Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d272edb2-23ec-3606-8a77-0cddf94e936c.roa
File:                     d272edb2-23ec-3606-8a77-0cddf94e936c.roa (raw, json)
Hash identifier:          aNFxkgwYLl+ndkU9ma7PdELWUAIexV0wTz4jXQnpz7I=
Subject key identifier:   5F:08:01:38:88:45:1B:1B:7E:EF:C9:F1:B0:40:C5:6C:17:A7:9C:52
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E48249AFF6439584E272FD8A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d272edb2-23ec-3606-8a77-0cddf94e936c.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        104.29.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:9a:ff:64:39:58:4e:27:2f:d8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=44a39402-58b3-4b39-8a85-627d3d7113b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:c9:a7:03:26:a8:0b:1f:95:3b:b8:d1:67:
                    1d:b4:ea:7d:6f:39:e0:25:77:51:ae:5b:db:00:33:
                    91:ea:ef:af:7e:e2:05:7a:4d:51:01:b8:65:2b:f1:
                    fd:b5:ca:05:d0:5b:8d:7d:6c:94:05:b4:ee:90:d2:
                    88:b9:77:6c:84:d0:d6:dd:eb:d5:75:78:78:ec:3f:
                    43:dd:75:41:47:1b:5b:2b:50:34:be:25:ee:c9:6f:
                    97:17:de:d5:3b:cc:3f:48:f0:46:13:05:89:46:b0:
                    32:90:97:cb:0b:15:9d:a3:dc:78:74:02:a6:e4:16:
                    22:73:b5:fe:46:09:db:74:5b:25:12:84:b0:d1:19:
                    51:9a:9c:0e:c3:bc:91:1a:c4:fa:96:fe:6c:34:53:
                    b7:e1:1f:a4:a5:14:35:cc:7c:ca:1e:77:46:f6:aa:
                    24:4e:dc:1f:97:d9:b1:0b:a9:b7:ee:f4:34:32:29:
                    48:49:16:fa:6c:a9:4f:ac:3f:d5:85:4b:97:51:ab:
                    ca:82:7a:55:8d:e8:8f:65:14:2f:b7:7b:0f:59:65:
                    3b:25:31:3f:42:cf:82:4b:eb:33:98:df:a1:a6:83:
                    32:04:63:c8:8c:8d:4d:4a:71:d9:91:10:94:e2:71:
                    8e:64:80:5a:8f:88:6a:2b:a4:61:96:20:42:7b:cc:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:08:01:38:88:45:1B:1B:7E:EF:C9:F1:B0:40:C5:6C:17:A7:9C:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d272edb2-23ec-3606-8a77-0cddf94e936c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d2:81:30:b3:83:d1:82:b9:ca:8f:ca:af:b0:e7:a0:2a:ab:
         ca:cc:d5:b5:84:a4:1d:c1:2a:27:ac:ed:df:ea:8a:4c:9f:8f:
         4b:59:b4:1c:22:9c:99:25:27:cb:21:d9:81:50:1b:20:4c:89:
         95:30:d4:fe:2a:bc:9b:9f:ee:c4:33:ee:65:51:84:b9:21:38:
         bc:e8:f2:fd:77:c3:de:fb:75:62:6e:aa:d9:65:a9:e9:4b:a9:
         b8:6e:65:f2:5e:43:b7:5d:22:ea:19:76:22:db:5f:e7:38:8f:
         4c:0e:0d:a7:71:c5:d4:92:18:7f:ff:f1:be:ed:46:87:69:c5:
         8d:60:f7:16:55:ce:7a:c2:98:cf:80:8c:92:29:b1:3e:ed:6d:
         6f:71:68:31:bf:35:f4:7c:be:61:b7:ac:6e:61:9a:bb:c3:8f:
         1d:ae:85:4a:5f:f3:f7:ab:ee:f5:da:49:42:3b:b4:52:10:df:
         93:c2:0d:e3:e0:78:26:8c:5a:93:e0:0f:37:6e:b7:00:a2:84:
         27:fa:8f:5d:21:d2:a1:6f:9a:7f:45:09:ab:6a:e7:79:b8:2c:
         93:e3:5f:f6:fd:f7:c8:ba:55:5d:db:c0:21:5d:a1:70:81:e9:
         2c:71:47:a0:55:e4:f9:2f:05:a8:c7:e2:10:03:10:98:3e:4e:
         fa:0d:b0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:47:48 2026 by rpki-client