Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/567043b4-0b80-3a50-9ce7-4382798826fd.roa
File:                     567043b4-0b80-3a50-9ce7-4382798826fd.roa (raw, json)
Hash identifier:          /y6KA2yzfbaR1wcq4Krs18+ibLkwZpmE5VpR8Wt3qKM=
Subject key identifier:   60:09:A9:AE:B6:16:BC:4A:A8:0C:7D:A8:DC:0E:2A:D6:0E:1A:B9:1F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EA7960F7A2D1E43AD49AF01C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/567043b4-0b80-3a50-9ce7-4382798826fd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13335
IP address blocks:        104.29.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:0f:7a:2d:1e:43:ad:49:af:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e26e746e-8615-4d3d-8ad1-773a144a12ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:19:9b:0d:36:f4:47:86:15:7d:72:3e:ab:ba:
                    fd:8e:d8:d1:2a:f4:78:f0:c4:ab:a0:e8:47:ff:73:
                    70:09:df:16:cb:44:e1:66:0e:6a:10:7d:a0:67:65:
                    10:9b:47:ef:4e:ba:49:96:56:8e:ca:68:96:97:9b:
                    3f:2e:80:d1:27:7b:4b:9a:7e:52:6e:28:b9:ba:bb:
                    cf:0e:fe:08:5d:ab:62:6f:74:d1:51:a9:fd:23:19:
                    a6:69:42:00:63:22:f3:5b:12:72:e4:0e:e9:7b:48:
                    ae:27:66:6f:b8:cd:45:c1:da:8c:9c:a7:10:2c:f1:
                    f5:b0:e8:4d:90:0e:f2:10:2e:13:34:bd:0d:99:db:
                    be:0b:73:57:92:06:cd:c2:20:6b:16:32:28:5d:19:
                    3d:68:0e:a4:39:ff:cd:65:7c:79:f8:1d:4b:65:a0:
                    98:b9:29:7a:66:2a:69:8c:8b:85:11:79:fc:30:c8:
                    ed:ed:f9:cd:6b:34:a2:0e:68:60:6c:7e:4a:fe:95:
                    5b:90:f0:8b:d8:63:68:3f:58:36:d6:ad:3d:64:0e:
                    78:86:c7:d8:d6:51:ec:d9:5d:7a:95:74:b7:be:ee:
                    5d:94:f9:11:7f:42:0d:ce:77:32:48:a1:9e:80:07:
                    42:36:54:79:ef:6e:ac:94:51:fc:16:c2:4d:c1:77:
                    f4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:09:A9:AE:B6:16:BC:4A:A8:0C:7D:A8:DC:0E:2A:D6:0E:1A:B9:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/567043b4-0b80-3a50-9ce7-4382798826fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b2:0c:83:08:ed:bb:40:6f:2a:6a:37:b0:fe:3b:ab:96:a1:
         e7:12:06:65:f2:fa:14:9d:25:6e:07:aa:7e:1c:fe:07:6b:ee:
         11:7c:12:69:f3:ff:12:da:84:73:72:40:93:98:f8:ad:e7:97:
         7f:72:81:b0:1a:b5:36:8e:d0:99:f5:25:12:59:d5:60:1f:e1:
         77:c7:74:f1:82:06:e2:35:18:d2:a7:81:df:63:05:53:35:46:
         af:b6:ed:3a:2b:a2:9e:a5:d6:3a:69:12:6e:46:b4:f4:6b:11:
         53:0a:9b:73:75:0a:98:87:27:8b:1b:b7:32:93:9a:c1:57:fd:
         11:e1:02:cc:3a:2d:6e:91:c2:fe:5b:28:f5:86:70:8c:94:6a:
         6e:ea:52:a7:70:1d:a0:1d:c9:cb:2b:a9:21:bb:db:06:9e:f7:
         92:1b:61:22:50:5a:d0:68:56:3e:c7:0d:96:4d:22:31:a3:fe:
         b6:74:b2:28:ce:6d:68:9a:af:31:d3:18:8d:80:e7:53:5c:8d:
         bf:63:0b:53:ff:bb:5a:5b:92:33:15:ab:3b:c9:3c:2d:ac:bb:
         a0:49:1c:4c:15:31:35:54:fc:ad:4f:c0:14:dd:5d:d6:e5:12:
         56:96:7f:08:f9:f3:b5:c3:bf:67:8b:99:49:ca:b2:d3:81:b0:
         15:d0:c8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:58:21 2026 by rpki-client