Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4f0b606b-9d7c-368c-8df3-0f5937e208b6.roa
File:                     4f0b606b-9d7c-368c-8df3-0f5937e208b6.roa (raw, json)
Hash identifier:          Sp0Q5odSNDhaX4jsqFN4cQwaVPJQq4hkMW2KdmkSfTA=
Subject key identifier:   84:0B:26:03:D6:82:95:F8:79:51:03:4A:4B:0B:B6:40:0D:14:BF:51
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E6B0A20336268D861F172B580
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4f0b606b-9d7c-368c-8df3-0f5937e208b6.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     8635
IP address blocks:        16.240.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:20:33:62:68:d8:61:f1:72:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=c9289191-d712-40e5-9e04-9bb05d38813a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8a:78:4e:69:8d:55:49:53:4a:39:7e:12:c6:
                    34:26:4e:f5:fa:b2:0b:16:d3:e6:08:be:ab:bb:81:
                    77:6e:14:f1:61:6c:01:1b:55:df:73:f5:10:f6:99:
                    f3:01:1b:fa:6b:b9:69:32:f9:ae:38:bf:ff:17:45:
                    ff:d5:e4:e1:7c:1f:15:96:12:dc:d1:6d:9b:2b:53:
                    11:01:32:34:f8:a2:b9:13:aa:2a:99:48:fc:21:d7:
                    2e:46:f0:ba:51:43:aa:3d:c8:b4:19:ba:f1:c0:1d:
                    aa:8b:33:da:d6:75:e2:13:27:0a:99:a1:56:61:9e:
                    69:dd:0e:ed:f1:a7:24:ab:f4:a1:7b:5e:da:d7:f5:
                    ff:d9:d7:91:e9:b1:91:6b:0d:1e:37:93:fb:29:fa:
                    cb:54:a9:83:ea:cc:58:d5:32:35:7b:90:ae:45:1a:
                    0f:a7:d6:ae:11:08:4d:ea:f1:cd:4e:d6:69:29:ed:
                    f3:fd:3d:b3:f6:3b:1c:4b:4c:a0:b1:ca:62:75:3c:
                    92:cf:19:30:8f:ae:54:b8:d4:4d:4c:90:92:f9:6b:
                    2d:d9:59:3c:db:fc:ba:98:0c:77:d6:61:6f:28:f0:
                    6b:7c:31:de:db:e8:11:2c:18:6a:75:70:23:cd:8c:
                    66:81:1f:96:22:7b:48:0a:d0:48:72:9c:37:83:0f:
                    c6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0B:26:03:D6:82:95:F8:79:51:03:4A:4B:0B:B6:40:0D:14:BF:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4f0b606b-9d7c-368c-8df3-0f5937e208b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.240.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f9:ad:67:97:3b:eb:2c:b7:2e:55:ec:c0:b1:e9:aa:8d:50:
         dc:30:6f:52:3b:fc:03:20:06:fc:80:26:87:4a:58:f3:c8:9d:
         59:a7:8b:5b:9e:db:9b:8f:fe:2b:ed:37:b2:24:08:50:96:d1:
         8d:ce:f5:e4:3a:75:b5:2d:d5:af:26:d6:3b:9f:98:51:15:90:
         b9:ac:70:43:c3:f7:24:ef:7b:cf:eb:bd:5f:31:6f:80:5e:ec:
         42:d2:ad:51:00:1d:78:f3:8b:12:bb:b5:87:dc:da:3f:64:c6:
         96:20:16:d1:f3:bc:de:b3:d2:51:cc:37:9a:e5:e7:1c:3f:90:
         b0:13:47:e6:17:c0:55:98:fa:db:20:4b:f1:7e:6d:c7:a5:d2:
         08:00:b6:3d:89:c9:e8:21:1b:c0:a9:35:3a:e2:e2:f0:65:3e:
         fd:df:6b:f7:d9:19:58:af:2f:78:91:78:c0:03:98:11:96:94:
         70:bc:be:72:c2:fa:2f:bf:19:50:1f:a0:fe:37:e5:9a:7c:0f:
         03:23:2d:4a:4f:cc:4e:83:4b:d0:33:d7:fa:e7:ed:a5:e6:7b:
         28:67:1e:6a:b6:57:1d:a7:45:1e:4a:fa:2c:5c:59:c1:9f:9c:
         ab:f3:92:dd:b6:52:8d:1c:58:e9:69:89:6d:04:11:50:0e:15:
         84:74:09:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:44 2026 by rpki-client