Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e287691b-8517-3bac-a344-d683306094f1.roa
File:                     e287691b-8517-3bac-a344-d683306094f1.roa (raw, json)
Hash identifier:          6Y968ACYGYCVkwW7wIbzUJhNMhuw8fAkoB3J6YiC58I=
Subject key identifier:   17:DD:5B:BE:27:2E:6D:06:4C:0F:01:27:DD:D8:D5:46:8D:7E:46:85
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E5B8404F2E624EC127C2D2380
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e287691b-8517-3bac-a344-d683306094f1.roa
Signing time:             Wed 01 Jul 2026 19:33:04 +0000
ROA not before:           Wed 01 Jul 2026 19:33:04 +0000
ROA not after:            Tue 15 Sep 2026 17:52:04 +0000
asID:                     402288
IP address blocks:        16.5.50.0/24 maxlen: 24
                          16.5.86.0/24 maxlen: 24
                          16.5.103.0/24 maxlen: 24
                          16.5.110.0/24 maxlen: 24
                          16.5.139.0/24 maxlen: 24
                          16.5.144.0/24 maxlen: 24
                          16.5.207.0/24 maxlen: 24
                          16.5.252.0/24 maxlen: 24
                          16.216.26.0/24 maxlen: 24
                          16.216.79.0/24 maxlen: 24
                          16.217.60.0/24 maxlen: 24
                          16.217.95.0/24 maxlen: 24
                          16.217.182.0/24 maxlen: 24
                          16.217.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:84:04:f2:e6:24:ec:12:7c:2d:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jul  1 19:33:04 2026 GMT
            Not After : Sep 15 17:52:04 2026 GMT
        Subject: CN=2aa5d98e-b47f-4429-b9fd-2712e6ced1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:7b:76:73:f4:ab:79:85:ab:80:ca:7e:ad:
                    22:41:b5:c9:df:1c:18:d2:60:65:37:af:a7:2c:d7:
                    df:33:e9:f2:a6:84:de:3d:e3:dc:11:a9:3e:4d:c7:
                    23:c4:90:42:af:b6:e1:2f:89:30:4b:60:2e:3a:05:
                    02:f5:a1:81:6c:90:c4:66:5c:76:dd:ea:c4:59:82:
                    88:15:87:bf:d0:bf:2e:15:80:b1:85:96:2b:74:04:
                    fb:ed:f7:4c:a8:9f:f4:a3:14:ab:01:c1:4a:34:a7:
                    35:53:fa:0b:e4:2e:fc:33:da:f6:b5:50:16:67:e4:
                    57:24:82:c1:a9:40:c2:5f:4a:a9:ba:17:d4:1f:75:
                    13:23:2e:54:35:35:99:8b:ac:eb:80:38:f0:24:43:
                    c8:3b:53:cb:ff:b0:5f:29:c7:de:fc:15:3b:0d:0c:
                    93:b5:f6:1b:af:1c:f3:06:22:70:d2:04:9a:df:26:
                    d9:de:76:1e:1d:e3:4c:b5:15:2f:67:f1:49:7c:82:
                    6d:a4:d4:6c:47:a3:4c:f1:6f:2c:9c:0e:f6:29:23:
                    1d:32:0b:da:66:3e:e1:7e:a0:87:5e:93:f4:f5:64:
                    6c:f6:b6:fc:f7:8f:1f:d6:47:90:95:ca:e4:2b:cb:
                    3d:6f:ee:ec:7f:2e:cb:ac:6f:fd:e5:ca:4e:05:03:
                    f3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DD:5B:BE:27:2E:6D:06:4C:0F:01:27:DD:D8:D5:46:8D:7E:46:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e287691b-8517-3bac-a344-d683306094f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.5.50.0/24
                  16.5.86.0/24
                  16.5.103.0/24
                  16.5.110.0/24
                  16.5.139.0/24
                  16.5.144.0/24
                  16.5.207.0/24
                  16.5.252.0/24
                  16.216.26.0/24
                  16.216.79.0/24
                  16.217.60.0/24
                  16.217.95.0/24
                  16.217.182.0/24
                  16.217.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:51:bc:88:00:85:7e:c1:18:e2:51:dc:05:db:6c:40:fb:b8:
         a3:6a:8c:dd:b4:4a:c5:58:b8:c9:ed:f1:cb:d2:4c:f9:d8:7c:
         d4:aa:18:ab:68:24:3a:aa:c3:a7:34:ce:1c:84:3a:11:a5:6a:
         ee:bd:2b:ed:7d:d8:29:5d:cd:98:15:68:d1:5e:8d:6e:1f:ed:
         61:4d:85:b9:30:00:1f:35:dc:20:8e:da:d3:7b:86:1b:96:28:
         3e:ce:79:69:9f:04:50:7f:4c:94:ca:eb:3b:e7:c0:f6:a1:69:
         6c:58:1e:89:cf:6c:59:fa:d5:6d:5f:ab:94:2c:c6:7e:5d:fb:
         51:f6:8d:c8:5e:dc:58:d0:75:ca:84:9a:98:61:1f:44:e5:c5:
         55:2b:86:a3:f4:62:67:99:c1:66:8f:73:4f:e4:7a:12:19:69:
         7a:a7:2c:6c:e7:c0:94:63:68:69:e4:0a:cd:db:98:8a:a0:4b:
         c7:ca:70:74:5f:6b:f9:9c:1a:d9:b6:fb:f0:c8:07:9b:2b:21:
         1d:9b:10:b4:19:0f:cd:9c:24:ef:d7:07:15:b7:45:c0:b9:f8:
         f9:91:3c:91:11:a3:4d:f2:71:0f:97:3b:e3:7a:cf:1a:b0:68:
         0f:17:54:96:55:8f:10:ff:9c:4d:47:77:44:69:a6:0c:ae:60:
         de:07:a1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 16:16:16 2026 by rpki-client