Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/92d9a475-c37d-32e7-ac82-79ca52b84db5.roa
File:                     92d9a475-c37d-32e7-ac82-79ca52b84db5.roa (raw, json)
Hash identifier:          CrXdwcUOoPilsCIDjlTHoWqC8benF4gBY2utOtZA1Hk=
Subject key identifier:   D0:92:88:83:72:D6:52:EF:5C:75:D6:DB:76:EB:8A:7D:02:14:0B:D3
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E95977B3CB1D3E0F979C0E280
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/92d9a475-c37d-32e7-ac82-79ca52b84db5.roa
Signing time:             Wed 22 Jul 2026 14:49:10 +0000
ROA not before:           Wed 22 Jul 2026 14:49:10 +0000
ROA not after:            Thu 10 Sep 2026 14:24:32 +0000
asID:                     201724
IP address blocks:        16.5.41.0/24 maxlen: 24
                          16.5.78.0/24 maxlen: 24
                          16.5.83.0/24 maxlen: 24
                          16.5.111.0/24 maxlen: 24
                          16.5.131.0/24 maxlen: 24
                          16.5.138.0/24 maxlen: 24
                          16.5.158.0/24 maxlen: 24
                          16.5.226.0/24 maxlen: 24
                          16.5.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:97:7b:3c:b1:d3:e0:f9:79:c0:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jul 22 14:49:10 2026 GMT
            Not After : Sep 10 14:24:32 2026 GMT
        Subject: CN=51fb0fd3-5d36-4ce6-a4ea-da0b42b1a94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:d5:ae:89:f2:2c:1c:c5:17:1c:fa:af:a6:
                    01:aa:6e:ef:da:23:18:71:d7:c2:c4:39:bc:f5:16:
                    59:39:e2:59:a2:f6:75:0a:84:27:79:5b:b5:df:9d:
                    88:1c:24:11:d7:14:2f:4e:9b:3a:bc:16:b9:81:15:
                    b7:78:15:d3:c4:a4:00:81:66:69:f4:c7:6d:1d:74:
                    c8:d8:6c:ec:56:bb:a0:97:c7:d2:ff:67:a7:7c:f5:
                    f7:d6:65:67:a8:4a:6c:9d:cb:9a:f5:7a:87:e8:1f:
                    bc:ab:39:94:5e:5b:93:a1:b5:b6:ee:23:0d:7f:0b:
                    ca:69:d5:09:b4:65:54:c3:b9:c8:50:4e:d8:d6:8d:
                    9d:3f:5c:1d:92:15:ca:fa:65:9f:1d:69:d7:b5:60:
                    1f:a5:da:ad:d2:81:d2:a1:31:e3:66:c5:ee:f4:93:
                    8c:5d:ba:dc:8a:4e:67:99:88:cc:b7:af:3c:99:b7:
                    1b:a7:fe:be:35:9a:0c:34:9d:ce:43:37:a7:3a:b7:
                    48:92:fe:d0:a5:cf:6b:eb:44:a0:4d:2c:a8:14:f4:
                    9e:dd:a7:88:3f:0e:fe:24:73:4f:08:2e:29:2a:f2:
                    57:69:02:6f:a0:17:b5:17:4e:fb:82:ad:bc:ff:f1:
                    78:62:60:d9:4d:3e:b7:a1:ce:65:c3:a8:47:4c:3e:
                    16:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:92:88:83:72:D6:52:EF:5C:75:D6:DB:76:EB:8A:7D:02:14:0B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/92d9a475-c37d-32e7-ac82-79ca52b84db5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.5.41.0/24
