Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/29b39311-24d2-3b0d-86a6-be6335416183.roa
File:                     29b39311-24d2-3b0d-86a6-be6335416183.roa (raw, json)
Hash identifier:          uYFNZXNZ0j2mygeiw4EgovPmXFNyxC2HCK07NkCj/Z4=
Subject key identifier:   EC:5C:9F:75:5E:3A:BF:7E:3B:C5:AB:F8:21:FC:1C:F5:25:62:EE:3E
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584EA787491A39FCB4724A1B8A00
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/29b39311-24d2-3b0d-86a6-be6335416183.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     4922
IP address blocks:        216.30.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:49:1a:39:fc:b4:72:4a:1b:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d581dcbd-37da-4ac8-b609-cfe6900d6926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b0:b8:97:f3:e8:c7:ab:b4:25:66:a2:92:5f:
                    15:7a:04:a2:64:0d:70:59:fb:54:5e:8a:65:b8:c7:
                    fb:30:e2:b3:c9:1f:81:7b:3f:8c:66:aa:ae:cc:a5:
                    59:41:9f:2c:e8:4d:2b:97:30:45:54:5f:a4:fe:b6:
                    a4:1f:87:28:42:74:9a:aa:d9:b1:90:d6:4c:42:cb:
                    82:95:f3:7f:ba:57:3b:3f:87:83:27:67:ce:ff:57:
                    36:8b:0d:3a:27:4f:38:0a:83:50:32:54:ad:b9:5f:
                    b9:a1:18:62:32:b6:da:2e:b9:e8:fa:a2:5c:89:e4:
                    6b:3b:2c:f1:8c:b8:78:07:5d:f7:2f:33:1d:55:73:
                    d0:e5:d8:f8:99:90:10:67:e7:4c:73:4d:f5:a8:32:
                    22:71:ae:25:0a:21:f3:bc:d5:8d:41:97:7e:25:c8:
                    75:c2:aa:00:e3:2a:42:28:75:2d:a0:90:8d:06:7b:
                    88:5c:5b:95:d8:e9:91:0e:17:b3:9f:bd:90:3c:7b:
                    08:4c:25:83:a6:cd:6c:fd:e3:06:d2:88:76:53:56:
                    b9:90:ac:67:33:6f:8f:8f:d8:bc:e5:ab:a2:47:19:
                    e7:86:3e:0c:ae:ed:5e:cc:df:6b:72:b6:5f:c4:d0:
                    a2:1d:08:ec:ae:42:71:9d:31:8c:fa:c6:91:0c:20:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5C:9F:75:5E:3A:BF:7E:3B:C5:AB:F8:21:FC:1C:F5:25:62:EE:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/29b39311-24d2-3b0d-86a6-be6335416183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.30.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:0a:42:06:33:a3:8d:aa:21:ce:5b:b5:84:f1:4f:4a:98:
         65:ca:9b:6e:29:21:b8:70:23:fc:7a:fa:05:59:d8:4b:76:de:
         5b:ec:c4:4f:89:cd:85:6c:a6:d9:a1:79:99:3d:74:37:df:58:
         fb:b0:89:b1:85:50:40:be:e6:87:59:3d:c8:ff:9b:13:f0:01:
         ad:72:26:eb:c8:f3:c3:64:c4:a6:23:b1:7e:98:71:ab:0a:5a:
         8c:be:93:39:5f:ce:e9:d0:94:e3:9b:b4:55:a6:ee:c8:a9:91:
         a0:c6:df:e7:c8:7e:4c:ad:4c:0a:7e:64:30:cc:39:09:d6:8f:
         79:27:af:88:6d:ed:78:1c:a6:b3:05:5a:e5:fe:31:10:7e:d1:
         35:6e:f5:28:d7:11:a3:0f:23:ba:04:09:de:62:47:e2:64:7c:
         5a:5c:dc:61:ed:18:ac:62:a5:d5:0d:19:43:d0:c1:0a:b9:dc:
         9b:74:0a:ee:a6:68:08:80:e4:1e:5f:f0:b2:0c:49:86:71:19:
         d0:73:af:64:4e:70:34:61:da:b2:1f:77:8a:7b:51:bf:98:fc:
         00:07:41:00:f2:2b:d9:c5:c6:a1:2f:04:6a:c1:c3:c0:95:02:
         63:34:e2:07:8b:77:98:17:a2:fc:c9:79:8c:45:53:14:4d:9d:
         27:2b:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:39:43 2026 by rpki-client