Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f825c980-eb66-3bf2-95eb-b67394ec59d2.roa
File:                     f825c980-eb66-3bf2-95eb-b67394ec59d2.roa (raw, json)
Hash identifier:          ySWhmSCv+sJLl8rVUlO+YP1vF/4DmzvHC9Mj2vOoKNs=
Subject key identifier:   C7:3C:E3:BA:DA:96:EC:C3:01:B2:18:3A:7D:8F:E6:C0:E3:7E:AA:4B
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584EFA3281E8A20BB6F8C8B94580
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f825c980-eb66-3bf2-95eb-b67394ec59d2.roa
Signing time:             Thu 27 Aug 2026 15:42:22 +0000
ROA not before:           Thu 27 Aug 2026 15:42:22 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     174
IP address blocks:        16.5.118.0/23 maxlen: 24
                          16.5.168.0/23 maxlen: 24
                          16.5.170.0/23 maxlen: 24
                          192.26.51.0/24 maxlen: 24
                          192.82.170.0/24 maxlen: 24
                          192.82.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fa:32:81:e8:a2:0b:b6:f8:c8:b9:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Aug 27 15:42:22 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=3df709f7-1323-47c5-921e-6e479c89856e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c4:b8:94:95:d3:22:46:d5:92:03:21:70:7a:
                    5d:38:84:3a:5d:19:df:98:64:3a:da:d7:27:8d:3a:
                    1c:3c:f1:23:f8:7e:70:eb:f9:02:72:b7:69:65:ad:
                    5e:c7:19:5b:38:54:e4:a9:b8:69:0b:82:29:6b:ad:
                    4f:53:ff:d9:cd:62:4d:94:3e:92:12:84:30:29:db:
                    85:de:e7:af:44:ff:86:39:11:3b:29:e0:5f:fd:68:
                    bf:87:ea:71:21:04:3d:55:3e:9f:10:ca:3a:56:55:
                    19:c3:51:c7:b1:2d:ba:c9:4c:01:c7:26:b7:97:2a:
                    f2:27:a0:c7:f8:1b:eb:a9:38:29:e2:26:ed:7a:26:
                    cf:df:58:cb:cb:49:3b:92:a1:5d:73:e9:6b:4a:38:
                    21:9f:45:ca:41:58:99:93:c8:6e:04:89:03:73:d3:
                    b6:f2:b1:72:ee:7f:17:03:35:1c:9f:89:9e:02:8a:
                    1d:92:50:64:3a:f9:5f:cf:d0:ac:13:cd:5b:09:c6:
                    03:97:77:46:ed:0a:a2:da:8d:4c:82:3b:2b:a2:20:
                    6b:42:96:73:82:3d:91:ce:1c:24:5f:6b:2c:79:14:
                    e5:5c:68:5e:8f:3e:91:6e:aa:16:ae:9b:ba:fd:5f:
                    65:33:10:e2:5e:d4:1a:cb:f2:47:bf:be:3a:9a:66:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3C:E3:BA:DA:96:EC:C3:01:B2:18:3A:7D:8F:E6:C0:E3:7E:AA:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/f825c980-eb66-3bf2-95eb-b67394ec59d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.5.118.0/23
                  16.5.168.0/22
                  192.26.51.0/24
                  192.82.170.0/24
                  192.82.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:6c:15:e5:20:73:0b:78:dd:75:4e:9d:f7:29:fa:6b:a2:f9:
         60:5a:c7:bf:36:90:dc:b6:b3:2f:98:8b:d9:91:dd:b1:30:f1:
         99:26:91:99:58:e0:a7:59:51:fa:8c:9e:d7:1a:a2:6f:a7:ae:
         bc:5e:0c:66:4a:29:1a:eb:d2:5c:d3:b7:a2:6e:2c:16:06:7b:
         f9:cc:1b:e5:c4:8d:ec:9d:28:61:f1:6d:37:17:77:65:fc:d2:
         29:21:88:dd:8e:de:ab:4f:10:c3:9a:9d:bb:7f:84:0d:8d:0b:
         df:4a:f2:92:c9:ed:5c:3a:4f:75:c6:7a:a2:49:1e:87:c6:a9:
         c5:94:c5:de:b5:43:cf:87:14:1c:6e:4f:dd:a8:27:23:9e:75:
         0c:a9:8c:e5:84:5c:4b:d0:22:e1:04:70:21:ca:e3:20:0a:8b:
         7d:28:b9:9e:09:ca:10:a5:87:d8:a2:0b:a4:60:11:57:76:06:
         aa:0a:94:ea:5e:d3:cd:5d:07:f7:32:a8:a5:a1:b5:cc:d6:2d:
         58:dd:7c:34:a8:12:3a:28:39:13:05:2b:2f:b9:00:fb:a1:23:
         5c:bc:96:d7:62:e1:41:86:5a:9a:a4:f2:9d:66:f9:df:84:5a:
         4e:24:68:b3:ab:ab:24:18:55:7b:24:40:a0:ff:b3:bc:64:e1:
         5a:f1:72:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 13 07:06:35 2026 by rpki-client