                  16.5.78.0/24
                  16.5.83.0/24
                  16.5.111.0/24
                  16.5.131.0/24
                  16.5.138.0/24
                  16.5.158.0/24
                  16.5.226.0/24
                  16.5.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:94:12:80:a3:7f:20:6e:cd:7a:d1:b9:71:75:49:f8:f2:b0:
         11:29:e0:3a:9e:af:11:ef:6d:98:0d:c4:eb:b9:86:b8:c0:41:
         64:c8:79:e3:35:db:39:4e:b4:77:4a:98:42:a0:1e:bf:16:c1:
         4a:95:6a:3f:be:cb:b9:d9:a6:d8:29:c2:0d:e2:58:82:ce:7c:
         de:02:7b:a1:2a:78:a4:c3:da:80:7d:44:73:cb:6d:aa:e8:8c:
         53:ea:b7:fc:ad:96:aa:61:b6:87:97:60:7d:99:c3:03:ad:08:
         2e:7d:7b:8c:b5:6a:d7:4d:e1:f6:df:82:6b:6c:07:e5:ef:57:
         09:12:c7:c7:d4:de:3b:c4:8e:ef:04:e7:ac:da:0e:71:bf:fa:
         e0:b1:46:93:db:97:99:f8:87:d1:39:7e:b1:b4:65:f4:ac:06:
         e2:d5:d4:8e:ea:e1:82:a7:7e:3a:91:5a:01:e3:cb:79:21:5b:
         42:76:ca:a0:36:fe:89:09:ac:80:6a:22:01:09:5f:ae:fd:93:
         94:e6:a5:a3:d4:95:8d:7a:52:5f:24:00:4f:7c:d8:45:21:04:
         a0:0f:7c:1f:bb:98:5f:8b:33:4f:f3:9d:2e:ed:96:1f:c4:25:
         c9:a6:f5:c3:cb:6c:50:92:b3:56:87:d0:32:16:66:86:02:62:
         35:2c:56:dc
-----BEGIN CERTIFICATE-----
MIIGczCCBVugAwIBAgIUAQ0Mn0MoWE6Vl3s8sdPg+XnA4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk
YmZhMB4XDTI2MDcyMjE0NDkxMFoXDTI2MDkxMDE0MjQzMlowLzEtMCsGA1UEAxMk
NTFmYjBmZDMtNWQzNi00Y2U2LWE0ZWEtZGEwYjQyYjFhOTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9LVronyLBzFFxz6r6YBqm7v2iMYcdfCxDm8
9RZZOeJZovZ1CoQneVu1352IHCQR1xQvTps6vBa5gRW3eBXTxKQAgWZp9MdtHXTI
2GzsVrugl8fS/2enfPX31mVnqEpsncua9XqH6B+8qzmUXluTobW27iMNfwvKadUJ
tGVUw7nIUE7Y1o2dP1wdkhXK+mWfHWnXtWAfpdqt0oHSoTHjZsXu9JOMXbrcik5n
mYjMt688mbcbp/6+NZoMNJ3OQzenOrdIkv7Qpc9r60SgTSyoFPSe3aeIPw7+JHNP
CC4pKvJXaQJvoBe1F077gq28//F4YmDZTT63oc5lw6hHTD4WrwIDAQABo4IDhTCC
A4EwHQYDVR0OBBYEFNCSiINy1lLvXHXW23brin0CFAvTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj
MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvOTJkOWE0NzUtYzM3ZC0z
MmU3LWFjODItNzljYTUyYjg0ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2
NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj
ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl
YzA0Y2RiZmEuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAEAUpAwQA
EAVOAwQAEAVTAwQAEAVvAwQAEAWDAwQAEAWKAwQAEAWeAwQAEAXiAwQAEAX5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABuUEoCjfyBuzXrRuXF1SfjysBEp4DqerxHvbZgNxOu5hrjAQWTIeeM1
2zlOtHdKmEKgHr8WwUqVaj++y7nZptgpwg3iWILOfN4Ce6EqeKTD2oB9RHPLbaro
jFPqt/ytlqphtoeXYH2ZwwOtCC59e4y1atdN4fbfgmtsB+XvVwkSx8fU3jvEju8E
56zaDnG/+uCxRpPbl5n4h9E5frG0ZfSsBuLV1I7q4YKnfjqRWgHjy3khW0J2yqA2
/okJrIBqIgEJX679k5TmpaPUlY16Ul8kAE982EUhBKAPfB+7mF+LM0/znS7tlh/E
Jcmm9cPLbFCSs1aH0DIWZoYCYjUsVtw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:31 2026 by rpki-client