Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa
File:                     9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa (raw, json)
Hash identifier:          MH1y3HMeG8p9IqyNJ/IfOlkjsNrh46da+9uHAeW25UA=
Subject key identifier:   52:59:07:DF:21:A6:0F:6E:D7:63:C6:08:1F:EF:4D:2C:9C:61:E6:F6
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F3E47EAA23E129AC4EE389680
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     399185
IP address blocks:        16.0.56.192/27 maxlen: 27
                          16.1.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:ea:a2:3e:12:9a:c4:ee:38:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=6f493eb4-36b8-4b29-9914-52c538ee813e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:92:d9:e6:7c:6b:76:ed:34:05:36:8e:74:98:
                    02:84:c0:25:45:3c:a4:b5:42:86:31:ef:51:22:9e:
                    34:b2:a7:86:24:f7:d5:b6:f9:d1:4c:a1:25:e6:1a:
                    36:bb:cf:56:cf:fd:13:2d:e8:bc:d5:3b:43:66:05:
                    69:29:85:ce:d3:e2:f5:e4:97:3f:30:eb:af:d5:df:
                    6a:eb:34:a4:0b:db:0e:3a:dc:8c:96:24:93:f7:90:
                    f6:53:f6:fc:9e:53:db:03:82:64:b2:e1:22:ce:bb:
                    df:a9:b2:c8:16:37:f7:c0:13:e7:d3:dc:d6:42:35:
                    09:8a:45:52:23:ca:b1:fb:a8:e1:ca:2f:fb:59:b0:
                    6e:dd:93:ee:e9:9b:40:63:69:8b:7a:0e:be:f7:07:
                    e2:f7:01:f3:6f:57:ac:fd:01:6e:0a:08:c5:e8:82:
                    05:2f:54:5e:fd:0d:81:d1:ae:08:be:78:06:58:ad:
                    32:43:62:c1:7e:f1:0d:d6:53:20:7e:45:2f:bc:9b:
                    88:eb:43:ad:a3:f8:f8:fd:68:9a:b1:ec:69:7b:3e:
                    fb:75:bb:28:d6:61:2d:3e:c2:90:6e:3a:bf:7e:8f:
                    3a:55:f0:99:68:5f:e8:a7:d8:b6:69:23:0b:45:1b:
                    2a:db:46:c4:97:39:c4:01:ce:05:2a:d5:e0:99:9a:
                    b7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:59:07:DF:21:A6:0F:6E:D7:63:C6:08:1F:EF:4D:2C:9C:61:E6:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.0.56.192/27
                  16.1.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:ad:4d:64:ee:df:64:91:db:cf:d6:93:6a:08:7e:4f:a4:b2:
         d4:6c:3a:e7:ab:30:7e:32:3c:29:d5:4b:a3:eb:2e:f9:2c:8a:
         89:17:68:4e:96:ee:c6:a8:0e:1a:ee:92:70:00:0a:51:2b:ba:
         c4:f9:5e:27:e7:41:fa:f6:39:d8:21:2d:3d:2b:ba:db:eb:5f:
         00:77:03:d8:73:f5:0b:99:bd:40:63:40:9c:c6:dd:de:c3:db:
         43:2a:4c:80:9e:80:27:9c:f7:cc:bd:68:06:1b:de:ac:83:76:
         90:20:a2:15:b4:69:31:0b:99:fd:86:6c:7c:90:1a:e5:74:0f:
         2c:af:12:57:60:fd:8d:99:4d:d6:db:f0:16:2a:56:30:18:0b:
         f3:81:8e:7b:13:99:7b:26:c5:c9:22:ee:67:61:8f:b1:fa:e5:
         e7:d4:82:3d:fb:8c:2d:fb:43:e9:33:b4:a9:b1:f1:e3:d9:6a:
         6f:35:d7:fa:39:d3:bd:96:a9:eb:ba:b7:dd:8d:46:65:7f:89:
         9d:2f:e5:c5:f4:4b:ab:39:db:fe:f3:35:fd:4d:9a:32:4a:e9:
         6f:f0:83:8c:e8:e4:da:36:0e:60:43:40:8b:7e:68:f8:f4:27:
         50:59:25:e2:11:bc:9c:f1:b9:6f:12:a2:28:db:ee:f5:f3:cc:
         28:eb:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:46:24 2026 by rpki-client