Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/33ab4c6c-eb8e-3a4d-8d37-aadb0b7fe881.roa
File:                     33ab4c6c-eb8e-3a4d-8d37-aadb0b7fe881.roa (raw, json)
Hash identifier:          fRaiJZFqd8pzOxVLInO4O+lBuHBSH18dQR5srlKDCMg=
Subject key identifier:   70:36:23:54:30:C8:3F:84:37:B2:68:19:DB:C5:E1:FD:27:F8:B6:CC
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E07E49E29E1F54A6D6E11DAE0
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/33ab4c6c-eb8e-3a4d-8d37-aadb0b7fe881.roa
Signing time:             Mon 01 Jun 2026 20:39:48 +0000
ROA not before:           Mon 01 Jun 2026 20:39:48 +0000
ROA not after:            Sun 30 Aug 2026 14:52:42 +0000
asID:                     151389
IP address blocks:        16.216.104.0/24 maxlen: 24
                          16.216.111.0/24 maxlen: 24
                          16.216.232.0/24 maxlen: 24
                          16.217.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:e4:9e:29:e1:f5:4a:6d:6e:11:da:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jun  1 20:39:48 2026 GMT
            Not After : Aug 30 14:52:42 2026 GMT
        Subject: CN=0b8fd304-c0ec-44d5-b275-6422b94cc53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:c8:4a:f7:9b:43:92:81:54:9c:8f:55:92:
                    99:8d:d5:45:c9:a1:40:ee:b4:b3:79:f3:e8:16:f9:
                    dc:23:b2:95:96:ba:9e:78:dc:ab:ff:01:0c:2d:3a:
                    55:c1:23:ee:77:a0:fc:a4:ba:4b:dd:d2:80:cc:42:
                    2b:02:c9:39:21:d5:b5:79:e5:bd:55:b9:1f:83:86:
                    e4:d6:25:f4:01:6a:cf:5f:81:57:d1:f6:bc:54:c8:
                    dc:31:fe:24:ac:9c:24:eb:28:6b:01:d4:03:59:22:
                    3c:88:0a:15:96:ce:c2:f5:3e:be:42:12:bc:29:85:
                    ea:c3:c6:04:11:d1:43:63:4d:36:fc:4d:cd:97:e0:
                    d1:8c:f1:04:60:40:4b:cd:fb:7c:04:e8:2c:55:4f:
                    44:54:4d:ba:90:87:6c:53:a6:17:27:b6:e6:7b:86:
                    3e:9b:31:fe:45:cf:72:a6:15:28:80:71:7a:13:1e:
                    43:05:27:20:6d:9f:ed:d4:22:63:69:91:04:f2:2c:
                    8e:51:d6:1d:22:08:a7:df:97:e9:28:d3:92:b1:3e:
                    5d:3e:0a:ac:51:90:9a:84:bd:7d:b9:bc:19:7c:57:
                    bd:65:3a:4f:ad:a6:04:61:8c:5b:e1:4b:e3:d0:7a:
                    79:b6:aa:db:52:d6:67:a6:f1:58:c5:71:52:e0:d7:
                    62:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:36:23:54:30:C8:3F:84:37:B2:68:19:DB:C5:E1:FD:27:F8:B6:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/33ab4c6c-eb8e-3a4d-8d37-aadb0b7fe881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.216.104.0/24
                  16.216.111.0/24
                  16.216.232.0/24
                  16.217.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:7a:c7:e1:3a:4e:fd:39:39:73:0d:f4:66:8c:3a:e4:2e:60:
         fb:72:a7:ef:90:85:36:e3:2a:8b:96:90:6b:01:47:99:eb:9e:
         39:19:ef:bb:91:45:dc:36:ce:a1:2d:70:c2:4f:87:e2:3d:7c:
         7d:f7:3b:77:fe:82:22:44:b0:e1:c0:ee:3e:8e:b8:26:28:1c:
         18:1c:78:8f:4a:49:1f:ca:63:40:87:8c:97:95:be:63:51:cb:
         91:b7:fb:f8:c6:c9:42:b5:01:91:64:14:86:01:24:7c:c4:74:
         68:24:62:56:83:5f:12:81:29:94:db:0c:a7:6e:96:21:85:86:
         80:cd:27:97:8b:2b:05:9f:89:3e:fa:01:61:41:e6:99:58:9c:
         32:fd:22:72:8f:ec:d3:80:43:0b:b4:0c:10:e5:88:66:ca:8b:
         94:d2:c9:84:a8:9a:43:89:04:c5:cb:d0:91:5c:b1:7b:0f:57:
         b3:fe:5a:01:c0:6f:d1:9c:c2:ea:1d:e2:49:8d:cf:cf:f5:77:
         7d:c1:95:33:8c:82:48:93:7b:b1:9e:29:85:b1:c4:01:6c:f8:
         76:be:f4:f0:54:85:d6:1c:04:8a:d8:a3:0b:d4:29:07:fa:a2:
         e4:cf:b0:3a:de:b6:2d:72:48:0e:24:a3:88:dd:db:96:b7:5b:
         c2:7a:a6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:18:20 2026 by rpki-client