Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/29cc1c42-f9c1-3dd1-a2ea-b9257f0c7530.roa
File:                     29cc1c42-f9c1-3dd1-a2ea-b9257f0c7530.roa (raw, json)
Hash identifier:          qH8Cw+/UcSp96cWDRdP8o6xw3oK2pBhugGMNXulxkRw=
Subject key identifier:   B0:B6:92:9B:E1:7A:83:57:E7:59:B2:D3:58:17:9A:B2:A9:FD:1F:BB
Certificate issuer:       /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial:       010D0C9F4328584EBA93DF83D96E84FABE29AB40
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/29cc1c42-f9c1-3dd1-a2ea-b9257f0c7530.roa
Signing time:             Tue 04 Aug 2026 20:46:49 +0000
ROA not before:           Tue 04 Aug 2026 20:46:49 +0000
ROA not after:            Mon 02 Nov 2026 21:46:49 +0000
asID:                     40933
IP address blocks:        216.220.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ba:93:df:83:d9:6e:84:fa:be:29:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
        Validity
            Not Before: Aug  4 20:46:49 2026 GMT
            Not After : Nov  2 21:46:49 2026 GMT
        Subject: CN=0e783d6c-6caf-4565-a5d6-f8b7a600ca01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:b3:8e:f9:92:c8:98:5f:b1:b4:84:10:13:
                    3f:08:5f:d1:25:9c:e3:b9:ad:86:16:fc:5d:ba:ab:
                    85:81:d4:10:85:ba:c4:f0:0d:26:42:05:04:a9:47:
                    44:8a:14:46:ff:ff:b5:65:48:fc:f4:fd:7b:70:9f:
                    d2:e5:7f:78:0c:77:29:3c:9b:61:58:9a:04:c3:07:
                    55:0f:b5:9c:e4:5c:2c:fc:b6:34:b8:a8:38:1b:55:
                    9c:39:35:a2:90:aa:32:2a:f0:fa:77:a8:9a:e9:7c:
                    94:ae:2f:38:e8:ba:02:fe:29:be:5c:a3:fd:1f:81:
                    8d:5b:4f:ee:fb:48:eb:5b:f5:93:b0:77:09:14:1f:
                    d8:bf:78:3f:2f:de:5e:fb:15:2a:a0:51:a2:53:1e:
                    69:6c:94:d1:9e:8a:4f:85:18:e4:15:a6:7a:0b:5b:
                    92:b0:81:6f:5a:e0:88:b3:2f:d8:c2:7d:a0:ef:6c:
                    47:d1:9c:2e:07:6f:db:48:92:a1:a8:4c:9f:b3:04:
                    e5:43:b4:f9:97:c5:5f:b0:04:be:3a:3a:04:03:7c:
                    f6:82:e0:a9:35:3b:93:26:e2:f3:5c:2f:3d:de:0c:
                    fb:1b:9c:ef:3b:60:93:b4:19:42:03:8b:8f:d3:de:
                    2d:40:fc:a5:4c:0a:06:6c:38:5d:e5:f9:8a:bb:4a:
                    15:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B6:92:9B:E1:7A:83:57:E7:59:B2:D3:58:17:9A:B2:A9:FD:1F:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/29cc1c42-f9c1-3dd1-a2ea-b9257f0c7530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl

            X509v3 Authority Key Identifier:
                keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.220.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b3:a5:ce:b2:0a:ea:13:bb:ec:45:21:82:20:f0:80:75:5e:
         a2:95:90:55:a0:36:cb:08:c2:1e:33:9e:d4:3a:09:38:9a:2e:
         37:6f:20:84:6b:e2:cb:e9:0d:3a:31:99:ea:c0:8b:81:97:ad:
         73:7d:b7:ea:e8:50:45:99:60:e3:dc:42:4c:ff:41:e4:87:ab:
         87:0b:88:16:5a:09:c6:a3:f8:fe:b7:c8:64:c0:90:e2:16:b5:
         5c:19:90:b6:54:42:3b:a8:ea:f2:a7:df:cd:58:7d:43:ca:ff:
         4a:d5:5e:45:f9:c8:01:d5:30:18:3a:87:ca:40:39:2b:f3:39:
         89:dc:ad:d5:f0:72:c6:99:0f:01:d7:71:ee:78:0b:d3:3f:a0:
         b9:28:3f:4c:dd:26:ad:43:76:d3:6e:80:bf:e8:81:02:d3:3d:
         91:30:77:bd:0e:db:58:7d:80:ef:08:a4:1a:ab:2b:ef:71:30:
         a5:61:7b:d0:66:51:d4:b8:b3:00:bd:4f:db:ae:dd:40:5a:30:
         1c:e0:63:46:ed:ff:b3:f6:c1:cc:2f:0f:5c:b4:b6:bb:42:34:
         1b:c9:42:4f:82:44:50:80:26:5d:75:86:b6:f4:1d:2a:8f:f4:
         44:12:1d:42:e4:49:ae:b6:13:69:e0:4f:7f:b3:02:78:53:62:
         0c:e5:32:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:29:35 2026 by rpki-client