Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/539e4169-8f09-39a2-bb5a-85c5ed7e4cdf.roa
File:                     539e4169-8f09-39a2-bb5a-85c5ed7e4cdf.roa (raw, json)
Hash identifier:          0lpti2Sc8wz2HspDKDsFMqUA1noDqQbmBCYc0/YK0Ns=
Subject key identifier:   49:A4:11:1B:53:62:50:21:7D:D9:52:D9:66:B4:B6:B8:C6:4F:27:D6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E48249B15A5E52C51E4756080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/539e4169-8f09-39a2-bb5a-85c5ed7e4cdf.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        104.29.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:9b:15:a5:e5:2c:51:e4:75:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=9b031e3b-dd21-4e90-88ab-a1ca1e250569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4c:1d:ea:5b:db:14:2d:af:d7:4d:84:5e:91:
                    7c:0b:94:49:ac:e5:74:2d:c9:75:6c:75:e5:db:fe:
                    75:11:e8:63:52:2a:4c:b0:a5:dd:8b:b7:69:53:4d:
                    c7:00:95:a6:87:dc:b0:f6:cf:07:3d:bc:f6:11:94:
                    eb:3c:d0:79:80:92:72:9d:ed:ee:43:6f:ba:bb:a7:
                    91:2a:10:b5:45:bc:f2:d3:1e:68:2b:7f:0e:bd:dd:
                    cf:57:43:b2:be:3e:4d:c9:00:23:fb:8e:d6:bf:c6:
                    b1:7c:95:65:9f:03:ad:56:e8:be:51:e7:f0:25:b2:
                    a7:8a:37:94:88:5f:36:34:bb:dd:22:16:7f:40:16:
                    a9:6d:1a:0e:63:b2:56:63:60:84:7f:5d:3c:8a:6c:
                    f3:1b:90:d5:81:3b:c4:d2:fe:dd:4f:25:8e:5a:1a:
                    bd:29:37:3e:2d:32:26:b2:1f:33:15:13:69:c9:cf:
                    36:b8:d1:db:c6:ee:31:13:f7:6b:c2:e2:cf:89:26:
                    f4:f8:4b:d2:e1:2f:7e:7f:4a:8a:1a:d6:e8:72:18:
                    d5:18:a2:f0:32:9f:78:8f:bc:4b:58:7b:af:6c:c1:
                    84:4e:45:26:a8:bd:61:b0:15:81:5e:09:98:79:16:
                    bc:cd:77:d1:ca:16:1b:0a:71:91:c5:4b:ea:4e:8a:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A4:11:1B:53:62:50:21:7D:D9:52:D9:66:B4:B6:B8:C6:4F:27:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/539e4169-8f09-39a2-bb5a-85c5ed7e4cdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:46:25:44:d0:85:91:b8:87:3a:04:30:29:65:e1:79:d2:cc:
         91:d0:9f:fc:71:57:35:87:85:69:35:27:e7:a4:ed:95:e3:35:
         cc:b9:ff:c0:64:2d:db:68:b0:fa:7a:f0:34:fd:fa:1c:d5:09:
         f0:92:70:2a:e0:39:d7:36:10:22:07:dc:23:3d:e2:c7:92:f5:
         75:b4:9f:32:1b:b3:0f:de:64:6d:75:f4:f7:96:bd:a5:61:f0:
         11:f5:b6:f8:00:fc:dd:c1:ed:22:19:47:5c:9c:a2:15:4d:2a:
         5e:49:54:be:4e:97:94:a6:9c:c6:d7:93:8a:b0:87:aa:43:26:
         ae:9a:e2:e4:9c:e5:5f:97:d9:a3:c9:c2:6f:cb:97:22:e2:98:
         81:e8:d3:8c:42:9b:0a:c3:d7:c6:2c:1c:83:16:4e:55:db:e2:
         89:bc:7c:de:cc:f9:2b:fc:fb:a9:73:07:00:59:fe:69:46:a6:
         06:93:da:36:bf:bf:ff:30:04:bd:4d:9c:55:ae:6f:b5:be:37:
         a2:0b:c3:e2:f0:9e:94:88:4d:0b:08:0f:a1:2a:38:fd:c1:80:
         78:38:e3:07:ea:17:98:e4:61:3e:c1:3c:dc:5e:8d:2f:8c:e8:
         ad:cb:7b:7f:d7:3a:96:d8:5c:b0:71:84:bd:6b:d6:7d:cf:30:
         0b:15:7f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:47:28 2026 by rpki-client