Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa
File:                     2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa (raw, json)
Hash identifier:          r8iLymcvIANGtl2EAE4y/wI6l24IH9uiwXp5knGWnGE=
Subject key identifier:   89:59:0F:92:7B:99:93:7D:E9:38:45:9A:83:A3:F1:D4:76:C4:86:04
Certificate issuer:       /CN=16bc29f5-43ef-48ab-b3df-a2828f565715
Certificate serial:       010D0C9F4328584EA791A165CAD51A7EB0F96C00
Authority key identifier: 8A:C3:F6:31:6C:78:BE:53:FF:41:22:59:B0:1E:77:6B:86:4F:49:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16942
IP address blocks:        66.37.64.0/19 maxlen: 19
                          172.83.128.0/21 maxlen: 21
                          172.93.60.0/22 maxlen: 22
                          204.15.44.0/23 maxlen: 23
                          208.85.172.0/22 maxlen: 22
                          216.222.128.0/20 maxlen: 20
                          2001:4828::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:a1:65:ca:d5:1a:7e:b0:f9:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bc29f5-43ef-48ab-b3df-a2828f565715
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=804bb88c-7c61-4f4d-a499-e43fda325a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:13:f6:84:c4:2a:7c:6a:e4:c0:5d:07:b7:
                    f5:db:c2:d9:1e:19:96:c3:5c:4c:da:60:d4:2a:2e:
                    df:dc:df:28:ea:68:91:a4:a5:6b:2e:11:d4:53:84:
                    24:48:72:03:18:f8:e4:9c:51:be:f6:3a:2c:f8:94:
                    98:f3:05:22:5e:24:a6:5e:18:a1:d7:1e:96:5d:9a:
                    6a:29:2d:92:99:60:b7:b4:a2:d6:71:2e:7d:1c:5d:
                    71:4f:64:78:e6:47:29:06:ff:52:ec:84:e5:50:51:
                    c4:87:5a:81:8c:38:35:3a:f5:63:64:3a:f0:2b:4c:
                    20:24:5e:d5:a0:bc:29:c6:b1:d0:a0:99:a8:c7:79:
                    61:cc:62:84:42:52:99:6b:ff:1c:a4:6a:fa:76:0b:
                    d6:55:68:3c:2a:5c:9e:4d:f4:af:d6:dd:e1:81:40:
                    e6:07:5e:7c:17:43:92:3b:2b:8a:88:de:d9:91:96:
                    38:6a:fd:7e:98:d9:b8:b3:75:58:78:23:56:22:5d:
                    7e:8a:5d:41:a0:6b:56:92:a1:ae:82:cf:63:0e:87:
                    7b:be:52:89:f0:ed:6d:c1:3c:13:73:3c:de:94:3f:
                    06:5b:d7:70:e6:97:1d:86:42:d9:7b:d5:ef:48:37:
                    5f:d9:cd:dc:9e:cf:a4:0a:ce:4e:db:fa:6e:c1:aa:
                    e3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:59:0F:92:7B:99:93:7D:E9:38:45:9A:83:A3:F1:D4:76:C4:86:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.crl

            X509v3 Authority Key Identifier:
                keyid:8A:C3:F6:31:6C:78:BE:53:FF:41:22:59:B0:1E:77:6B:86:4F:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.64.0/19
                  172.83.128.0/21
                  172.93.60.0/22
                  204.15.44.0/23
                  208.85.172.0/22
                  216.222.128.0/20
                IPv6:
                  2001:4828::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:61:3e:fa:e4:ff:f9:ed:09:54:84:14:f3:48:8c:5c:d1:3e:
         07:48:72:22:de:1d:d5:a0:7e:0f:20:ab:21:32:67:05:28:6c:
         a6:c4:fc:cd:9a:14:7c:a9:e5:2c:ed:8f:ab:d6:ba:c9:ae:d7:
         e1:62:be:84:5c:d7:36:02:09:49:2c:b9:53:10:45:36:0a:dc:
         00:24:d7:57:8b:d9:64:61:83:29:cf:0f:e6:25:eb:9b:24:e5:
         9a:8f:5d:67:b0:82:3c:21:c8:cf:48:f4:d8:71:59:b8:6a:3a:
         6f:8d:ac:0c:ab:98:53:40:0f:a5:68:2f:f6:b1:2c:c4:6e:28:
         d4:d3:90:74:63:22:a9:42:98:7a:18:dd:da:8e:13:72:18:79:
         29:87:b3:53:0a:99:eb:40:d2:98:b8:87:81:8f:9a:ad:e0:cb:
         3e:58:37:35:f6:c4:a2:71:1e:19:4b:41:92:8b:c8:da:37:ee:
         25:ea:52:ac:09:28:86:15:18:54:85:9f:5d:e1:58:31:36:ba:
         8c:c8:6f:77:72:ee:cd:cd:f7:99:0e:5d:69:ff:93:8d:4f:42:
         64:32:31:a8:18:62:5f:fd:2b:2d:f0:e4:5a:07:5a:54:a0:a9:
         54:09:90:c2:e6:ea:6f:f0:9f:e5:f6:f0:55:4b:a9:44:51:17:
         9e:85:aa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:05:32 2026 by rpki-client