Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e61893d8-b4b5-3fa6-a5b1-af7dc8028198.roa
File:                     e61893d8-b4b5-3fa6-a5b1-af7dc8028198.roa (raw, json)
Hash identifier:          t9qx9pn9N4ngnHgVD39+usak5hIOKXMLIJWTGDw2xtI=
Subject key identifier:   4B:A3:A9:2F:EC:54:27:58:1F:75:4D:C2:D7:48:75:B2:87:ED:E5:C0
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F37C20BFBAFB1C65292E02340
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e61893d8-b4b5-3fa6-a5b1-af7dc8028198.roa
Signing time:             Fri 18 Sep 2026 16:55:53 +0000
ROA not before:           Fri 18 Sep 2026 16:55:53 +0000
ROA not after:            Thu 17 Dec 2026 17:55:53 +0000
asID:                     54252
IP address blocks:        16.217.112.0/24 maxlen: 24
                          16.217.113.0/24 maxlen: 24
                          16.217.114.0/24 maxlen: 24
                          16.217.115.0/24 maxlen: 24
                          136.162.128.0/24 maxlen: 24
                          136.162.131.0/24 maxlen: 24
                          136.162.144.0/24 maxlen: 24
                          136.162.147.0/24 maxlen: 24
                          136.162.156.0/24 maxlen: 24
                          136.162.159.0/24 maxlen: 24
                          136.162.163.0/24 maxlen: 24
                          136.162.167.0/24 maxlen: 24
                          136.162.169.0/24 maxlen: 24
                          136.162.171.0/24 maxlen: 24
                          136.162.174.0/24 maxlen: 24
                          136.162.176.0/24 maxlen: 24
                          136.162.178.0/24 maxlen: 24
                          136.162.180.0/24 maxlen: 24
                          136.162.183.0/24 maxlen: 24
                          136.162.188.0/24 maxlen: 24
                          136.162.191.0/24 maxlen: 24
                          136.162.224.0/24 maxlen: 24
                          136.162.227.0/24 maxlen: 24
                          136.162.230.0/24 maxlen: 24
                          136.162.237.0/24 maxlen: 24
                          136.162.239.0/24 maxlen: 24
                          136.162.244.0/24 maxlen: 24
                          136.162.247.0/24 maxlen: 24
                          136.162.249.0/24 maxlen: 24
                          136.162.251.0/24 maxlen: 24
                          161.114.4.0/24 maxlen: 24
                          161.114.20.0/24 maxlen: 24
                          161.114.28.0/24 maxlen: 24
                          161.114.32.0/24 maxlen: 24
                          161.114.36.0/24 maxlen: 24
                          161.114.43.0/24 maxlen: 24
                          161.114.68.0/24 maxlen: 24
                          161.114.74.0/24 maxlen: 24
                          161.114.79.0/24 maxlen: 24
                          161.114.92.0/24 maxlen: 24
                          161.114.102.0/24 maxlen: 24
                          161.114.107.0/24 maxlen: 24
                          161.114.111.0/24 maxlen: 24
                          161.114.117.0/24 maxlen: 24
                          161.114.123.0/24 maxlen: 24
                          161.114.129.0/24 maxlen: 24
                          161.114.135.0/24 maxlen: 24
                          161.114.167.0/24 maxlen: 24
                          161.114.171.0/24 maxlen: 24
                          161.114.175.0/24 maxlen: 24
                          161.114.195.0/24 maxlen: 24
                          161.114.199.0/24 maxlen: 24
                          161.114.207.0/24 maxlen: 24
                          161.114.215.0/24 maxlen: 24
                          161.114.219.0/24 maxlen: 24
                          161.114.223.0/24 maxlen: 24
                          192.132.148.0/24 maxlen: 24
                          192.132.151.0/24 maxlen: 24
                          192.132.153.0/24 maxlen: 24
                          192.132.155.0/24 maxlen: 24
                          192.132.157.0/24 maxlen: 24
                          192.132.159.0/24 maxlen: 24
                          192.132.161.0/24 maxlen: 24
                          192.132.162.0/24 maxlen: 24
                          192.132.163.0/24 maxlen: 24
                          192.132.164.0/24 maxlen: 24
                          192.132.165.0/24 maxlen: 24
                          192.132.166.0/24 maxlen: 24
                          192.132.167.0/24 maxlen: 24
                          192.132.168.0/24 maxlen: 24
                          192.132.169.0/24 maxlen: 24
                          192.132.170.0/24 maxlen: 24
                          192.132.171.0/24 maxlen: 24
                          192.132.172.0/24 maxlen: 24
                          192.132.173.0/24 maxlen: 24
                          192.132.174.0/24 maxlen: 24
                          192.132.175.0/24 maxlen: 24
                          192.132.180.0/24 maxlen: 24
                          192.132.181.0/24 maxlen: 24
                          192.132.182.0/24 maxlen: 24
                          192.132.184.0/24 maxlen: 24
