Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5e73c8c3-06c0-3637-83b7-c12d05ba1e54.roa
File:                     5e73c8c3-06c0-3637-83b7-c12d05ba1e54.roa (raw, json)
Hash identifier:          qprqNYabpqcL0rOc+vIoA+Dk6wcu8qV/Zkn5mQ4C8g0=
Subject key identifier:   14:6B:EC:FF:CF:68:86:B9:2F:83:8C:EB:9F:13:1F:A6:23:FE:43:4E
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E25FC0BC9743B2856B1C3F600
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5e73c8c3-06c0-3637-83b7-c12d05ba1e54.roa
Signing time:             Fri 12 Jun 2026 15:21:16 +0000
ROA not before:           Fri 12 Jun 2026 15:21:16 +0000
ROA not after:            Thu 10 Sep 2026 15:21:16 +0000
asID:                     402252
IP address blocks:        16.216.137.0/24 maxlen: 24
                          16.216.150.0/24 maxlen: 24
                          16.216.244.0/24 maxlen: 24
                          16.216.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:fc:0b:c9:74:3b:28:56:b1:c3:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jun 12 15:21:16 2026 GMT
            Not After : Sep 10 15:21:16 2026 GMT
        Subject: CN=9b87a17d-4e2f-4a52-aff3-7bed8933ba10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:aa:a9:98:bb:44:ff:54:e9:92:f6:83:fa:
                    7a:c5:10:7e:89:2b:84:fa:b3:69:d8:6d:56:e1:8a:
                    a0:58:a2:51:cd:4f:53:4d:df:29:3f:4d:b6:ee:9b:
                    4b:4d:fd:a8:a9:95:d4:72:c4:01:7e:06:83:57:e7:
                    90:af:82:69:d6:49:c9:fc:20:5f:02:f2:36:f9:85:
                    c2:41:f5:7e:e4:da:63:09:f3:5b:dd:6e:3d:e7:01:
                    09:1f:ef:6e:20:ab:fb:7d:8b:aa:67:a1:b1:65:25:
                    76:ff:86:03:80:bb:d2:f6:38:23:21:49:48:e8:b5:
                    5f:1c:cd:bf:51:16:a1:1e:60:aa:09:c8:14:b7:4b:
                    38:99:6c:8c:22:4c:39:8a:87:99:e3:f0:d5:7e:7f:
                    fc:dc:0a:a1:ae:97:ad:a1:da:33:76:6c:a7:2e:85:
                    3d:0e:45:af:fb:c7:f4:0a:89:50:68:57:13:7a:da:
                    2d:a9:d1:5a:5c:7d:5c:b8:26:30:2a:7c:1f:8f:56:
                    c5:d8:38:51:cc:ed:87:58:a0:fd:c8:fe:b6:23:44:
                    a8:0a:3b:76:0d:65:45:57:e1:c4:4a:42:5b:96:b7:
                    b8:fc:c9:33:7e:04:cb:a5:42:29:d0:f3:f6:a0:92:
                    92:3d:30:09:a9:1e:3f:75:07:80:2e:70:ce:22:f1:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6B:EC:FF:CF:68:86:B9:2F:83:8C:EB:9F:13:1F:A6:23:FE:43:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5e73c8c3-06c0-3637-83b7-c12d05ba1e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.216.137.0/24
                  16.216.150.0/24
                  16.216.244.0/24
                  16.216.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:69:e0:bb:0d:86:58:a7:d0:6e:b3:f0:1e:31:e5:71:6c:83:
         43:84:60:2b:2b:00:1d:33:2c:dd:88:4c:0e:c3:07:7b:bd:1e:
         ca:9f:63:af:b8:37:1b:ad:74:6e:65:14:0e:62:dd:63:a1:fb:
         99:14:d9:c3:3e:c3:50:9d:f2:c3:20:24:d9:ec:8d:d8:ba:c5:
         e8:db:b8:85:aa:56:a6:12:fe:b6:d1:1c:98:df:0d:c5:9b:b8:
         9b:45:b0:37:d7:2c:3c:fc:21:54:ec:fd:98:88:9e:78:42:b4:
         bd:8c:ef:fb:45:1e:50:2c:cd:65:f5:de:21:87:0f:56:43:0d:
         52:6d:b5:8d:69:1d:b0:61:74:5f:cb:9e:2d:9b:d4:42:c3:b5:
         9e:cd:fc:ba:25:02:ea:53:7a:eb:6d:11:47:5a:0d:55:01:9a:
         8f:06:85:08:01:3a:9b:7a:46:ed:ca:21:cd:ab:61:af:fa:c4:
         74:4d:43:ef:80:f9:e0:83:01:26:29:c1:e2:a4:c3:4c:f2:b8:
         3d:55:8c:45:51:7c:05:46:57:6e:ed:ac:be:f8:ca:29:ce:b5:
         21:a1:94:3e:e1:62:07:97:25:d7:e0:71:7f:ee:fd:a7:f9:85:
         a0:91:50:5d:11:83:0f:95:39:68:75:69:e3:0e:c7:75:25:77:
         65:31:1c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:40:21 2026 by rpki-client