Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06573e63-97cb-3095-bb07-f1aff6375b83.roa
File:                     06573e63-97cb-3095-bb07-f1aff6375b83.roa (raw, json)
Hash identifier:          sSOEgVUkKOdk/ZkaVz6VqtGLsWVBQiocHf3fhDMKyro=
Subject key identifier:   9D:5D:8E:9D:CD:E2:84:37:B6:BD:80:58:38:DB:8D:2E:AC:6D:C4:13
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EA795E068629042C0E9DE3580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06573e63-97cb-3095-bb07-f1aff6375b83.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13335
IP address blocks:        104.29.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:e0:68:62:90:42:c0:e9:de:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5d4b6723-9cf2-40e9-b70b-2754fb9d7dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:24:45:8a:d1:7b:4d:42:a1:76:df:d8:bf:
                    4c:16:6f:3a:4b:80:f4:75:de:ec:e8:37:a1:48:50:
                    09:ac:f1:e3:68:de:b0:26:87:8d:7d:9b:cd:08:14:
                    9a:f6:ad:d2:13:d4:83:77:7b:b3:be:04:ca:57:9a:
                    32:51:86:d9:54:c6:dc:1d:13:18:41:81:04:44:9a:
                    5e:bf:38:68:79:fe:93:e9:9c:1d:6b:f4:e4:28:3a:
                    b9:c3:73:b5:c4:19:14:2c:47:df:d1:1c:ee:ba:b0:
                    9b:cc:5d:cd:a3:4e:02:4d:16:2e:ab:4e:95:0a:78:
                    09:f0:29:ab:7c:05:8e:df:05:69:54:b6:15:b6:35:
                    e2:ad:09:5a:bf:38:40:f3:cc:e8:9d:1a:0b:88:d4:
                    ac:f6:e4:77:57:49:52:c2:bf:1b:4e:4c:d1:88:14:
                    00:7d:a7:e8:26:03:49:23:48:28:29:1f:1b:44:18:
                    f0:3c:db:9c:b0:ff:ca:25:bd:37:d0:bf:c9:ee:2a:
                    6c:c2:8e:8d:21:a7:6c:5d:13:3a:5e:3d:eb:81:46:
                    c7:c7:19:60:45:1d:65:d5:5d:45:af:83:1b:a2:78:
                    9a:53:c6:4d:33:a9:d9:da:a2:82:32:9e:7e:7a:79:
                    3e:03:19:9c:0c:ca:f4:2f:53:ad:8f:18:9a:ae:f4:
                    7e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5D:8E:9D:CD:E2:84:37:B6:BD:80:58:38:DB:8D:2E:AC:6D:C4:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06573e63-97cb-3095-bb07-f1aff6375b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c4:13:12:1b:f5:e6:f8:00:58:47:ac:bc:9f:ce:5b:5d:b7:
         45:f9:d8:d2:09:4f:5d:f4:5b:1c:fa:33:ae:b4:2c:62:ec:3d:
         50:a5:f1:30:65:52:3e:57:6a:61:27:be:87:e4:e0:12:45:c1:
         61:29:19:ab:5f:ec:3a:36:4c:58:09:0d:94:6f:32:44:e6:4f:
         f7:77:69:b5:30:67:78:91:37:ee:4d:cc:a2:1e:37:a6:7a:70:
         63:9f:c2:30:9e:55:d5:d4:6a:5d:35:0e:27:67:1b:92:ab:43:
         18:16:11:5e:b1:b1:f4:7f:86:09:e5:6c:17:98:32:f1:3a:05:
         33:75:c6:bb:0d:38:cc:94:11:92:39:ca:8a:91:97:9a:82:70:
         5f:0a:95:d3:9f:ff:39:b0:62:05:6c:5c:52:83:3a:e8:cb:31:
         fa:46:e7:00:9e:49:ed:df:d3:d9:9b:cf:d8:85:ff:27:04:b4:
         8e:71:97:b5:8c:fd:1e:29:e1:91:02:f3:45:09:7c:ae:ee:39:
         f7:ef:83:80:5d:d9:d1:a9:20:34:10:20:80:76:81:17:33:76:
         4d:c6:2c:00:4d:b7:b3:af:dd:8d:96:5d:52:c6:91:dd:ba:ba:
         a2:3a:28:a5:7a:f4:bc:70:1a:ff:21:48:cb:26:47:80:ae:16:
         4e:f6:c1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:58:00 2026 by rpki-client