Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e1c56a38-e4fe-354d-b055-3e19cc4760fd.roa
File:                     e1c56a38-e4fe-354d-b055-3e19cc4760fd.roa (raw, json)
Hash identifier:          8XAjmKMRTUK0bF7ab1El9CP+9nS8ZWqNYePsQcFDOtk=
Subject key identifier:   65:0C:A7:B2:49:B1:55:07:22:49:F3:A5:DD:9D:32:1B:B3:37:A7:37
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E073D38E268B29074E7653500
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e1c56a38-e4fe-354d-b055-3e19cc4760fd.roa
Signing time:             Mon 01 Jun 2026 15:02:32 +0000
ROA not before:           Mon 01 Jun 2026 15:02:32 +0000
ROA not after:            Sun 30 Aug 2026 15:02:32 +0000
asID:                     151389
IP address blocks:        16.216.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:3d:38:e2:68:b2:90:74:e7:65:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jun  1 15:02:32 2026 GMT
            Not After : Aug 30 15:02:32 2026 GMT
        Subject: CN=95568fe2-50c9-42ad-bdf2-a587f5bed731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:8f:35:66:c5:f2:26:87:16:ab:48:8f:fc:
                    39:01:d6:d9:ad:d7:73:c5:06:29:9d:8d:b2:aa:55:
                    0a:52:1f:8a:35:31:df:a3:4d:26:25:ec:13:46:ad:
                    e0:4c:3b:10:92:03:6d:35:bd:63:eb:9d:34:43:66:
                    6b:ec:44:a1:63:6c:52:05:13:16:77:f9:4d:f1:7a:
                    db:52:47:ec:e5:56:80:83:1d:0e:14:5b:eb:89:3c:
                    93:67:06:4c:e1:99:1d:47:bb:ef:bc:25:cd:1b:13:
                    77:fe:7a:bd:be:e3:33:c7:cc:6d:52:34:1e:ab:cf:
                    d5:03:35:d5:36:0d:ab:9c:2e:0e:44:10:95:70:96:
                    79:08:92:1e:15:d9:45:0a:b0:2c:73:a3:9b:55:b2:
                    4a:43:26:49:fc:9b:5c:f6:71:7a:9d:f6:a6:21:9c:
                    cc:1c:c1:65:0d:d5:77:62:ba:e5:bc:3e:1d:39:59:
                    ce:61:8a:4e:d9:e1:9c:39:36:32:9e:9f:92:b0:e7:
                    94:60:ab:a7:be:47:c4:f0:5b:d2:68:06:ce:1c:aa:
                    6a:5b:11:3e:20:0e:3b:41:25:e5:cf:18:2b:cc:bb:
                    37:e3:48:9f:3d:ac:6e:b2:ff:46:2b:24:f2:b8:4c:
                    c2:fb:83:b7:f7:df:c7:02:4b:52:ee:ae:39:48:fc:
                    3c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0C:A7:B2:49:B1:55:07:22:49:F3:A5:DD:9D:32:1B:B3:37:A7:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e1c56a38-e4fe-354d-b055-3e19cc4760fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.216.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c9:f0:97:f9:7d:a3:0d:83:bc:c0:c8:f0:bf:19:ba:a1:c4:
         44:52:c5:46:87:36:11:40:4f:4a:91:57:1f:12:18:60:b5:71:
         1d:69:c8:5e:70:e1:18:80:e0:b5:21:e8:f8:f6:69:34:90:db:
         a3:ba:8b:42:4b:dc:d6:4b:92:8e:c8:da:e9:83:25:e4:92:e9:
         05:a3:77:19:ab:b7:6a:85:2d:3f:d1:f4:8a:ce:c0:2d:22:8a:
         5b:67:51:3b:f1:0e:8e:7d:62:9d:4d:14:41:3e:e3:7c:59:6c:
         65:d7:9a:db:be:57:17:3f:db:0c:c2:13:34:37:f9:18:7f:56:
         0a:2e:e4:f7:d1:ae:27:ba:67:fa:28:4c:e0:b8:34:6f:52:47:
         4b:01:e4:81:2c:fc:19:d4:a6:a2:1a:e0:1f:ee:3a:b3:df:52:
         e6:75:41:5a:d1:b1:d4:64:ce:8e:7d:bf:cb:ed:2a:19:ea:5f:
         c5:7a:0b:9e:4e:a9:f4:cf:f7:66:19:ec:8b:de:d3:49:1f:82:
         f1:3c:2e:ae:fd:e4:ae:49:f2:71:89:3a:e7:9b:7c:6b:7b:d1:
         23:ec:4f:d8:21:95:dd:5e:f4:bf:50:71:73:de:c3:57:5b:6b:
         ba:99:56:73:ef:4f:20:b6:b7:9b:b6:06:44:23:1e:02:49:82:
         c7:5d:83:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:07:02 2026 by rpki-client