Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/64df6c9c-d63d-3e22-8f59-9a667a1fef3d.roa
File:                     64df6c9c-d63d-3e22-8f59-9a667a1fef3d.roa (raw, json)
Hash identifier:          88iS56mbSOpF2SO7BdK4J3knX3G6lQchCnAJmOw+Kjk=
Subject key identifier:   EB:2C:F6:39:A7:F3:2F:96:AC:C3:40:99:93:17:E7:2A:07:42:08:4B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E48249AC67BBEB3C805B8A240
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/64df6c9c-d63d-3e22-8f59-9a667a1fef3d.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        104.29.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:9a:c6:7b:be:b3:c8:05:b8:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=12c6e3f2-3972-4e7b-a689-1822016b3c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:20:b8:2e:4b:5e:2a:31:b0:9e:bb:05:9a:98:
                    c0:02:c5:39:7f:64:42:d5:2d:cf:b2:d7:35:23:e6:
                    7a:6d:52:57:1f:93:9b:70:b8:ef:03:92:0d:3c:cb:
                    3c:83:38:53:6d:73:da:47:12:50:cb:6f:06:ff:be:
                    06:4b:c1:56:96:ac:6a:33:45:56:1f:be:83:46:1e:
                    ad:bc:5c:85:81:fc:b1:48:e8:23:cd:13:bd:dd:7c:
                    2f:60:89:4c:2e:e4:4a:a8:f5:66:34:c6:99:eb:9c:
                    f4:14:6b:33:c0:d0:32:d9:0e:7b:5c:ae:c8:41:0c:
                    6f:3d:fe:f5:55:e7:60:3b:c1:15:65:e0:a6:8a:7a:
                    7a:18:0c:f6:63:e9:21:ab:57:27:aa:52:92:bf:4c:
                    4a:e1:a7:80:07:51:88:27:a8:df:1d:40:5e:38:ba:
                    ce:60:f6:94:6a:a6:c1:2f:7b:d1:67:11:dd:4f:e4:
                    45:3c:b7:eb:6b:9a:01:90:7b:fb:87:14:cf:c0:bd:
                    10:ab:d5:ce:eb:c9:71:5f:70:24:c2:c7:a7:a4:ca:
                    db:54:3e:d8:bf:b5:3d:82:12:4f:07:db:cf:00:02:
                    2c:0e:a2:33:0c:dc:af:00:05:c6:83:a6:f4:f7:22:
                    46:69:18:f0:32:0a:86:68:4b:76:05:87:5b:c4:0f:
                    31:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2C:F6:39:A7:F3:2F:96:AC:C3:40:99:93:17:E7:2A:07:42:08:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/64df6c9c-d63d-3e22-8f59-9a667a1fef3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:00:71:bb:43:ea:05:f7:dc:6d:65:e5:05:57:86:5a:fc:fa:
         ff:21:68:f6:5b:f1:b0:f9:d1:84:90:21:a7:9f:06:39:f5:97:
         24:ba:5d:54:70:61:23:3e:27:fa:5b:85:18:ff:9a:e3:65:8b:
         0f:d3:c8:16:0d:d9:9c:1b:43:bc:9b:d5:e9:eb:f4:c7:25:7c:
         54:dd:82:3e:42:70:e5:50:58:45:95:e8:f1:dc:a7:e4:f6:50:
         75:8a:37:36:96:6a:fd:8c:f6:93:64:57:89:87:30:2f:64:b1:
         ba:38:17:da:21:d8:c8:22:a3:5f:57:1e:0b:a5:ff:9e:81:b2:
         14:90:2d:9a:9b:c7:a1:bf:2d:ef:d8:68:57:4e:33:de:65:e9:
         18:5b:7b:4d:dd:ef:f1:75:22:44:e0:c7:78:f0:c9:f7:f2:93:
         2f:3c:c7:01:6c:3f:da:fe:00:b5:89:99:fe:06:3b:a1:50:09:
         6a:9d:aa:8d:95:a8:88:c0:76:ff:2e:d5:88:3b:9e:75:0e:75:
         31:53:b5:fd:25:36:36:ac:89:c0:ac:ae:aa:93:36:9b:51:bd:
         d1:4f:2f:e2:15:28:01:24:0a:d2:d7:c5:1f:c3:df:e9:52:83:
         35:35:51:34:f7:a1:dc:2f:71:11:86:1b:c7:ae:46:ab:a6:c5:
         ea:52:5d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:48:07 2026 by rpki-client