Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa
File:                     2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa (raw, json)
Hash identifier:          VMB52lGm4eTVkKHPwsBjxBl1N5gdA2rUQtnAYH50atw=
Subject key identifier:   FB:A6:B2:7D:66:B8:A8:5E:0D:81:3E:45:43:99:99:45:B5:FA:C5:BA
Certificate issuer:       /CN=16bc29f5-43ef-48ab-b3df-a2828f565715
Certificate serial:       010D0C9F4328584D07ACEDF5632365377C24A800
Authority key identifier: 8A:C3:F6:31:6C:78:BE:53:FF:41:22:59:B0:1E:77:6B:86:4F:49:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     16942
IP address blocks:        66.37.64.0/19 maxlen: 19
                          172.83.128.0/21 maxlen: 21
                          172.93.60.0/22 maxlen: 22
                          204.15.44.0/23 maxlen: 23
                          208.85.172.0/22 maxlen: 22
                          216.222.128.0/20 maxlen: 20
                          2001:4828::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:ed:f5:63:23:65:37:7c:24:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bc29f5-43ef-48ab-b3df-a2828f565715
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=e37ab45a-411d-4914-80dc-3d92317973b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:78:54:9c:47:10:f8:05:4f:73:14:7f:cb:
                    8b:50:c8:56:c2:73:75:90:56:e8:ba:79:82:95:70:
                    34:1d:d5:7a:69:7d:c6:4f:ae:08:10:b3:47:73:81:
                    8d:b4:f8:83:7d:08:f5:19:dc:77:a1:56:57:36:15:
                    9e:b9:30:e7:6f:6a:f1:45:bb:db:10:b8:64:e0:af:
                    d0:56:c4:61:7c:82:92:95:18:39:e4:ac:6c:40:2d:
                    bd:7b:b2:80:e0:62:58:20:db:52:1a:c3:5b:f5:f3:
                    1d:9e:a9:01:4c:4d:1f:9e:cc:33:6c:c8:e4:be:91:
                    a1:3a:68:e4:6b:64:42:27:f0:5c:46:45:55:63:2a:
                    c9:b1:fd:4e:c6:1b:90:f1:b5:df:01:62:46:a2:45:
                    f2:8b:a1:e4:bf:2f:81:0b:b8:61:1d:b3:6a:bc:ef:
                    d1:dd:40:54:ab:cb:4b:00:a7:ea:40:dd:2b:9d:91:
                    51:08:73:15:80:70:bd:41:36:43:e1:c5:c2:37:ad:
                    9c:eb:2f:71:9e:53:9a:40:28:66:0c:ce:c9:f8:1a:
                    8a:6b:e0:d4:16:67:f4:b8:a5:6e:5d:0b:f6:82:ef:
                    c8:6d:c5:eb:06:32:5c:5f:13:87:65:8f:b7:c2:52:
                    f1:e5:f1:bd:4f:0a:ba:b4:2d:d7:00:60:45:88:c9:
                    3a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A6:B2:7D:66:B8:A8:5E:0D:81:3E:45:43:99:99:45:B5:FA:C5:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/2f56cd55-1bff-3f25-b8ea-b855583d86fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715/16bc29f5-43ef-48ab-b3df-a2828f565715.crl

            X509v3 Authority Key Identifier:
                keyid:8A:C3:F6:31:6C:78:BE:53:FF:41:22:59:B0:1E:77:6B:86:4F:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16bc29f5-43ef-48ab-b3df-a2828f565715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.64.0/19
                  172.83.128.0/21
                  172.93.60.0/22
                  204.15.44.0/23
                  208.85.172.0/22
                  216.222.128.0/20
                IPv6:
                  2001:4828::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:74:27:8b:f5:e7:f3:d3:b6:16:e5:06:ff:1f:cc:67:f3:93:
         68:ec:d8:27:32:af:86:d6:00:40:54:90:5d:e0:7c:d0:bc:08:
         ff:f0:9e:19:28:87:41:1f:85:3d:fd:ed:72:e8:d2:40:41:b4:
         20:01:53:59:f8:a9:8d:c8:90:34:87:39:34:ee:5a:eb:0a:49:
         cb:46:fe:d1:15:84:62:5d:ca:c9:7b:d9:f6:06:d2:64:55:ec:
         d0:69:e7:66:90:40:00:cd:f6:9b:6f:f8:e6:db:97:68:53:64:
         71:3d:d0:33:38:18:20:de:f8:50:2f:87:f7:b9:bd:3e:95:c7:
         4f:e9:ed:51:34:30:4f:31:bf:26:7d:a4:6c:20:04:e0:f0:38:
         a9:98:d8:e3:4a:d8:b7:a6:59:ec:ad:cf:01:c2:dd:9d:93:63:
         46:98:19:84:b9:e4:ca:49:7b:85:81:19:63:6e:8b:ad:df:05:
         e5:45:c4:2e:9e:8a:94:3d:97:aa:ca:4e:03:f6:62:f0:df:c1:
         61:9c:13:7b:f0:67:dd:eb:18:8f:68:c6:15:52:92:3c:4c:d3:
         38:1f:bc:0c:58:4c:e2:54:40:08:d9:ff:9f:ea:a9:4f:7b:bb:
         48:82:6c:c8:d8:ec:67:42:04:b1:77:f0:9e:05:91:49:01:af:
         e1:ca:98:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:27 2026 by rpki-client