Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa
File:                     9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa (raw, json)
Hash identifier:          U5aLsLU99O6cqgFMt4qLGqHpmK0HfeOHwatpAZR9bHo=
Subject key identifier:   0E:1D:9B:C2:46:8E:1D:15:19:47:EB:F3:40:12:6B:8F:81:34:DA:3F
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E6F3A29CD51FD85F1EBE8C7C0
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     60410
IP address blocks:        16.10.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:29:cd:51:fd:85:f1:eb:e8:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=53be63a9-dd20-4137-b93b-c0378256f212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:dc:31:8e:e4:ac:e0:74:8c:bb:93:05:cc:
                    19:73:99:59:91:f6:93:09:50:92:ef:14:28:4f:71:
                    da:e2:c0:60:4d:e6:9b:10:7c:21:6f:e5:46:5b:c9:
                    65:d4:4d:c6:8c:b1:35:f5:78:38:16:1e:95:d7:65:
                    55:d4:40:4b:e9:49:33:a6:e7:8b:20:8d:b1:4f:72:
                    ab:8a:c2:7f:65:67:e7:fb:d8:9d:b3:a3:bb:2c:cc:
                    02:d8:bc:e6:c2:59:b2:dc:16:b5:5f:63:28:50:60:
                    cd:01:d7:f2:5a:9c:3f:ac:b3:e0:ff:c6:8f:4d:75:
                    6e:fe:39:fc:6f:41:31:77:d3:a2:bc:2c:fe:ec:74:
                    68:16:b2:b9:97:9d:91:50:27:f9:fa:59:ed:5f:f9:
                    c3:3d:2f:e3:2e:f3:54:0a:f4:cc:db:7d:21:29:17:
                    3d:81:f5:6d:92:03:93:37:36:85:98:b6:8f:4b:f8:
                    d5:cf:ec:a1:03:9a:c1:45:f1:1a:40:04:3f:fd:7b:
                    c5:25:63:05:6d:7d:6f:4b:33:26:87:77:17:4d:a9:
                    0e:1b:71:9c:67:9c:e8:cb:10:a8:e8:67:ae:94:80:
                    5d:0e:fa:0d:6b:81:ff:fe:c0:34:08:fb:59:52:71:
                    c8:07:2d:e6:c3:bc:64:b2:6b:72:1a:54:b9:7c:9e:
                    27:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1D:9B:C2:46:8E:1D:15:19:47:EB:F3:40:12:6B:8F:81:34:DA:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9b19c2b8-548b-3717-b4c2-25f3fb650aa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.10.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:0c:17:e7:47:b4:dc:07:ac:9c:18:8c:5c:69:8a:39:22:ac:
         c6:b3:34:d6:f6:bb:ce:27:4a:2b:1d:18:79:ca:94:7c:87:2f:
         ef:27:73:f7:1c:1f:32:9a:93:0c:e7:f5:e7:8f:6c:78:78:ae:
         1d:d8:83:b4:5b:1a:9d:49:0d:30:26:41:b3:9f:53:13:6a:c1:
         79:60:90:88:2d:f2:7f:ce:07:15:69:b7:f5:c4:4a:5d:48:63:
         2b:8b:65:c4:b1:79:25:8f:5d:84:d8:20:de:8e:ac:59:2c:f1:
         b7:d5:3e:c1:f2:f2:19:48:c7:26:f4:a7:73:64:09:45:a5:c5:
         b8:f7:af:3b:39:bf:ec:b7:fa:16:6a:76:ac:8c:26:33:42:62:
         a1:e8:3a:9b:00:83:8a:d9:83:b9:bf:a3:99:41:ff:de:53:67:
         c2:68:f5:97:6e:a8:95:7b:a8:50:3b:7e:da:98:0a:44:58:f0:
         c3:96:94:ed:de:64:28:9d:58:fe:b2:21:14:5d:73:b0:9b:40:
         20:86:69:97:b7:c6:4b:47:38:8a:5d:71:7c:42:62:e4:2c:35:
         5c:e1:67:0e:2e:18:03:c0:24:f3:0f:a7:ab:7b:97:bc:5e:fa:
         c9:cd:0f:ec:2e:f8:1d:c5:99:1f:9c:42:3b:49:e3:75:54:94:
         24:18:32:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:05 2026 by rpki-client