Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/786fdd4e-7dac-3850-8d40-2529bc04bf81.roa
File:                     786fdd4e-7dac-3850-8d40-2529bc04bf81.roa (raw, json)
Hash identifier:          Db2C19s0N3BHTPF4bkl1nD3s63sV+Xcc5KSIWqWUtzk=
Subject key identifier:   F4:F8:F0:13:90:42:6F:49:D7:C3:87:A9:6E:0D:4D:D2:48:2B:98:10
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F30525DC775ADD69B8BD2CC80
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/786fdd4e-7dac-3850-8d40-2529bc04bf81.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     44947
IP address blocks:        16.5.5.0/24 maxlen: 24
                          16.217.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:5d:c7:75:ad:d6:9b:8b:d2:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=d209b68e-491c-46ad-a04f-3714b74dded8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:88:af:ca:15:56:b1:bd:88:2b:4e:6b:cb:2a:
                    3e:aa:1b:9f:9a:00:e4:e4:12:a5:50:cd:07:93:88:
                    f1:03:6a:ab:37:04:d5:a9:f0:da:f1:e4:b6:76:06:
                    69:d7:c5:35:34:2f:cb:72:71:5a:6a:f6:48:2d:6a:
                    e5:07:a4:4d:f3:24:f5:53:21:fe:f4:6e:f4:55:52:
                    a7:45:29:7a:3f:fd:e2:00:14:12:f0:37:ba:cd:7b:
                    2b:09:04:26:75:26:00:41:cc:e2:3f:86:64:2b:0b:
                    0d:04:e7:bc:63:27:d5:9a:be:c3:24:ef:8f:b4:e5:
                    29:e7:9a:29:80:ab:6c:bd:3d:26:fc:57:bd:bc:a4:
                    de:d2:46:44:17:af:fc:a8:8d:e0:4a:7c:b7:6e:d0:
                    32:05:2f:99:26:72:5b:00:c8:8c:ff:04:f8:0b:4c:
                    48:a3:b7:3f:c6:ad:49:3c:23:4a:ed:94:8f:3f:66:
                    24:dd:06:fc:ff:18:16:61:9a:57:78:16:4e:e2:63:
                    20:9d:ec:3b:e8:60:76:68:5d:1c:e5:9e:3e:9d:6a:
                    31:7b:57:79:51:ef:13:08:6f:1f:c9:45:7a:22:bd:
                    dd:d6:04:ca:27:67:17:ba:d7:e3:da:ee:eb:12:67:
                    75:24:c2:3f:68:82:72:9d:0b:5e:9a:6d:ef:e9:ce:
                    ca:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F8:F0:13:90:42:6F:49:D7:C3:87:A9:6E:0D:4D:D2:48:2B:98:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/786fdd4e-7dac-3850-8d40-2529bc04bf81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.5.5.0/24
                  16.217.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:76:b3:5c:24:d5:37:53:41:70:d6:9b:ab:b8:5f:0a:9b:69:
         c3:59:8a:73:08:1c:6b:18:63:10:ff:14:fe:4d:2e:93:a7:a4:
         87:ee:cb:e0:2d:b2:d3:07:92:1b:bd:8a:5c:47:c0:1f:a2:68:
         59:d0:5e:c2:06:5a:00:9b:76:ab:ac:25:5c:26:98:aa:9f:af:
         82:7c:f8:4b:f2:d5:9c:f3:3c:31:13:d2:d1:3c:3c:25:89:bb:
         07:7e:66:e8:f8:2b:7f:e1:2b:89:8d:8c:c5:9f:2c:51:a2:ee:
         75:6e:e3:c1:00:7a:4e:c2:70:ef:67:df:f5:69:54:e9:74:42:
         0b:55:42:5d:5f:d5:e0:65:aa:10:a1:37:3a:a7:41:38:e9:ed:
         d4:e2:20:75:f9:08:40:0d:38:a5:5c:31:13:03:8a:4f:b7:cf:
         b6:fd:19:a4:13:63:c4:64:c8:34:af:e4:81:4c:64:4e:af:9a:
         8b:b0:74:fd:30:b8:85:01:4f:49:aa:e9:bd:ac:a9:28:9e:a2:
         0a:7d:f8:c8:68:29:c3:f9:cb:24:78:22:85:39:87:c0:87:6f:
         63:c9:cd:72:1b:ed:56:23:44:c1:20:a5:4f:b4:da:2a:38:2f:
         03:da:2d:f9:2c:a7:2d:ab:be:e3:1c:7e:9f:fe:b3:46:bd:af:
         4b:0c:2d:59
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8wUl3Hda3Wm4vSzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk
YmZhMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk
ZDIwOWI2OGUtNDkxYy00NmFkLWEwNGYtMzcxNGI3NGRkZWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IivyhVWsb2IK05ryyo+qhufmgDk5BKlUM0H
k4jxA2qrNwTVqfDa8eS2dgZp18U1NC/LcnFaavZILWrlB6RN8yT1UyH+9G70VVKn
RSl6P/3iABQS8De6zXsrCQQmdSYAQcziP4ZkKwsNBOe8YyfVmr7DJO+PtOUp55op
gKtsvT0m/Fe9vKTe0kZEF6/8qI3gSny3btAyBS+ZJnJbAMiM/wT4C0xIo7c/xq1J
PCNK7ZSPP2Yk3Qb8/xgWYZpXeBZO4mMgnew76GB2aF0c5Z4+nWoxe1d5Ue8TCG8f
yUV6Ir3d1gTKJ2cXutfj2u7rEmd1JMI/aIJynQtemm3v6c7KOQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPT48BOQQm9J18OHqW4NTdJIK5gQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj
MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNzg2ZmRkNGUtN2RhYy0z
ODUwLThkNDAtMjUyOWJjMDRiZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2
NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj
ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl
YzA0Y2RiZmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAEAUFAwQA
ENkAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAp2s1wk1TdTQXDWm6u4XwqbacNZinMIHGsYYxD/FP5NLpOn
pIfuy+AtstMHkhu9ilxHwB+iaFnQXsIGWgCbdqusJVwmmKqfr4J8+Evy1ZzzPDET
0tE8PCWJuwd+Zuj4K3/hK4mNjMWfLFGi7nVu48EAek7CcO9n3/VpVOl0QgtVQl1f
1eBlqhChNzqnQTjp7dTiIHX5CEANOKVcMRMDik+3z7b9GaQTY8RkyDSv5IFMZE6v
mouwdP0wuIUBT0mq6b2sqSieogp9+MhoKcP5yyR4IoU5h8CHb2PJzXIb7VYjRMEg
pU+02io4LwPaLfkspy2rvuMcfp/+s0a9r0sMLVk=
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:23:10 2026 by rpki-client