Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/41aac38c-fb99-353e-82a1-641e4b6d6f02.roa
File:                     41aac38c-fb99-353e-82a1-641e4b6d6f02.roa (raw, json)
Hash identifier:          J8a8adjyDEVHh5wCWudHiFXoQiiUqVwSay8/4LpYrAM=
Subject key identifier:   B6:B3:2D:5A:39:90:99:2F:3B:B8:30:75:5C:84:76:50:0F:8F:3E:59
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E07316324058840BA60BC2F80
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/41aac38c-fb99-353e-82a1-641e4b6d6f02.roa
Signing time:             Mon 01 Jun 2026 14:38:41 +0000
ROA not before:           Mon 01 Jun 2026 14:38:41 +0000
ROA not after:            Sun 30 Aug 2026 14:38:41 +0000
asID:                     203106
IP address blocks:        16.216.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:31:63:24:05:88:40:ba:60:bc:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jun  1 14:38:41 2026 GMT
            Not After : Aug 30 14:38:41 2026 GMT
        Subject: CN=984d24c0-ec41-4c66-b650-593a42ef17fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:58:32:98:79:0e:9e:74:ef:f1:da:dd:5b:
                    28:92:fe:ce:84:9c:e2:dc:94:78:24:16:f4:90:41:
                    da:a3:db:74:de:da:b1:82:24:07:8f:fa:a3:e4:c4:
                    da:79:fe:c3:44:25:e8:7d:02:63:7b:2e:7f:ce:da:
                    44:1e:22:24:14:5b:03:91:05:93:a8:14:0e:56:46:
                    de:40:58:16:2b:41:5a:76:ee:fa:72:be:d1:71:87:
                    40:f7:51:80:ad:28:a3:1d:e4:05:04:05:8e:5e:7f:
                    d0:ef:08:ec:ba:5a:93:c2:a7:86:5e:3e:f3:90:af:
                    8c:77:fb:e1:e0:04:d4:95:0e:12:d2:22:62:93:db:
                    07:51:d7:c7:94:4e:20:78:27:a3:d7:41:20:41:1e:
                    6f:01:83:ac:7c:78:f9:a2:79:36:e0:61:2f:c6:f0:
                    39:93:44:0d:a1:9a:f4:4e:15:ec:8b:a5:03:15:64:
                    7a:fe:8a:62:21:37:6e:10:52:30:c3:05:79:00:85:
                    43:c0:d6:6e:f9:19:b9:af:8f:2c:14:c6:27:db:93:
                    26:5c:91:e0:4e:d3:44:8a:ef:91:ed:c6:03:ca:91:
                    f9:df:de:a8:29:ac:0d:7a:32:c3:fe:c2:c4:80:4f:
                    13:67:1a:51:5a:93:58:76:8b:8b:b6:45:ee:4d:7c:
                    48:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B3:2D:5A:39:90:99:2F:3B:B8:30:75:5C:84:76:50:0F:8F:3E:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/41aac38c-fb99-353e-82a1-641e4b6d6f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.216.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d5:4c:81:93:dd:72:dc:fc:61:85:1d:ce:a3:43:50:55:a6:
         ed:df:33:a6:54:38:b8:a0:39:bb:e5:f7:58:1a:2b:00:88:ee:
         10:a1:99:a1:b0:51:89:c3:64:33:49:a8:fe:ab:16:25:25:37:
         b4:78:bd:55:51:d7:36:70:e6:90:67:fa:b2:2e:c1:77:89:84:
         a6:0c:d2:08:98:a0:54:19:08:2d:07:7e:0b:cc:c3:df:b1:f4:
         a0:e4:28:dc:f2:b2:51:79:36:f8:cd:24:c5:0d:ce:6d:9f:e5:
         44:c1:35:1e:cc:5b:b2:5f:0e:b7:14:08:01:0d:17:9d:3c:ee:
         c2:36:3b:cd:0f:95:2b:1c:ce:41:52:db:86:66:19:af:b6:8e:
         56:87:f7:d7:14:b0:c5:84:3b:b8:78:91:a7:54:8e:52:9c:73:
         c2:eb:b0:db:e7:20:56:a1:6c:07:da:46:fe:80:08:3b:9d:0f:
         66:aa:0f:24:95:ac:94:ee:6f:f5:4a:07:29:7c:ff:8d:84:7e:
         1b:f0:92:11:f1:6d:5d:b3:1c:fb:97:61:cd:5c:57:93:51:6b:
         bf:1a:1e:84:b1:bd:a9:1b:38:84:1d:d2:87:a0:51:08:9a:d1:
         63:b5:39:0b:84:0f:31:48:90:17:1c:b5:6c:b7:57:c7:72:2d:
         e6:82:80:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:05 2026 by rpki-client