Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b30fbad7-85f1-3dea-8d73-8baa9a73b216.roa
File:                     b30fbad7-85f1-3dea-8d73-8baa9a73b216.roa (raw, json)
Hash identifier:          eT+YSn+SjxUKPBZ/d0yQCUVfqyqSB/s/xNZDZeSgpjg=
Subject key identifier:   8C:E8:0E:E7:21:03:5F:E7:51:31:2F:19:36:9D:B3:3B:7A:48:C6:31
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4232F3842BDBB28AF067F8A
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b30fbad7-85f1-3dea-8d73-8baa9a73b216.roa
Signing time:             Wed 19 Aug 2026 18:03:42 +0000
ROA not before:           Wed 19 Aug 2026 18:03:42 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        129.250.113.128/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:2f:38:42:bd:bb:28:af:06:7f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:42 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=bb0f3e1b-3acc-4d30-b812-9d0909c25502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ab:b5:9a:59:c6:4e:be:bb:af:48:50:af:c9:
                    fe:74:70:a9:bd:05:be:39:d5:35:62:c2:e0:66:ac:
                    dd:60:4d:a4:18:86:6e:cd:19:ab:9f:42:05:fa:9f:
                    07:e8:bb:80:f7:67:5f:7e:9d:66:25:49:da:82:c6:
                    aa:ca:01:25:b9:ec:2d:2d:d3:8e:d6:8a:ef:c4:0a:
                    78:58:ee:6b:74:89:71:17:b0:9b:6c:07:76:99:86:
                    9f:d3:c4:44:39:a2:5c:aa:82:35:3f:42:ae:69:8d:
                    d3:3e:30:47:32:2c:22:a1:e1:12:63:cc:de:d6:de:
                    1a:45:00:c7:c0:ef:35:69:9e:ce:e1:43:d8:ec:c9:
                    b2:ed:ce:6e:9a:d0:71:58:71:b0:dd:31:05:bb:37:
                    a1:c5:5d:63:1a:e3:0d:ec:d7:01:cf:f3:5a:56:09:
                    fa:33:1d:b8:92:3c:4b:17:d4:41:ee:b8:c2:23:c5:
                    03:d5:2a:9a:6f:49:5d:a2:ef:5e:61:77:f3:e9:e0:
                    99:22:42:17:86:a3:60:29:de:9f:be:b2:2b:51:63:
                    af:8f:21:d4:96:29:32:6c:63:5e:a8:de:3c:1d:c9:
                    52:06:ab:2a:bb:f3:05:59:ad:6f:d2:35:56:84:e3:
                    ac:87:7d:c9:12:f4:5a:51:f7:5b:cb:40:ab:b8:af:
                    2f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E8:0E:E7:21:03:5F:E7:51:31:2F:19:36:9D:B3:3B:7A:48:C6:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b30fbad7-85f1-3dea-8d73-8baa9a73b216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.113.128/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:2f:36:0a:36:cd:3e:99:9b:2c:9e:49:d8:b1:e9:6e:ef:3e:
         16:f6:a8:6f:86:22:eb:77:0b:82:1d:b1:ea:d1:e7:67:4a:c9:
         23:b5:85:4d:84:2b:ac:33:26:bd:e7:16:c4:a5:1b:f2:16:00:
         1f:d7:36:b2:32:26:64:3f:08:fb:7a:ab:30:ed:61:f2:e2:27:
         d8:ee:a7:9f:84:b8:bd:9e:0c:2d:53:91:01:c6:76:90:76:25:
         6b:bf:23:49:b1:d9:9f:c5:c6:a5:0b:e3:01:ae:fd:cf:7d:de:
         7e:33:3c:9b:a3:e6:1a:ca:eb:78:28:53:24:cf:da:e9:89:3e:
         fa:ae:13:f5:04:c0:92:30:84:7a:0b:d5:48:c2:4c:af:d0:c5:
         ce:0e:ac:d1:d8:04:bf:31:4d:5c:f7:53:b3:46:5e:cd:52:6e:
         08:48:23:8f:44:77:e5:5c:fb:da:7c:19:64:de:e8:c3:47:88:
         e1:3f:ea:fc:92:b8:84:5f:22:19:5f:06:d0:a9:06:c8:4a:1d:
         15:e7:0c:69:ec:83:9a:ef:d3:a9:3f:b1:f1:23:ed:34:ed:c8:
         38:5a:d2:3d:2b:a1:c2:94:51:95:27:b4:bd:99:85:b9:8f:64:
         6f:3d:a5:a2:e3:28:eb:29:12:e6:86:62:b8:91:78:c7:cb:59:
         df:bc:d6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 20:46:33 2026 by rpki-client