Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa
File:                     de977a80-b422-3e83-bc77-25aec313c480.roa (raw, json)
Hash identifier:          2UhelnC6pLkZjiUMdJfpbyghTPjT0VM1Ra2IIKtBJrs=
Subject key identifier:   7B:B0:88:F4:DE:28:4C:40:5F:BD:46:4A:A7:01:19:3B:7C:4D:A1:E6
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584CBF1731EF5942035D2AEC6540
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     8635
IP address blocks:        16.1.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:31:ef:59:42:03:5d:2a:ec:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=e9008db9-af10-4574-bb6e-4b7ef00c65f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:17:4f:c5:8e:79:63:60:ae:34:2d:f4:c7:
                    a9:ec:4e:ad:66:5b:7e:da:64:31:76:f8:39:07:94:
                    f8:85:67:67:54:96:f7:10:99:af:89:21:10:4d:ec:
                    b8:a4:8c:00:1e:70:01:9a:76:12:b9:b6:c0:87:65:
                    c0:88:b4:be:96:e7:91:ce:2f:ac:15:01:a5:be:31:
                    bf:5f:c3:9b:3e:c8:82:25:dc:8e:a2:b9:fc:4b:c7:
                    0f:19:d3:bc:fb:b3:85:63:eb:e9:e5:f7:4c:7d:37:
                    92:ab:c6:34:fd:6e:4c:a4:ec:75:e6:8c:6f:3e:8a:
                    57:65:71:bd:83:0b:11:79:d4:5f:a8:9b:03:89:bd:
                    aa:88:5b:32:ed:b3:08:6e:b8:cf:e2:4a:06:23:84:
                    3f:de:c5:c4:8e:69:69:6e:a5:63:f3:f5:83:60:5b:
                    e7:31:fd:32:b5:78:bb:2f:ee:8a:9b:a0:a8:cc:02:
                    d3:06:ea:1b:9e:b3:76:79:83:ff:2b:bc:a8:2d:0e:
                    7e:f8:6a:f9:44:58:d5:0d:e4:88:ad:08:61:35:30:
                    47:03:d2:7d:15:0e:c3:67:0d:9f:1d:5b:0b:a0:40:
                    e4:de:a6:6b:d1:c5:46:08:75:f2:f3:e4:b1:61:7c:
                    8d:bd:cf:9a:14:0d:22:5f:c1:01:42:56:a5:c3:74:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B0:88:F4:DE:28:4C:40:5F:BD:46:4A:A7:01:19:3B:7C:4D:A1:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.1.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:df:d5:50:c0:42:2e:a1:c4:17:9d:0e:77:a9:2f:f3:c4:5d:
         3c:35:12:29:dd:cb:a7:7d:30:d3:eb:a8:f6:fe:79:d6:2d:05:
         5e:cc:61:f7:f3:68:d6:c4:3e:02:24:3e:43:a1:06:df:89:36:
         64:7b:ff:10:9d:c6:e5:b1:75:97:44:3e:5d:0e:e9:97:f4:2e:
         7b:84:b0:c8:e7:9a:9a:53:49:bb:63:88:89:7a:4b:88:bf:6e:
         c6:50:16:99:c2:70:56:a8:70:4e:09:d7:89:4c:3c:60:06:35:
         be:d3:cc:14:68:6a:f2:a1:32:b5:bd:07:f5:f3:8d:51:00:37:
         4f:4a:2a:cb:d3:77:ff:65:15:46:a4:06:42:a5:4b:26:d8:c0:
         0b:32:9c:b0:3b:52:7c:6e:2b:6c:72:12:f5:86:bd:e1:a9:09:
         11:69:04:22:6a:e9:49:e4:a0:ae:0e:9f:2e:3e:86:91:9c:c5:
         92:6a:dc:dd:11:fc:8b:d8:64:36:b4:7d:d0:c8:0a:1c:f1:3d:
         e4:e7:3c:fe:28:15:46:2f:9b:d6:b7:a1:b4:45:43:d1:68:3d:
         9b:3c:ab:b7:ab:d3:c8:17:91:1b:5a:d0:dc:28:4c:17:99:b8:
         de:2e:f7:79:25:bd:e3:b6:28:0e:49:b9:ef:fe:27:00:f0:6d:
         18:21:a7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:54 2026 by rpki-client