Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/ab8f1823-eadc-3114-bad2-f850dd2f7a5f.roa
File:                     ab8f1823-eadc-3114-bad2-f850dd2f7a5f.roa (raw, json)
Hash identifier:          OHHu4UW0hk8AQ3T3ZmE2N4XAVwKmkGuMa+FRbZyZ7oM=
Subject key identifier:   DE:A7:17:0D:C2:86:8B:59:DE:49:E6:E4:1A:35:FE:B6:D6:CF:21:D1
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F4328584D0EA7BF32B86B3249D31B4C00
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/ab8f1823-eadc-3114-bad2-f850dd2f7a5f.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     2936
IP address blocks:        128.55.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:bf:32:b8:6b:32:49:d3:1b:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=c3a50894-22b3-43f8-9b70-763ad583d1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:74:73:e7:9d:0f:57:8c:e2:93:48:f2:14:e9:
                    d3:85:42:dd:5e:b5:0b:9e:b4:48:74:31:2c:55:38:
                    07:26:12:26:cf:1e:81:f3:a3:69:a2:09:e6:fb:6c:
                    9f:9f:5d:f9:f3:df:bf:80:58:70:22:a0:0c:b2:4d:
                    67:b0:56:5a:30:ff:3a:66:c9:7f:d8:01:54:bb:1b:
                    38:b9:04:52:98:cf:22:80:cb:0c:38:64:a0:bc:e7:
                    64:c9:50:1e:a7:97:44:6d:4f:c7:84:e5:d2:be:43:
                    3c:6f:7d:53:24:f0:dd:47:50:a3:1f:64:82:c2:7b:
                    f2:da:20:b8:bc:ad:e9:a9:84:74:59:73:c8:b0:03:
                    5a:84:e9:26:a6:92:11:e3:f0:45:5a:76:26:a4:49:
                    f5:1f:25:a2:eb:ff:32:12:8f:ca:c0:e7:af:c1:a4:
                    5c:42:d9:94:92:27:59:e1:e6:4e:85:1a:3f:a1:4b:
                    65:2a:04:34:87:ca:14:6a:26:61:cd:5e:e7:e7:b5:
                    25:0f:85:5f:3f:b3:ed:41:2c:d2:64:e5:26:68:75:
                    a6:bf:24:59:55:1c:43:9f:30:ef:b3:1e:28:69:e3:
                    c8:d8:d4:2d:4c:76:20:88:fa:c9:6b:0b:49:ec:a5:
                    a2:3a:e3:ed:5a:7b:eb:e6:96:4d:d5:26:66:d6:c7:
                    e3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A7:17:0D:C2:86:8B:59:DE:49:E6:E4:1A:35:FE:B6:D6:CF:21:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/ab8f1823-eadc-3114-bad2-f850dd2f7a5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e9:a1:6f:23:3d:48:8a:a0:07:90:c7:ba:99:14:67:e1:8d:
         57:44:9a:6c:af:3a:74:d2:b8:24:cf:e7:0e:07:e1:1a:a4:25:
         72:0a:35:14:ed:8d:11:91:50:40:ad:0c:60:5f:4c:8a:fd:19:
         34:d0:18:fd:24:70:84:07:15:df:b2:2f:b3:0c:77:b6:48:82:
         2f:8f:9e:02:4f:61:16:83:5d:95:f8:49:48:db:9f:bd:3d:4a:
         5e:48:31:d0:91:3e:f8:8b:d5:59:8c:74:5c:9e:aa:57:2d:a0:
         a1:86:85:40:17:7b:e1:bf:35:a5:1f:57:f6:f9:a8:07:d9:af:
         23:d4:71:8c:01:21:54:04:cc:17:c8:f5:50:e6:c5:ac:c6:3f:
         f6:66:68:99:83:fc:09:e7:a2:57:96:69:72:c6:6a:42:b0:75:
         4a:7e:b0:91:01:e0:e7:c0:97:02:2b:1e:3c:e9:aa:66:b6:d5:
         24:b3:62:f8:24:d0:7f:db:e5:db:ca:a5:e8:0b:73:28:73:2c:
         38:fb:91:5b:0f:f6:bb:0c:5b:bc:8c:1c:27:10:41:41:0a:61:
         2a:18:59:ee:0d:b5:55:94:5f:61:3f:20:10:9f:7c:8f:88:0d:
         75:e4:3c:49:a1:ae:63:48:76:f8:b7:0b:ae:42:46:44:3d:05:
         fb:f8:06:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:59:04 2026 by rpki-client