Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa
File:                     29d5e091-9446-3719-ad71-bce2ae8ab71c.roa (raw, json)
Hash identifier:          xAuBEi789hcqNz4v01eJK8CKS+wUBAvFbZGsdsH96Mk=
Subject key identifier:   3C:9F:99:30:68:F7:02:BC:0C:82:0A:F5:09:07:8F:C9:7B:2D:B4:FC
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584E66DA0780CD08AF8B28DC8580
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     14061
IP address blocks:        107.170.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:07:80:cd:08:af:8b:28:dc:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=6bfd5d62-2ca2-4ad3-928e-0cfdac3c70a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:31:23:30:39:2e:1a:8a:cb:f2:79:b6:81:
                    ef:ba:d3:06:31:ea:3c:66:06:27:de:2f:e6:a1:57:
                    f7:35:a8:f9:e7:0e:53:d6:e4:25:0a:bf:fc:db:a3:
                    e9:d7:7b:e2:d6:f1:b8:7f:f0:11:9f:fd:85:47:82:
                    9a:c5:27:bf:fd:f1:54:0b:04:e7:4e:dc:58:11:9f:
                    96:3d:be:c0:82:11:1e:99:46:01:f7:2b:ce:fa:b9:
                    d7:65:47:d7:58:4e:d6:aa:f9:21:19:42:20:2f:01:
                    1f:0e:07:c7:49:1e:81:a8:4c:3d:43:60:c6:2a:a0:
                    93:e7:f8:09:66:23:ca:38:38:59:83:f8:69:63:d4:
                    8e:d3:e1:9b:0a:48:6d:33:15:a3:4f:57:7a:70:47:
                    46:89:4f:82:ab:66:c2:a3:41:fe:59:f6:2a:c6:e6:
                    03:4e:0e:f6:82:9e:18:72:bb:e7:bb:fa:8a:5a:63:
                    12:bf:b6:13:4a:6a:29:73:c4:f0:f3:de:41:ef:18:
                    38:2e:5a:c1:fe:91:53:5b:d4:42:2a:dd:d1:73:65:
                    c4:be:e2:fb:e7:60:c0:48:bb:15:10:4b:a2:ab:23:
                    b8:9d:9f:d3:d4:80:7f:4c:86:b0:6f:1e:13:f1:69:
                    42:db:d8:2b:ee:97:53:27:71:31:3a:0b:22:13:fb:
                    60:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9F:99:30:68:F7:02:BC:0C:82:0A:F5:09:07:8F:C9:7B:2D:B4:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.170.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:48:e2:72:32:e6:b7:b5:76:4c:ef:d5:03:fa:22:91:56:63:
         5c:19:c4:b3:db:8b:b0:d1:be:2c:11:b8:04:ed:0f:fe:d7:19:
         bc:dd:5d:f1:04:bc:09:4b:a7:3b:c4:51:d9:6d:cb:0e:31:b9:
         3c:9a:a3:50:f5:e5:a3:d5:3f:5a:87:2c:f0:7d:d5:63:c5:82:
         e3:cb:ae:ba:66:d1:19:30:ef:f0:de:c8:aa:c8:09:3d:30:aa:
         12:ab:96:d3:d6:8b:06:37:d5:1a:89:a0:60:00:f0:b9:91:54:
         32:97:d6:5e:14:52:39:c9:73:c5:2e:d6:f3:1d:1a:4f:c3:d5:
         2f:85:59:49:17:02:25:f8:12:52:ad:a6:b6:43:be:2f:8e:a0:
         5e:25:e6:ea:7c:04:96:55:b1:bc:fe:d3:f8:a5:8c:1f:ba:56:
         dc:a0:62:8d:60:ba:cd:00:b8:02:11:6d:d5:d3:46:cc:44:ac:
         96:c6:59:2e:cd:6d:69:02:90:11:cc:e4:8a:96:ff:e6:1c:83:
         18:d5:0b:25:db:bd:24:37:12:8c:70:2a:0e:17:19:ee:50:82:
         77:4a:8f:2f:a3:4b:87:b1:be:73:49:0b:cc:60:9b:f3:74:f7:
         6a:dc:4c:08:6c:5a:28:39:0e:f7:a8:82:9d:fa:93:59:72:96:
         81:b6:5c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:16:14 2026 by rpki-client