Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/74e3e6be-600e-355b-b9b5-aa3100a0a5a1.roa
File:                     74e3e6be-600e-355b-b9b5-aa3100a0a5a1.roa (raw, json)
Hash identifier:          mFmIBWSf6MqdB7ljVwmNMGCNyOSJKfr7wjPME1zwLwk=
Subject key identifier:   AD:F3:A4:2B:1E:7A:37:1E:AB:B5:93:1D:C3:EC:24:2A:AA:0C:A1:78
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E2310D781667DAB5335D3D200
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/74e3e6be-600e-355b-b9b5-aa3100a0a5a1.roa
Signing time:             Thu 11 Jun 2026 14:15:44 +0000
ROA not before:           Thu 11 Jun 2026 14:15:44 +0000
ROA not after:            Wed 09 Sep 2026 14:15:44 +0000
asID:                     2914
IP address blocks:        16.216.6.0/24 maxlen: 24
                          16.216.7.0/24 maxlen: 24
                          16.216.8.0/24 maxlen: 24
                          16.216.9.0/24 maxlen: 24
                          16.216.13.0/24 maxlen: 24
                          16.216.14.0/24 maxlen: 24
                          16.216.15.0/24 maxlen: 24
                          16.216.16.0/24 maxlen: 24
                          16.216.17.0/24 maxlen: 24
                          16.216.18.0/24 maxlen: 24
                          16.216.20.0/24 maxlen: 24
                          16.216.21.0/24 maxlen: 24
                          16.216.23.0/24 maxlen: 24
                          16.216.24.0/24 maxlen: 24
                          16.216.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:23:10:d7:81:66:7d:ab:53:35:d3:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jun 11 14:15:44 2026 GMT
            Not After : Sep  9 14:15:44 2026 GMT
        Subject: CN=5dcd85c4-43e7-4add-a0cb-78b8edae4e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:62:c5:51:5e:f9:cd:ce:9f:95:3a:58:b5:bc:
                    a2:e4:40:ed:86:85:ac:08:76:ef:6a:53:a2:f0:f9:
                    0c:3b:13:91:ab:f4:c1:f0:78:25:e8:c3:5c:07:e7:
                    f9:66:35:d3:6e:78:e5:b1:1b:b5:c4:a1:13:69:b9:
                    20:7f:86:d6:69:a4:d3:e9:fd:d9:72:87:12:49:45:
                    ec:b6:9f:c6:21:10:f8:e5:4f:2b:35:04:b3:58:31:
                    98:4a:63:72:44:c2:70:57:73:67:1a:a3:d7:f0:98:
                    5d:fe:c2:b7:5f:ae:2a:ba:be:66:e2:c6:51:32:4e:
                    d7:16:0e:d4:db:db:40:2d:c9:3f:ea:67:9a:6a:e6:
                    31:03:23:21:d9:32:3b:b8:dc:21:b1:c2:0e:5b:5c:
                    8e:85:cf:ec:35:03:4b:64:14:20:5b:29:d7:c0:4a:
                    83:88:b0:2d:d5:9b:2f:65:70:6b:ec:f3:dc:38:68:
                    3a:72:3d:0f:d3:c5:6b:0f:a6:21:9d:4d:6b:7d:7a:
                    ba:fe:53:ad:1a:14:0a:b1:c5:72:ca:58:c9:6e:a5:
                    db:c5:36:a7:4e:4a:50:e1:71:a5:4a:99:90:09:72:
                    71:f1:42:e7:5e:3a:2c:ef:c1:1f:f3:2a:e2:5d:b8:
                    ae:a2:09:3a:6d:e0:15:e8:86:47:18:33:fb:1a:8e:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F3:A4:2B:1E:7A:37:1E:AB:B5:93:1D:C3:EC:24:2A:AA:0C:A1:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/74e3e6be-600e-355b-b9b5-aa3100a0a5a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.216.6.0-16.216.9.255
                  16.216.13.0-16.216.18.255
                  16.216.20.0/23
                  16.216.23.0-16.216.25.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:83:15:31:87:a7:b1:95:d8:7f:98:ec:a6:8f:ff:1a:d8:50:
         ca:b2:44:8b:f5:64:b6:3b:fa:e2:d4:cf:97:71:ce:8a:c6:ce:
         f1:37:79:13:86:48:09:4c:98:f1:d6:3a:ec:65:7d:ad:f7:25:
         7b:62:17:ee:a8:c0:0f:68:8f:62:93:3f:b7:a1:2b:4a:b9:4c:
         e6:3b:40:f1:fd:d6:1d:26:d9:df:c2:1d:54:70:c0:2b:92:50:
         2a:36:f5:40:d5:cd:1b:0e:02:90:79:29:4d:b2:4c:61:dd:8c:
         03:90:cd:56:aa:c3:b1:bd:6a:94:37:d8:5d:48:f4:4d:b4:73:
         f6:47:ec:c7:e5:34:80:80:38:67:64:c2:3f:0f:71:50:1d:13:
         71:be:0c:a7:3b:07:85:03:ae:fe:f3:a4:c1:78:34:68:1e:8c:
         ad:a5:a2:c7:fb:f7:95:5a:73:08:76:00:f1:89:43:c3:1a:1a:
         c6:0d:85:34:bb:16:3a:da:d5:b0:dd:2c:8a:e6:22:02:4d:d2:
         b0:2b:96:20:63:18:40:5f:20:70:d0:19:c2:2f:74:42:b3:df:
         79:ef:85:83:ca:1f:c6:d8:c8:5d:e9:f3:fa:85:43:34:42:6b:
         bb:07:5b:8a:13:55:8e:69:ca:e9:92:bb:6d:96:f2:49:48:92:
         79:4c:a5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:27 2026 by rpki-client