Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f825c980-eb66-3bf2-95eb-b67394ec59d2.roa
File:                     f825c980-eb66-3bf2-95eb-b67394ec59d2.roa (raw, json)
Hash identifier:          D64rfwcqiw/RFKiuMLfz3gvPOVWoTrNWA6+tNg37TVM=
Subject key identifier:   AA:8E:FF:A2:A0:F8:B8:F1:63:8C:57:75:C8:03:5B:28:53:CE:2E:97
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584EAA518EEE4BEFA4474F228C00
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f825c980-eb66-3bf2-95eb-b67394ec59d2.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     174
IP address blocks:        16.5.168.0/23 maxlen: 24
                          16.5.170.0/23 maxlen: 24
                          192.26.51.0/24 maxlen: 24
                          192.82.170.0/24 maxlen: 24
                          192.82.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:8e:ee:4b:ef:a4:47:4f:22:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=682d2457-e435-4558-982b-507dbc80ceba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:74:ea:dd:45:e8:b4:fe:39:d8:81:01:df:21:
                    cf:81:b0:2f:0e:38:2c:13:c9:f3:1f:4c:ce:f2:b1:
                    1f:8b:80:b1:d3:c6:40:02:f8:09:47:af:2a:d8:87:
                    80:34:63:a0:b5:bd:d0:80:4e:46:7d:f6:ed:6e:1b:
                    87:60:94:e1:22:96:d6:14:a2:47:16:31:89:fe:60:
                    df:7c:a7:e7:62:fc:66:5b:f2:19:62:28:94:c7:9f:
                    ee:62:61:6b:db:d8:39:95:94:ad:d8:50:29:38:9e:
                    5d:fe:c0:0b:0c:fc:af:66:b2:66:01:26:29:4c:a7:
                    9b:6e:1d:23:61:d8:d4:01:b1:93:f0:59:e6:5b:cf:
                    79:e7:db:db:f2:2c:14:2b:53:22:92:a9:16:93:c1:
                    c1:a3:40:08:3b:10:9a:b8:e1:46:31:05:cb:8c:a5:
                    ce:a0:ae:7f:d9:c1:17:71:e3:23:33:c7:c3:fc:2d:
                    3a:fa:b1:82:dc:b2:f1:95:c9:a4:a8:00:ec:34:78:
                    67:b6:52:94:4b:e4:5c:b4:f0:83:3f:29:39:42:d1:
                    ad:44:cb:65:00:a5:02:84:16:3a:36:8c:d1:85:73:
                    7d:4b:94:ca:64:9e:38:4c:92:f5:43:81:da:e8:44:
                    38:e8:a4:94:70:c2:9a:fe:bc:af:f2:4a:aa:a8:88:
                    cd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8E:FF:A2:A0:F8:B8:F1:63:8C:57:75:C8:03:5B:28:53:CE:2E:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f825c980-eb66-3bf2-95eb-b67394ec59d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.5.168.0/22
                  192.26.51.0/24
                  192.82.170.0/24
                  192.82.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:7d:25:db:74:3a:13:19:99:a8:ce:e0:b9:65:f5:9e:c2:30:
         1c:86:4f:73:32:c6:be:a9:b8:cf:83:ff:e3:83:56:80:c2:0a:
         2b:3c:55:ac:e2:82:40:24:2d:48:72:4a:52:4c:81:c3:21:5f:
         cf:d9:2c:92:d0:a9:74:b2:fc:7e:92:7e:9a:cd:86:d8:2e:91:
         65:88:8f:e9:2b:0d:ad:bf:79:0f:14:59:5c:fd:9c:1f:f7:e6:
         e7:4e:b4:e3:c1:7d:28:77:9b:18:ef:69:0a:3f:18:a0:4e:b7:
         2f:a0:78:36:e0:15:a3:9e:b1:2b:94:56:c2:20:93:7c:17:ab:
         93:14:9f:5a:40:cf:7c:04:e6:83:e5:84:95:cf:b0:8d:a3:64:
         ed:49:3d:71:79:c9:8c:8c:4c:b3:1b:6d:ad:10:03:e0:69:80:
         14:86:59:60:2d:30:65:58:cf:89:59:c7:85:78:dc:8c:06:15:
         3d:32:35:7c:4d:f2:49:99:83:7a:bf:78:c7:86:18:4a:10:3b:
         2d:32:0d:38:ce:f1:4a:30:6e:5a:e8:24:bb:f0:92:aa:55:ce:
         97:18:5f:92:7f:78:8f:5e:21:db:e4:15:86:9c:39:0e:c0:70:
         d3:14:b0:69:f3:67:57:c1:b3:e5:29:ba:a6:19:d0:45:58:ed:
         69:3b:61:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:08:44 2026 by rpki-client