Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cf9288a5-553d-39ed-8325-631ac1035fe8.roa
File:                     cf9288a5-553d-39ed-8325-631ac1035fe8.roa (raw, json)
Hash identifier:          TS/sWF0utlNp29v2cDnrcK+9yG5EY+q42B0zKmxcv/Q=
Subject key identifier:   96:02:43:58:90:69:92:FD:EE:43:83:8D:FB:80:9F:CF:3F:77:0C:A4
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E85C98E996BA780F8F5D65000
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cf9288a5-553d-39ed-8325-631ac1035fe8.roa
Signing time:             Thu 16 Jul 2026 22:57:08 +0000
ROA not before:           Thu 16 Jul 2026 22:57:08 +0000
ROA not after:            Sun 30 Aug 2026 14:41:01 +0000
asID:                     33355
IP address blocks:        16.5.42.0/24 maxlen: 24
                          16.5.57.0/24 maxlen: 24
                          16.5.94.0/24 maxlen: 24
                          16.5.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:c9:8e:99:6b:a7:80:f8:f5:d6:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jul 16 22:57:08 2026 GMT
            Not After : Aug 30 14:41:01 2026 GMT
        Subject: CN=e64e9352-05a8-419f-932a-931dec3279a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bd:94:18:02:98:59:27:d5:8c:d0:38:f3:96:
                    9e:67:ea:42:99:fd:7a:fa:5e:38:c9:6d:ff:b5:44:
                    a6:ab:9d:b5:08:7e:45:3a:69:95:86:c4:a4:85:a1:
                    12:68:fc:49:29:8e:5f:d8:38:ae:87:73:37:f5:bf:
                    38:8e:61:47:a4:95:93:fa:ca:a5:8b:7e:d7:e8:1f:
                    1b:63:0f:80:6c:28:a2:a1:14:9c:1a:ce:68:8d:7f:
                    52:cc:dc:0e:c1:3b:25:30:4e:6a:4b:9b:73:fe:bf:
                    87:12:46:20:a9:c3:27:a6:2d:c3:ae:12:b6:80:a1:
                    4f:18:62:19:49:2a:e8:53:83:c1:77:3d:3f:6b:34:
                    69:49:43:b6:1b:19:de:22:4a:f9:47:b2:1d:7b:35:
                    bd:f4:08:5b:50:e2:02:ab:54:2b:99:ab:3c:7a:69:
                    80:65:bb:f2:93:bf:83:86:a9:63:dc:3b:4d:98:bc:
                    0d:56:74:6d:ea:19:8a:6f:1d:c1:f3:4b:e4:ed:4c:
                    81:29:09:ec:ad:57:47:21:2a:90:1d:ec:60:90:b9:
                    9f:9d:cc:c9:be:88:ba:95:b3:ba:dd:9b:3e:8b:f8:
                    78:bc:76:fb:13:67:32:8a:50:1c:c1:5b:1a:66:9c:
                    5c:2a:c0:10:79:60:1b:1d:9a:f5:46:26:35:dd:fd:
                    e1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:02:43:58:90:69:92:FD:EE:43:83:8D:FB:80:9F:CF:3F:77:0C:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/cf9288a5-553d-39ed-8325-631ac1035fe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.5.42.0/24
                  16.5.57.0/24
                  16.5.94.0/24
                  16.5.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:54:a8:38:17:68:26:5f:7d:f1:5a:0b:af:42:37:34:61:b8:
         4b:29:21:e4:53:75:f5:f4:fc:b8:7c:d0:6a:ff:fe:4b:9b:a8:
         26:2b:46:8e:a7:1f:50:31:19:38:dc:8a:1c:f8:b9:5a:b6:1c:
         0e:1c:46:6d:5e:af:5d:6f:13:e9:e8:36:c6:df:9a:61:95:ed:
         12:e7:2d:76:f7:9d:f3:6f:b2:6b:b8:63:83:6e:c8:bb:6c:70:
         b4:16:5d:57:3a:d3:d4:81:9b:07:33:13:99:5a:9d:53:c9:a6:
         df:9f:f2:71:9c:cc:2b:1c:8c:68:44:57:ca:99:cb:1b:41:f6:
         a8:97:63:d8:56:aa:b2:fb:88:53:a5:5b:c6:f6:51:5b:52:ab:
         4a:b7:32:fc:39:bf:52:f5:6e:4d:fb:ec:c2:58:9e:ff:88:33:
         b9:b1:8b:21:94:f4:c1:42:7a:59:f5:c4:f8:1f:54:09:4f:0b:
         d7:3b:73:39:bd:03:55:ef:44:e4:14:8d:39:5a:19:62:32:f6:
         61:c9:45:04:e5:75:e1:b2:2a:af:00:82:1a:db:d4:5d:74:24:
         05:bc:da:58:37:28:74:7f:ce:9b:d5:d7:de:2b:1f:41:d2:f4:
         42:ca:8e:40:8a:30:44:27:f8:0d:80:7d:07:61:11:bd:fa:2c:
         2a:1b:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:01 2026 by rpki-client