Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/33ab4c6c-eb8e-3a4d-8d37-aadb0b7fe881.roa
File:                     33ab4c6c-eb8e-3a4d-8d37-aadb0b7fe881.roa (raw, json)
Hash identifier:          eWrf1LBW+bZRDV42LvinuZBmVokmXoyeFHTCHL4GgjU=
Subject key identifier:   D4:04:E3:1A:04:E1:35:EE:9D:3C:67:9F:F5:0A:27:3C:51:BE:9A:CE
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E5B899851F6620EE1C892DA80
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/33ab4c6c-eb8e-3a4d-8d37-aadb0b7fe881.roa
Signing time:             Wed 01 Jul 2026 19:44:19 +0000
ROA not before:           Wed 01 Jul 2026 19:44:19 +0000
ROA not after:            Sun 30 Aug 2026 14:52:42 +0000
asID:                     151389
IP address blocks:        16.216.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:89:98:51:f6:62:0e:e1:c8:92:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jul  1 19:44:19 2026 GMT
            Not After : Aug 30 14:52:42 2026 GMT
        Subject: CN=e7bea334-dd49-4fd9-b224-d47c01aac5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:36:a6:94:2e:98:f0:f1:06:9e:b3:42:ef:4c:
                    83:43:ad:fa:ee:a4:05:38:fe:e4:6b:1d:a0:3f:99:
                    54:37:b2:f4:af:45:de:17:94:92:31:4f:7a:ce:14:
                    c8:93:c5:75:a2:7e:80:30:a3:6e:94:95:26:7e:7f:
                    a0:be:93:71:04:98:0a:fc:98:5a:a8:59:b9:15:ae:
                    5d:04:04:18:0e:f0:7a:5e:e8:a2:dc:25:29:f6:40:
                    70:cf:27:ea:c0:13:93:cb:98:2e:ca:8a:28:fe:ee:
                    b0:75:e2:20:f8:d1:ec:57:ce:77:88:46:67:25:db:
                    75:60:49:14:9c:2c:6e:26:f8:a4:19:51:73:92:45:
                    f0:6b:c9:62:3e:c1:4c:b5:a4:3c:dd:c8:5b:9b:61:
                    68:92:c3:ef:66:bf:dd:36:47:de:0e:9e:37:38:10:
                    f3:7c:b4:dd:db:31:dc:2b:09:f2:8b:02:b4:0a:0e:
                    54:bf:a2:a3:3c:e4:73:99:24:9e:65:b3:a6:c9:5e:
                    71:69:56:bf:b9:41:36:d7:ae:80:ef:e2:f7:71:f3:
                    e7:5d:b8:b4:84:6d:63:32:bf:54:a9:ef:42:4e:9a:
                    32:44:06:ac:37:5f:0e:e5:71:9f:24:c5:f2:79:21:
                    16:eb:51:73:99:be:2c:3c:ab:5f:da:c5:ae:f3:e4:
                    0d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:04:E3:1A:04:E1:35:EE:9D:3C:67:9F:F5:0A:27:3C:51:BE:9A:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/33ab4c6c-eb8e-3a4d-8d37-aadb0b7fe881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.216.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:bd:4b:65:f0:a8:e2:20:27:f3:4d:1a:00:f4:f1:20:c2:e7:
         0a:15:fd:b2:34:b8:34:be:9a:74:77:da:9d:ff:d4:36:97:f3:
         7d:6c:56:6f:52:7e:93:6e:c1:99:a1:2e:74:7c:0f:17:2b:a9:
         46:f6:e9:20:d6:3d:fc:65:1a:c2:86:51:e5:d4:50:a5:b0:54:
         73:ca:3c:b6:c5:f9:23:2d:fa:ef:d2:c3:d7:7e:72:fc:04:9f:
         49:7b:8a:91:0e:ca:2c:b2:69:d1:0b:1b:1e:0d:4e:6a:84:47:
         66:9c:ed:e4:8a:53:f2:d9:b9:b0:bf:30:64:67:16:43:41:13:
         80:3a:ae:be:fe:46:80:2a:49:22:30:48:a8:42:27:ea:cd:ae:
         50:ef:85:7d:59:6e:72:2a:e9:f5:f1:b1:bb:45:65:fd:2b:69:
         e9:87:8e:67:ad:31:d7:4e:48:0a:58:a4:45:0a:2c:08:2d:06:
         b2:8f:a2:3b:73:8e:b6:ef:aa:be:a4:bc:4e:b4:5f:08:6b:16:
         57:b1:ab:ca:e0:84:86:79:db:54:5d:d8:eb:07:21:44:5d:4c:
         e4:69:50:36:2a:27:57:b9:83:57:b4:83:a9:dc:c8:55:04:88:
         a6:bd:51:2c:f4:a5:76:50:e2:82:5e:b0:92:8b:5a:e5:79:23:
         b1:a8:d2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:15 2026 by rpki-client