                          192.132.187.0/24 maxlen: 24
                          198.29.80.0/24 maxlen: 24
                          198.29.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:c2:0b:fb:af:b1:c6:52:92:e0:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Sep 18 16:55:53 2026 GMT
            Not After : Dec 17 17:55:53 2026 GMT
        Subject: CN=df00425b-5f59-42dc-9850-c4136182479d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:07:3e:ff:ed:92:31:e9:ab:bd:27:64:2a:
                    2b:b9:d1:2e:3e:8f:e3:b0:96:ae:28:b1:76:d7:10:
                    6a:e6:d8:64:38:22:42:9d:eb:f3:45:ab:28:a2:87:
                    e6:bc:46:0d:5a:21:1c:58:3d:bf:b2:9c:e1:45:62:
                    6c:d4:3e:dd:4a:10:df:e5:70:25:cd:19:3e:c4:73:
                    4c:95:2a:07:f8:1b:c0:50:c0:bb:39:76:21:00:23:
                    e4:70:a0:47:10:02:58:34:64:81:4b:17:c2:b0:f1:
                    da:2f:41:53:1e:9f:dd:78:37:ed:f3:82:49:5c:8a:
                    5f:f8:2d:79:c9:7a:6c:9f:31:47:85:f1:ea:9a:03:
                    95:45:0e:95:90:de:22:a9:bf:d1:0b:9c:ad:0e:c3:
                    45:92:2b:8c:b5:19:f1:d1:ab:f4:8f:f6:35:90:86:
                    33:ca:75:e7:bb:79:fa:2f:5b:bc:fd:f9:60:0a:11:
                    95:be:5f:28:a5:67:e5:73:8f:ab:26:a6:36:07:d9:
                    ef:e2:91:99:fd:69:7f:f1:db:43:fb:7c:27:8d:a6:
                    8c:af:ae:39:b7:a3:fe:bb:df:38:dc:ad:a5:e5:7a:
                    a3:51:d6:69:65:d8:50:94:34:f7:08:52:25:0c:0b:
                    4c:2f:ec:8f:ed:d9:41:0c:c9:5d:8f:af:ef:6c:2b:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A3:A9:2F:EC:54:27:58:1F:75:4D:C2:D7:48:75:B2:87:ED:E5:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/e61893d8-b4b5-3fa6-a5b1-af7dc8028198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.217.112.0/22
                  136.162.128.0/24
                  136.162.131.0/24
                  136.162.144.0/24
                  136.162.147.0/24
                  136.162.156.0/24
                  136.162.159.0/24
                  136.162.163.0/24
                  136.162.167.0/24
                  136.162.169.0/24
                  136.162.171.0/24
                  136.162.174.0/24
                  136.162.176.0/24
                  136.162.178.0/24
                  136.162.180.0/24
                  136.162.183.0/24
                  136.162.188.0/24
                  136.162.191.0/24
                  136.162.224.0/24
                  136.162.227.0/24
                  136.162.230.0/24
                  136.162.237.0/24
                  136.162.239.0/24
                  136.162.244.0/24
                  136.162.247.0/24
                  136.162.249.0/24
                  136.162.251.0/24
                  161.114.4.0/24
                  161.114.20.0/24
                  161.114.28.0/24
                  161.114.32.0/24
                  161.114.36.0/24
                  161.114.43.0/24
                  161.114.68.0/24
                  161.114.74.0/24
                  161.114.79.0/24
                  161.114.92.0/24
                  161.114.102.0/24
                  161.114.107.0/24
                  161.114.111.0/24
                  161.114.117.0/24
                  161.114.123.0/24
                  161.114.129.0/24
                  161.114.135.0/24
                  161.114.167.0/24
                  161.114.171.0/24
                  161.114.175.0/24
                  161.114.195.0/24
                  161.114.199.0/24
                  161.114.207.0/24
                  161.114.215.0/24
                  161.114.219.0/24
                  161.114.223.0/24
                  192.132.148.0/24
                  192.132.151.0/24
                  192.132.153.0/24
                  192.132.155.0/24
                  192.132.157.0/24
                  192.132.159.0/24
                  192.132.161.0-192.132.175.255
                  192.132.180.0-192.132.182.255
                  192.132.184.0/24
                  192.132.187.0/24
                  198.29.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:15:aa:8b:49:d9:6c:ab:3c:19:dc:04:52:2e:50:11:59:
         b6:39:01:27:c3:7f:01:cf:40:ee:81:b3:d8:69:14:c9:16:d9:
         cb:29:1d:f6:73:a7:45:89:e3:e8:2e:44:5e:75:c3:56:e5:0b:
         9c:5d:39:8b:93:a1:31:26:a3:f7:ef:60:a8:c9:7a:f4:be:4d:
         75:1d:29:6f:a4:7c:cb:b1:0c:be:12:c2:aa:bc:0d:1d:e3:81:
         e6:e9:ae:f5:6b:20:dc:c0:04:54:6b:f0:7d:fa:37:26:2e:3a:
         09:e5:f2:fb:5a:a9:69:4a:e1:10:48:e4:84:1c:62:dc:33:67:
         df:b3:11:5a:ee:84:cc:d9:93:c8:d5:cd:98:b0:a6:11:5f:74:
         9b:61:d6:25:40:c1:aa:de:31:32:48:01:1c:36:a7:f6:74:f6:
         ac:98:ec:5d:cf:aa:e1:b3:f0:e2:a4:64:3e:38:62:34:12:be:
         80:bd:81:97:a8:6a:35:19:c6:e6:92:10:24:bd:7a:fa:ab:fa:
         e9:cc:03:82:f5:b7:54:bd:bd:29:b0:e4:8d:77:51:56:14:e2:
         48:93:2c:d4:a1:76:fb:14:30:92:6d:c5:14:a1:6e:89:42:8a:
         bc:0a:c6:f0:4f:35:e5:d7:24:62:2e:2b:68:21:bf:f3:98:91:
         cb:4e:08:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:16:54 2026 by rpki-client