Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa
File:                     9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa (raw, json)
Hash identifier:          LdHHu3xzBfrSAN4b7tpjGnJofPsoPQsFJCtdMqh76r0=
Subject key identifier:   83:EB:EC:B0:05:D7:43:12:A0:E9:53:50:45:E0:A7:F2:A6:9F:2B:6D
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584DBBA056356FF041712ACD6380
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     399185
IP address blocks:        16.0.56.192/27 maxlen: 27
                          16.1.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:56:35:6f:f0:41:71:2a:cd:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=332f5b18-c87f-4cfd-988f-d4243fac0342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:85:ce:76:ff:03:46:f4:37:fa:04:f4:69:
                    77:83:b4:97:99:69:9b:4b:e1:83:e6:1a:14:ce:cf:
                    7b:c5:fa:3f:b6:ca:da:35:a0:bd:eb:bb:29:f5:7b:
                    6a:65:9b:1b:2a:45:73:90:c5:20:0d:3d:aa:79:4c:
                    95:6c:18:1e:52:61:76:bf:3d:c9:68:a6:4f:e4:dd:
                    0c:0a:4c:b3:61:31:c0:51:f7:eb:87:d7:cf:aa:d1:
                    6e:d6:e3:1b:e7:5b:37:9d:37:71:42:a5:6e:8b:9e:
                    63:9a:86:f8:12:b1:28:5a:5b:f7:25:75:be:97:5e:
                    77:91:83:10:63:ff:e1:37:ee:a8:34:61:d3:f8:5e:
                    8b:cc:93:c5:1d:75:aa:bf:70:74:f0:61:2d:ac:26:
                    cb:fb:f5:db:d9:e7:6b:31:c7:ec:9e:42:eb:d3:b9:
                    a3:3c:d9:c5:d2:33:1f:0e:de:76:91:08:43:3d:0e:
                    67:11:6d:3c:d4:40:a0:61:91:89:ba:73:c8:dc:34:
                    ee:79:3b:80:50:91:37:6b:d1:cd:cd:ba:dd:58:51:
                    5b:38:bf:0b:1f:86:0f:b7:ea:d6:75:f6:8d:36:d2:
                    98:ee:52:21:86:4f:47:91:8c:72:45:00:95:61:a2:
                    6f:9d:a9:fc:6c:51:cd:4f:d2:2b:1f:d4:5a:e3:55:
                    c1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EB:EC:B0:05:D7:43:12:A0:E9:53:50:45:E0:A7:F2:A6:9F:2B:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.0.56.192/27
                  16.1.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c0:85:8c:fc:b3:8c:23:14:fa:f7:be:f2:6a:7a:51:ce:25:
         dc:70:11:24:33:38:27:fb:09:b1:1c:e9:f1:03:6f:32:a3:e4:
         30:1f:22:6f:28:82:9f:ec:f8:aa:55:80:42:35:d8:06:53:bc:
         a5:62:32:1f:bc:9e:3f:77:7a:4e:fb:e4:00:96:f5:f7:10:b4:
         5e:12:c8:b1:51:97:cb:00:7c:92:36:71:2f:c5:fc:e4:2b:0a:
         a0:9e:d5:77:46:13:8d:22:5d:7f:f7:9c:f1:1c:51:d3:95:e1:
         ca:b1:40:11:8f:93:4c:c5:e0:c5:b0:4f:75:c5:9e:ad:3d:0c:
         77:54:c2:59:2d:8b:18:09:5b:db:ce:13:c0:4f:83:09:d2:43:
         69:6e:1b:02:96:54:96:30:06:f9:68:fb:28:42:30:a2:9b:a4:
         54:43:b7:4c:9d:a2:41:07:c1:37:28:9b:14:be:c6:2f:f1:36:
         fc:97:16:ff:34:9a:18:fc:7e:33:a7:d5:b7:02:a0:02:cc:5e:
         80:f9:3d:ef:74:09:02:ed:7c:ca:fa:b4:44:b8:37:fc:ac:19:
         97:9b:96:10:28:c9:fa:23:55:9b:bb:8e:1c:4a:38:bf:d9:67:
         49:16:2d:d0:7d:6a:e4:23:7d:10:da:0a:01:91:4f:54:05:a7:
         96:cd:11:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:06 2026 by rpki-client