Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa
File:                     b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa (raw, json)
Hash identifier:          jMDPphR2PherXeV5bm2eYr16dV9xkgepH0OLBKpim3M=
Subject key identifier:   20:F5:8E:8C:4D:07:17:87:64:23:37:0A:3E:54:75:DF:D7:D1:A8:EE
Certificate issuer:       /CN=2745e9cc-67fd-4400-a1d0-d1c90565a0f1
Certificate serial:       010D0C9F4328584EA79C4CEC0B43D09240DF1F90
Authority key identifier: 5A:3F:43:2C:A0:C1:9C:EE:7C:A0:B4:00:34:A3:A2:11:EF:F7:29:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30674
IP address blocks:        129.62.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:4c:ec:0b:43:d0:92:40:df:1f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2745e9cc-67fd-4400-a1d0-d1c90565a0f1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=54d10baf-01d3-4e5c-8bc7-ae19578c15c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:3e:fc:09:df:ac:7f:a3:54:85:c0:f6:f2:
                    b7:59:03:a0:4d:a8:05:bf:de:0b:83:b2:8d:88:59:
                    06:9b:49:b9:61:5b:86:f6:64:da:26:a2:77:a4:24:
                    8d:de:d8:5a:4e:84:e4:00:53:65:c9:81:f1:e6:aa:
                    24:57:58:3c:87:30:b9:ba:cd:da:e5:19:83:1b:f2:
                    dd:0e:f2:59:ec:fe:b8:0d:92:76:35:78:cd:a7:c6:
                    00:24:fc:aa:e8:82:28:f6:d8:f4:cc:d1:18:ed:fd:
                    ab:e6:70:2f:93:e1:56:84:38:4e:43:8f:15:73:9e:
                    44:40:86:5c:49:b7:dc:d0:ea:e9:d1:f5:3c:5a:f4:
                    b4:b5:b5:07:9e:73:b8:03:dd:4f:76:3e:89:94:82:
                    90:7f:60:f2:1c:b2:92:45:56:89:e0:c1:b7:29:c1:
                    de:3d:9a:75:91:e0:0a:db:2c:17:3c:1a:71:21:60:
                    44:10:f8:34:b3:5b:ec:a1:78:22:95:bf:44:c9:40:
                    c4:cc:0f:e9:5e:88:b5:33:19:83:13:90:8f:8c:b0:
                    9d:45:71:c7:17:c9:00:52:12:60:a5:02:94:08:22:
                    13:34:6b:64:19:a8:9a:67:f3:51:d9:e1:90:6a:dc:
                    b1:f3:68:88:b4:73:ed:7d:c9:f9:fd:01:48:34:4c:
                    ef:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F5:8E:8C:4D:07:17:87:64:23:37:0A:3E:54:75:DF:D7:D1:A8:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/b04e92d8-015a-3eba-ae36-b11b75dd5c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.crl

            X509v3 Authority Key Identifier:
                keyid:5A:3F:43:2C:A0:C1:9C:EE:7C:A0:B4:00:34:A3:A2:11:EF:F7:29:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2745e9cc-67fd-4400-a1d0-d1c90565a0f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.62.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:fa:f0:00:a1:40:c2:b7:61:5b:7a:3d:5d:6d:64:50:3f:d7:
         ff:e3:fa:f9:3a:a1:a8:58:8e:4d:5c:d9:80:a9:06:42:f1:bf:
         3a:93:a1:dd:f5:c9:21:75:11:81:7f:c3:a1:8c:9c:cb:81:5d:
         40:2b:98:cd:7f:03:b4:df:8f:d5:cd:c5:85:07:25:8b:e5:a1:
         53:1f:be:9c:53:67:7e:2c:a1:ec:a0:ac:26:0d:74:33:45:53:
         7a:24:a7:b0:a2:0c:e2:10:b6:6f:d6:59:8b:0a:78:6e:2e:78:
         e9:3b:22:46:00:65:48:93:de:41:bf:c1:8c:ea:e2:e1:cb:94:
         5f:74:c3:27:d6:4b:75:4c:1f:c8:35:69:d4:b3:3b:a0:67:10:
         f1:ee:f4:d8:58:e9:a5:cf:df:7d:29:fa:dc:80:bc:12:76:5b:
         2c:b4:d2:9b:9e:d3:d0:75:7b:4b:5c:b0:2a:69:04:c9:13:70:
         8e:14:c8:7b:ff:ad:70:de:fa:30:63:13:76:ee:2b:2c:d0:2c:
         71:92:97:00:d7:fe:ac:04:12:e1:f1:b9:21:36:c2:04:bd:53:
         b0:ba:67:01:e4:29:27:64:fa:8b:61:d3:b4:c5:7c:ae:09:30:
         8c:d3:e9:e7:89:74:28:e5:09:f2:2e:6c:9d:12:36:5d:d2:ab:
         d7:0e:cb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:36:55 2026 by rpki-client