Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/a00d2453-1dd0-3213-bee6-fed78d9800f4.roa
File:                     a00d2453-1dd0-3213-bee6-fed78d9800f4.roa (raw, json)
Hash identifier:          PR5SwUJBo0M+msKykpySCIS2bN7arua8kQp93XCq05Y=
Subject key identifier:   58:F0:A2:C3:DC:9E:18:07:FF:7F:42:5C:A0:C1:DF:FF:6D:6C:B9:35
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E25FEACB773F6DEFCE5E95680
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/a00d2453-1dd0-3213-bee6-fed78d9800f4.roa
Signing time:             Fri 12 Jun 2026 15:26:34 +0000
ROA not before:           Fri 12 Jun 2026 15:26:34 +0000
ROA not after:            Thu 10 Sep 2026 15:26:34 +0000
asID:                     402265
IP address blocks:        16.216.98.0/24 maxlen: 24
                          16.216.125.0/24 maxlen: 24
                          16.216.224.0/24 maxlen: 24
                          16.216.231.0/24 maxlen: 24
                          16.217.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:fe:ac:b7:73:f6:de:fc:e5:e9:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jun 12 15:26:34 2026 GMT
            Not After : Sep 10 15:26:34 2026 GMT
        Subject: CN=dc31fc97-3fb0-431c-b430-b7877a00e4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:35:3e:b4:a0:56:80:b2:02:e5:7c:4b:c9:60:
                    75:76:f3:2e:e0:92:a5:0c:4e:1d:de:99:60:c6:88:
                    a8:84:e9:68:78:84:5a:20:77:3c:55:c6:82:85:9b:
                    01:c0:eb:01:90:81:79:e1:c5:26:34:4b:07:72:b7:
                    c0:c8:08:9f:d7:2a:cb:21:1c:8e:ec:30:37:8d:0b:
                    5c:3b:64:6c:3a:b4:38:bd:a4:b9:02:3b:92:df:85:
                    68:f9:54:c9:82:e4:ce:88:15:44:79:a0:7a:a6:47:
                    21:2c:14:20:3d:78:be:5d:e2:ba:33:90:7d:51:c1:
                    ff:93:f0:6c:8c:ba:fd:2b:ad:3c:df:81:85:d7:46:
                    1c:3d:dd:ed:5d:b9:26:56:d3:bb:72:a8:df:ad:99:
                    55:4d:65:47:0b:00:a2:b7:39:9a:3a:78:33:89:5a:
                    6c:5b:8c:c1:2e:ad:40:a6:25:af:c8:cd:b8:83:2a:
                    5a:08:9e:83:44:05:a2:48:73:f6:e6:70:f1:5a:88:
                    d1:b5:7b:2e:66:8f:7b:47:ad:3f:5e:d9:28:eb:1b:
                    c4:24:6e:1e:f4:3f:84:be:6f:ed:f5:29:42:db:1b:
                    36:89:5d:82:77:67:06:35:4e:e5:62:fe:67:e0:d2:
                    72:69:42:82:f2:25:b8:23:7e:52:79:ad:a4:c4:bd:
                    ca:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F0:A2:C3:DC:9E:18:07:FF:7F:42:5C:A0:C1:DF:FF:6D:6C:B9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/a00d2453-1dd0-3213-bee6-fed78d9800f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.216.98.0/24
                  16.216.125.0/24
                  16.216.224.0/24
                  16.216.231.0/24
                  16.217.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a2:39:36:37:1e:2c:8f:2a:87:67:7b:22:c2:75:25:69:68:
         4a:32:47:31:20:70:71:67:af:75:69:e4:b6:6a:b5:a5:67:6b:
         44:55:09:2d:8b:24:58:1d:29:0a:52:27:5e:6a:91:40:9e:36:
         86:57:ea:37:6f:5b:74:43:bb:47:81:fd:c1:c3:19:0c:ae:e5:
         03:85:2e:38:e5:b5:d5:97:80:1c:06:7e:bb:d2:2f:26:33:ea:
         2c:1f:43:fd:7f:ca:5d:df:62:3e:2d:e2:4f:44:3d:91:66:2a:
         53:ca:22:a3:4e:c3:66:6f:e1:cf:fb:a8:0a:9a:25:12:22:6c:
         47:4e:b2:35:af:d9:fd:0b:40:70:89:cb:ce:7f:f1:02:e4:23:
         a1:12:59:b7:2a:ab:11:03:ef:94:01:db:c1:20:fc:85:38:6c:
         4a:73:5f:4b:62:85:3d:a9:0e:cd:18:55:57:1e:26:a9:71:e9:
         5a:de:5c:c7:bc:da:1f:11:cc:8f:02:bd:18:25:63:9c:e3:98:
         23:01:36:16:98:de:9e:c3:62:e0:22:98:17:cc:f2:a4:75:23:
         12:cc:57:46:4d:5e:f8:e1:fb:ff:10:e5:71:58:5e:2f:2c:f4:
         f4:45:b9:aa:a5:1f:d9:09:0b:4a:50:3d:1c:3d:6b:66:42:ce:
         49:69:01:c6
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE4l/qy3c/be/OXpVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk
YmZhMB4XDTI2MDYxMjE1MjYzNFoXDTI2MDkxMDE1MjYzNFowLzEtMCsGA1UEAxMk
ZGMzMWZjOTctM2ZiMC00MzFjLWI0MzAtYjc4NzdhMDBlNGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjU+tKBWgLIC5XxLyWB1dvMu4JKlDE4d3plg
xoiohOloeIRaIHc8VcaChZsBwOsBkIF54cUmNEsHcrfAyAif1yrLIRyO7DA3jQtc
O2RsOrQ4vaS5AjuS34Vo+VTJguTOiBVEeaB6pkchLBQgPXi+XeK6M5B9UcH/k/Bs
jLr9K60834GF10YcPd3tXbkmVtO7cqjfrZlVTWVHCwCitzmaOngziVpsW4zBLq1A
piWvyM24gypaCJ6DRAWiSHP25nDxWojRtXsuZo97R60/Xtko6xvEJG4e9D+Evm/t
9SlC2xs2iV2Cd2cGNU7lYv5n4NJyaUKC8iW4I35Sea2kxL3KVwIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFFjwosPcnhgH/39CXKDB3/9tbLk1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj
MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvYTAwZDI0NTMtMWRkMC0z
MjEzLWJlZTYtZmVkNzhkOTgwMGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2
NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj
ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl
YzA0Y2RiZmEuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAENhiAwQA
ENh9AwQAENjgAwQAENjnAwQAENmVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAESiOTY3HiyPKodneyLCdSVp
aEoyRzEgcHFnr3Vp5LZqtaVna0RVCS2LJFgdKQpSJ15qkUCeNoZX6jdvW3RDu0eB
/cHDGQyu5QOFLjjltdWXgBwGfrvSLyYz6iwfQ/1/yl3fYj4t4k9EPZFmKlPKIqNO
w2Zv4c/7qAqaJRIibEdOsjWv2f0LQHCJy85/8QLkI6ESWbcqqxED75QB28Eg/IU4
bEpzX0tihT2pDs0YVVceJqlx6VreXMe82h8RzI8CvRglY5zjmCMBNhaY3p7DYuAi
mBfM8qR1IxLMV0ZNXvjh+/8Q5XFYXi8s9PRFuaqlH9kJC0pQPRw9a2ZCzklpAcY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:19:24 2026 by rpki-client