Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05d2159d-ebbc-3c1f-9063-f58d37d22846.roa
File:                     05d2159d-ebbc-3c1f-9063-f58d37d22846.roa (raw, json)
Hash identifier:          sZPOayUTwtbwlGwXTdu3TYphQ5zQ+T+2NbSjtp0Ce3c=
Subject key identifier:   99:3B:C4:6A:E7:E7:CB:B1:6E:C4:7E:DE:CC:81:F7:81:AD:98:4C:07
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA8781CB740CB07DD42312C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05d2159d-ebbc-3c1f-9063-f58d37d22846.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        104.29.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:81:cb:74:0c:b0:7d:d4:23:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=5fbf6993-78fe-4749-97a5-b5b16e3560b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f0:80:c4:8f:de:2e:db:22:bd:4d:28:96:d3:
                    78:cf:f2:bf:e1:14:85:6a:d5:51:7d:4a:a0:64:ac:
                    28:fb:b0:3d:39:10:70:7d:93:82:bc:22:f7:79:93:
                    0c:17:a9:9f:fe:66:58:6d:ea:6c:3e:e2:83:3b:69:
                    55:a9:72:1c:37:26:cd:a9:5e:6c:3f:c2:86:43:2d:
                    44:b2:95:77:d0:38:53:bd:c4:fe:bb:83:dc:69:c1:
                    76:e1:2d:45:70:b1:bb:79:80:ce:ba:88:68:3e:7e:
                    ea:90:78:eb:d8:26:6a:b4:2b:e1:d8:ed:7c:79:33:
                    70:02:0e:e7:7c:9e:05:77:a0:00:ab:c9:06:fa:61:
                    91:7c:36:8e:41:b0:0b:0e:04:1f:73:55:ea:55:f7:
                    94:17:59:b8:3c:ba:ae:bd:db:f8:d2:dd:bd:8d:fa:
                    ba:01:87:34:df:c1:87:9d:18:36:d7:b5:ae:42:01:
                    9c:41:c0:49:7a:ba:e5:d7:18:2b:8e:ab:12:5a:c5:
                    5c:3a:6c:e6:1e:1e:da:0d:87:99:f6:3d:1a:f8:01:
                    8b:a6:11:9e:a4:ff:bd:50:0a:8f:fa:a0:93:dc:c8:
                    7c:ff:a0:88:78:81:37:53:75:eb:29:8e:30:08:68:
                    cd:b8:43:04:99:78:24:09:74:99:5f:bf:7a:a1:c0:
                    d4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3B:C4:6A:E7:E7:CB:B1:6E:C4:7E:DE:CC:81:F7:81:AD:98:4C:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05d2159d-ebbc-3c1f-9063-f58d37d22846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b3:7d:d3:d5:14:3d:98:f2:16:cb:ce:e2:38:06:d7:ec:a0:
         1d:92:b5:3e:4e:ae:49:da:86:ef:4f:d3:2a:81:9b:df:cc:b9:
         42:17:0c:a7:e4:a1:f1:54:c7:22:fb:d4:1e:f8:d2:9c:dc:f6:
         88:d0:93:85:da:25:95:ab:4a:43:d3:47:97:32:57:fe:b3:c6:
         ab:27:61:47:35:71:d2:82:f8:42:13:7e:c4:3e:f4:4c:51:14:
         b6:71:39:63:23:5c:c9:bd:ef:5a:c7:96:6a:fd:b6:f0:7f:13:
         c5:8e:78:08:d6:78:10:e5:aa:d9:4c:ea:f5:40:bd:56:d8:71:
         7c:55:87:2b:ac:0e:56:e7:35:29:b1:1b:ec:55:ad:e1:1b:9d:
         58:18:89:d4:10:3f:e1:f2:35:c7:fb:95:ef:53:ff:c2:36:55:
         c0:63:82:2b:e6:1d:58:d4:bc:34:2d:a5:8e:94:a2:c4:b7:23:
         8b:a3:4f:26:1e:e1:38:74:4e:34:56:14:d7:ea:09:84:e5:39:
         05:28:18:b4:b1:f5:1e:23:5f:54:25:c7:15:fb:3a:44:90:82:
         7c:a7:56:8f:9a:e5:b8:87:a8:38:5d:10:4f:d1:e1:4b:e8:d6:
         b0:1f:53:8a:54:a0:1b:00:cd:31:4d:75:8b:b0:b4:83:ff:95:
         95:f7:b4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:26:24 2026 by rpki-client