Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e4c37fbf-f4cd-31ab-b2e8-806527103568.roa
File:                     e4c37fbf-f4cd-31ab-b2e8-806527103568.roa (raw, json)
Hash identifier:          rilou3F53o/QkP3gLuswyfblUapAAC1GmbP6EshBj5U=
Subject key identifier:   4A:77:85:F7:37:F1:14:9A:DE:AB:32:1B:0E:11:DB:57:D5:6A:67:CE
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E713AAE9F0215803F61D2F240
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e4c37fbf-f4cd-31ab-b2e8-806527103568.roa
Signing time:             Thu 09 Jul 2026 14:13:06 +0000
ROA not before:           Thu 09 Jul 2026 14:13:06 +0000
ROA not after:            Wed 07 Oct 2026 14:13:06 +0000
asID:                     402289
IP address blocks:        16.216.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:71:3a:ae:9f:02:15:80:3f:61:d2:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jul  9 14:13:06 2026 GMT
            Not After : Oct  7 14:13:06 2026 GMT
        Subject: CN=6fbf8875-a717-4154-be63-666a8ec068ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:58:93:88:10:1b:04:09:42:98:7c:3a:95:
                    87:d9:33:71:e5:92:2d:56:6f:6f:71:e7:3e:2c:57:
                    3b:11:2e:08:31:16:86:dc:08:13:a7:e3:1a:a1:2c:
                    22:f1:6c:ac:7c:7c:f2:11:d0:ec:c0:ca:90:01:e6:
                    f3:5c:8d:fb:6b:94:7f:78:ef:7d:44:6f:74:49:15:
                    aa:ed:7e:49:37:d0:ae:b6:49:13:1e:bb:43:15:d6:
                    f9:3d:35:71:2a:85:23:03:69:2f:86:fa:22:fe:be:
                    f0:fe:cf:b9:b1:2f:c3:8c:90:24:9e:90:7f:4b:e2:
                    27:67:e4:eb:a4:c0:c1:3d:f7:ca:a8:4d:de:f5:1c:
                    52:92:fe:b0:81:f9:7e:fc:3f:e9:f6:92:50:eb:4d:
                    f2:da:02:7e:6c:bd:a1:b2:5e:7d:c1:41:36:93:6b:
                    e6:97:77:37:c9:03:80:d3:f9:9e:da:29:95:d3:32:
                    98:d6:b0:99:50:e6:a8:f8:1d:11:2a:b7:cb:08:bb:
                    ad:61:a6:2d:79:69:74:54:f8:4f:9a:00:66:1b:5f:
                    57:2d:81:2d:bf:a2:39:85:e2:14:e2:a9:3a:46:ea:
                    33:3f:0e:3d:81:c0:49:81:db:e4:0e:ef:c5:71:e8:
                    4f:bd:63:4e:a8:d3:b5:c7:f2:13:d9:02:73:bd:2b:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:77:85:F7:37:F1:14:9A:DE:AB:32:1B:0E:11:DB:57:D5:6A:67:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e4c37fbf-f4cd-31ab-b2e8-806527103568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.216.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b3:ae:94:22:2c:8a:39:5d:21:db:cf:e8:8c:81:52:4b:99:
         3a:55:d6:5e:16:6f:05:89:5a:12:8f:b1:82:b2:db:94:c4:dd:
         65:d7:ba:76:a3:eb:15:cd:09:63:bb:95:c0:3a:b6:1b:0c:0a:
         6a:73:c6:2a:45:f5:c1:fc:cd:fd:3c:e7:34:2c:e9:ea:14:cb:
         54:b8:13:14:ba:7d:db:7d:07:e9:82:77:ed:5e:54:f2:0b:ad:
         85:6d:50:5e:66:b8:5c:34:d4:9b:df:12:9e:9b:40:9e:c3:6c:
         16:d9:aa:58:4c:c4:e7:6e:d5:b8:2d:c9:93:37:aa:e2:0c:19:
         ed:bf:a6:4c:a6:f2:06:ac:8a:5f:7f:90:73:33:b7:68:28:f7:
         92:60:a7:4a:42:e0:99:a6:e1:5e:29:76:56:2c:90:7e:49:1e:
         13:6f:64:fa:93:99:6e:12:f4:a1:06:cf:22:2f:50:e5:59:9d:
         87:53:f3:01:0a:d1:54:31:58:63:31:61:6d:cc:67:96:13:ee:
         1d:3d:c6:54:28:68:15:2e:15:39:9c:63:48:26:0d:55:f4:5d:
         e1:06:db:29:9a:27:77:28:25:70:15:1b:32:77:1e:03:c2:96:
         ae:ee:87:71:ec:35:66:21:b8:23:d8:1f:6c:77:f9:43:7b:57:
         e3:f7:6d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:19 2026 by rpki-client