Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/fca14147-7ba1-3bad-a343-d8e47297e391.roa
File:                     fca14147-7ba1-3bad-a343-d8e47297e391.roa (raw, json)
Hash identifier:          M5S/TVCsCmuSiNoZpzFycqxrHHVPtTe/qzgGoJVXcWY=
Subject key identifier:   79:9D:8A:30:44:F3:0E:7C:D9:C8:69:9C:02:80:9E:57:08:D2:49:BD
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F215F255BCFB0F03A6C43C400
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/fca14147-7ba1-3bad-a343-d8e47297e391.roa
Signing time:             Thu 10 Sep 2026 16:28:50 +0000
ROA not before:           Thu 10 Sep 2026 16:28:50 +0000
ROA not after:            Tue 01 Dec 2026 15:14:26 +0000
asID:                     148996
IP address blocks:        16.5.47.0/24 maxlen: 24
                          16.5.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:21:5f:25:5b:cf:b0:f0:3a:6c:43:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Sep 10 16:28:50 2026 GMT
            Not After : Dec  1 15:14:26 2026 GMT
        Subject: CN=ff467999-2176-4b36-9a73-df141cc7098b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:71:b4:92:8c:c1:c1:17:3d:a5:4d:60:9a:d7:
                    a2:71:99:09:66:fe:bb:63:ae:27:f5:6a:97:20:1c:
                    ad:2b:f6:31:23:9b:0e:3b:73:f3:6b:98:ca:2d:15:
                    78:19:ba:31:6a:09:40:ae:10:21:22:3f:b0:eb:e0:
                    b6:df:0c:0a:ec:5f:ab:f0:cd:76:ae:e8:dc:9a:e2:
                    a5:c9:54:c2:88:3a:b3:03:c5:74:57:a3:d1:88:cf:
                    35:f5:ab:8d:2a:81:4f:a6:a5:6c:9b:cb:b4:8a:0d:
                    9b:dc:71:17:7e:9a:8d:0a:1d:05:ad:25:1b:a8:5b:
                    d8:13:d1:5e:51:22:65:3c:d8:d6:0d:e7:64:35:9d:
                    65:7e:5f:43:ec:41:56:f3:c8:b6:1f:0e:a5:b7:47:
                    e2:33:f1:b3:fb:ee:76:48:cf:e0:83:0c:83:d1:0d:
                    65:80:bc:88:df:e2:5d:40:7f:82:fc:f9:10:29:8e:
                    b8:08:91:e9:9e:50:b6:28:e6:07:43:47:23:d3:8a:
                    c5:c1:0d:22:46:79:a2:2b:1b:9f:d1:2d:f7:98:bb:
                    e1:13:21:01:34:d4:b2:9c:f1:8b:97:77:46:48:c1:
                    e0:c7:de:4e:48:13:5e:1a:e0:69:9d:88:aa:d5:ab:
                    ed:9e:d3:8c:d5:bf:d2:b9:3b:7f:dd:a1:eb:3a:3b:
                    44:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9D:8A:30:44:F3:0E:7C:D9:C8:69:9C:02:80:9E:57:08:D2:49:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/fca14147-7ba1-3bad-a343-d8e47297e391.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.5.47.0/24
                  16.5.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:2f:0b:76:5b:6d:49:56:ba:a5:bc:32:c4:4f:ef:56:47:ff:
         10:e5:8a:d5:d8:96:1f:d3:57:09:45:a4:7c:c8:6a:d6:bb:36:
         7f:a4:21:79:e0:31:09:7e:63:2c:98:2d:df:61:92:e9:93:02:
         14:75:65:40:5e:06:cb:d7:bd:71:a5:d0:73:4d:45:1c:3b:50:
         bb:b4:0c:5f:e2:52:1e:a7:c7:1f:6c:91:49:bf:f4:6b:ea:9b:
         a3:24:41:32:c4:a4:1a:c6:bc:f8:3b:f7:34:85:cd:d4:b1:b4:
         59:7d:1f:01:86:3d:fe:4d:ba:8e:db:1a:32:79:0d:95:4d:fc:
         f2:50:a4:4e:14:23:0b:3f:80:13:14:dd:93:8c:8e:01:fd:d2:
         0b:d5:eb:88:0e:a2:90:f5:21:8c:1b:18:72:74:bd:f4:f2:6b:
         74:07:ef:6a:62:e8:72:28:c8:83:90:31:e5:6d:49:f5:5c:dd:
         aa:99:8a:ff:d1:04:bf:ca:f9:06:8d:0c:a9:4b:69:82:86:48:
         56:f1:b0:ff:6a:93:6c:c9:5c:0b:2e:da:cc:6a:54:91:29:1f:
         65:48:70:51:12:57:71:60:7f:97:04:88:40:39:42:a6:57:a6:
         45:63:f4:8e:0a:46:7d:57:0f:b3:54:a5:c9:62:0a:16:93:ea:
         10:5b:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 07:05:27 2026 by rpki-client