Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d400c3c6-00e4-3b7c-aa04-1ea5c4d94903.roa
File:                     d400c3c6-00e4-3b7c-aa04-1ea5c4d94903.roa (raw, json)
Hash identifier:          62voyBCgAEuwCZvXwHWdeXa61OdH4ZrOS0N8/Ao0QKE=
Subject key identifier:   EB:25:CA:28:C6:3C:21:DC:70:53:90:22:BC:F5:14:41:43:62:7E:D9
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F3E4800B73D10BD4506FA0540
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d400c3c6-00e4-3b7c-aa04-1ea5c4d94903.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     20096
IP address blocks:        16.0.37.0/24 maxlen: 24
                          16.0.48.0/22 maxlen: 22
                          16.105.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:00:b7:3d:10:bd:45:06:fa:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=fb7d478d-2198-40bb-84ff-229756bc4ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3f:10:84:3e:7c:19:54:fb:82:37:a1:f0:8b:
                    e4:aa:3d:6c:df:9e:b9:a9:ed:fc:53:f1:51:af:e6:
                    7b:3b:0b:fc:14:25:94:31:3a:25:14:14:49:06:a8:
                    a7:f2:fd:a8:47:c3:5f:6d:b9:b8:18:71:ef:a3:40:
                    62:74:45:f6:df:6f:29:f8:75:4a:c5:ad:55:2b:00:
                    38:e5:85:87:7b:9a:e9:85:10:a1:f5:a8:0c:dd:b9:
                    67:0c:72:43:0f:e0:7a:f9:11:46:58:15:ae:ad:36:
                    84:23:97:43:cb:f7:16:dd:f8:2d:ff:1c:8f:f7:39:
                    a7:51:a2:ec:0e:a6:c0:24:fb:f0:f0:56:cf:66:88:
                    58:08:3e:93:17:92:68:03:5d:1c:0a:b8:ac:89:23:
                    4f:f2:3b:a4:f3:bc:fa:b8:b1:5c:61:9a:d7:aa:86:
                    ad:0c:c2:dc:a4:10:f9:3a:68:2c:d4:39:1f:eb:9e:
                    14:02:c1:a6:8c:99:a3:43:fc:04:c5:ad:8e:a5:e1:
                    67:f2:9c:65:73:66:2b:b9:1f:dc:a2:e4:49:95:ba:
                    16:bc:70:d9:ca:b2:5b:4d:6c:08:c3:88:ef:aa:f2:
                    fa:15:f1:cb:7c:32:f3:8e:95:0a:bd:4a:20:06:08:
                    5b:00:04:03:27:c4:0d:7f:87:ad:aa:f9:9c:83:25:
                    36:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:25:CA:28:C6:3C:21:DC:70:53:90:22:BC:F5:14:41:43:62:7E:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/d400c3c6-00e4-3b7c-aa04-1ea5c4d94903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.0.37.0/24
                  16.0.48.0/22
                  16.105.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e7:c4:53:a5:de:d1:cb:4a:c3:ab:5c:98:2f:9b:74:ab:f6:
         a1:89:9d:4a:de:14:38:c2:39:3b:5e:37:40:77:60:e5:9d:92:
         32:3b:af:db:10:f5:fc:c8:45:f8:ee:1a:e8:ec:9c:4c:c3:fa:
         16:c9:c1:d9:0f:54:21:d1:93:67:b3:35:9a:b3:b8:f6:f5:a8:
         4a:ca:5b:65:ef:0e:6d:cb:f9:77:3c:e5:cf:43:2a:5a:7d:5d:
         d6:65:bc:fc:bb:dd:47:6d:94:1e:2a:08:40:4d:05:3a:fd:46:
         e9:9c:3e:12:32:4f:09:f7:de:f2:a2:8d:8f:1b:e2:ec:59:00:
         b2:a3:0a:ea:7d:ff:82:29:0e:41:8b:f4:57:10:55:c1:f6:fc:
         9a:84:85:81:4b:23:39:e9:43:db:55:fd:82:a1:d0:84:03:dc:
         7b:6c:82:d3:4b:13:05:90:a0:db:aa:ca:1c:be:ec:1f:e8:e9:
         3e:2a:df:14:d3:c0:d8:f2:e8:7f:26:93:39:47:78:14:43:25:
         cd:19:a9:bc:7f:bb:9b:83:1a:eb:8b:d1:bf:82:7d:cd:b1:90:
         a2:ab:74:07:83:f7:52:c5:73:f0:33:e7:a0:92:9f:ff:b2:8a:
         3c:0c:ed:08:f5:5d:ea:df:13:f6:d9:cf:0b:17:ac:98:d9:0f:
         7d:95:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:32:50 2026 by rpki-client