a7:3b:48:36:4d:29:5b:0b:57:
                    e1:af:87:8e:09:b8:49:f5:70:24:6f:c3:5c:a5:91:
                    2e:5a:c2:0b:f1:03:03:19:c2:a4:66:8f:6d:cb:24:
                    9f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E9:0B:4C:E7:D3:D5:B6:99:3E:BA:04:2A:AB:19:D6:E0:25:91:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d51e5a45-29f9-3598-bfaf-021a5254d21b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.216.73.0/24
                  16.217.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:32:02:3d:50:d2:00:55:e8:d1:5c:f5:fb:c7:e2:f8:8d:32:
         5d:3b:92:fc:44:3f:08:cd:f0:22:06:c0:1e:90:5f:f7:81:2a:
         b1:67:ff:b7:a0:03:0b:f0:f7:b1:3f:7a:73:0f:a2:29:21:4b:
         ae:5e:78:9f:77:9d:fe:52:a3:c9:75:4c:29:19:e0:80:93:9e:
         85:b4:84:16:2a:4d:e8:3c:88:8c:9f:cc:77:82:d4:de:40:0a:
         a2:6a:38:9e:01:32:40:b1:dc:e7:5f:6d:c0:c8:94:da:99:1d:
         ca:09:98:67:4d:e3:fd:f7:ab:1d:95:9e:5f:b8:5f:db:c2:94:
         59:21:b3:35:bb:7a:c5:42:6c:37:cc:35:a1:d7:aa:a4:7a:47:
         15:09:1e:70:f8:af:fc:10:56:35:5b:7b:8f:67:fc:8a:d3:99:
         df:b1:08:94:db:5f:eb:23:3d:db:b1:36:26:45:ea:f2:b8:c4:
         bb:12:5a:d2:37:9d:7f:b0:bd:29:43:24:04:cd:69:e5:5f:50:
         16:ef:f8:fd:1e:83:3d:e0:ad:42:2b:bf:56:13:ea:4a:96:6e:
         ff:41:2e:8a:16:0a:dd:fa:de:41:93:5e:c2:d8:4d:c6:b6:b4:
         13:dc:dc:50:23:5f:29:4b:be:7a:c1:85:6d:ad:2e:c3:b7:51:
         ad:da:d1:3e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4rz/qqdBTC4IVq7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk
YmZhMB4XDTI2MDYxNDE3MjcxOVoXDTI2MDgzMDE0NTUxNlowLzEtMCsGA1UEAxMk
NWQ5MmNlYzEtNTdiZi00YjAzLWE4NWUtN2QzZTVkN2E5N2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPySWrlZElkp2IiNN8Yp4K6RcwE8RLjaUH0p
Bs2FL39igPkoQoUlkkhp7RkfLmXq+cDazrlMeq6IFA831EyKOgHrGvxURK5bZ0Cg
3Ymb8tfDlurpYelXwhlr+wgvfRoF+JDhvAsa8BNvxor7WqWQ3M/nemgfcsIYOZbg
/hEkeu4LyqFEubof6crCgroQCHdiZyQ93Fs/A8tN1FxLO+QaoLsW2z9kUGTktMiu
2VA55X2vmXrpq23y8lfOeKKkTX1TM+lfkYR08OCYOrfqUn5dAxnGsvIDGJCnO0g2
TSlbC1fhr4eOCbhJ9XAkb8NcpZEuWsIL8QMDGcKkZo9tyySfNQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCnpC0zn09W2mT66BCqrGdbgJZEzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj
MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZDUxZTVhNDUtMjlmOS0z
NTk4LWJmYWYtMDIxYTUyNTRkMjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2
NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj
ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl
YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAENhJAwQA
ENnKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAD8yAj1Q0gBV6NFc9fvH4viNMl07kvxEPwjN8CIGwB6QX/eB
KrFn/7egAwvw97E/enMPoikhS65eeJ93nf5So8l1TCkZ4ICTnoW0hBYqTeg8iIyf
zHeC1N5ACqJqOJ4BMkCx3OdfbcDIlNqZHcoJmGdN4/33qx2Vnl+4X9vClFkhszW7
esVCbDfMNaHXqqR6RxUJHnD4r/wQVjVbe49n/IrTmd+xCJTbX+sjPduxNiZF6vK4
xLsSWtI3nX+wvSlDJATNaeVfUBbv+P0egz3grUIrv1YT6kqWbv9BLooWCt363kGT
XsLYTca2tBPc3FAjXylLvnrBhW2tLsO3Ua3a0T4=
-----END CERTIFICATE-----
Generated at Sun Jun 14 23:27:15 2026 by rpki-client