Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/29868ec8-a31c-3e72-b508-0ea3f499badd.roa
File:                     29868ec8-a31c-3e72-b508-0ea3f499badd.roa (raw, json)
Hash identifier:          tPonoz0/gXpDlRuIuxIEF0YErLwElwGtgfcVhjjWMlo=
Subject key identifier:   C1:A4:DE:FA:11:24:72:36:49:4D:8F:D6:7C:B1:31:8E:2B:00:44:D1
Certificate issuer:       /CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
Certificate serial:       010D0C9F4328584EA79ECBD49F9B206D071B1EA0
Authority key identifier: A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/29868ec8-a31c-3e72-b508-0ea3f499badd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     394725
IP address blocks:        206.126.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:cb:d4:9f:9b:20:6d:07:1b:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=18d637ac-4970-49fd-b4f3-a90576b74e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d3:ce:4d:be:0b:0f:e7:d3:d6:2e:39:a2:e4:
                    1e:e8:8b:af:ed:a8:54:33:56:9f:f9:c7:e5:63:26:
                    52:6a:10:c6:94:5c:16:a1:67:aa:65:f0:8c:13:ff:
                    56:d4:3a:60:a0:bd:f3:ee:28:dc:52:34:d7:52:07:
                    f3:ac:4e:e8:d9:f2:f7:5d:d9:9c:6b:4a:40:29:59:
                    28:fc:fc:26:88:98:b9:d3:7a:34:48:61:65:89:a1:
                    c0:5b:3e:0a:48:01:10:55:e3:10:2e:65:d1:e4:7f:
                    65:14:9b:86:4d:18:17:05:b2:ec:b1:d9:06:04:f4:
                    41:ae:72:1d:cf:1b:99:79:1c:56:0f:c3:64:ad:19:
                    3d:58:d6:99:60:65:b0:24:19:c0:ad:14:16:dd:0a:
                    26:25:c2:c9:55:15:fe:9a:9e:53:78:8f:ca:18:1c:
                    a0:6b:64:37:d7:25:a0:96:07:5e:f6:0a:6d:47:42:
                    1f:a8:c3:00:f5:b1:85:19:3e:e4:6f:75:01:ec:ec:
                    39:e0:29:bb:c5:2f:1c:82:63:38:e2:1f:77:ee:21:
                    d0:34:51:98:64:5e:87:59:c5:c6:5a:ac:75:b6:73:
                    0f:b6:88:51:5a:78:73:5b:4f:0d:a5:ac:50:21:b0:
                    ee:02:60:52:0c:5e:9e:b1:84:b5:e1:f8:0f:53:4e:
                    cf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A4:DE:FA:11:24:72:36:49:4D:8F:D6:7C:B1:31:8E:2B:00:44:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/29868ec8-a31c-3e72-b508-0ea3f499badd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.126.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9b:34:58:f5:be:61:7c:36:9b:f3:79:c1:fe:00:58:b6:56:
         42:44:d3:b6:ab:51:1c:56:0b:22:65:8c:6f:5d:77:48:e4:3e:
         8d:dc:37:1e:e8:24:53:59:3f:a9:de:a7:7e:88:6e:6c:01:f2:
         98:e2:c3:8e:55:a1:f8:31:6e:e1:1b:9a:98:8c:58:36:cb:9c:
         71:5f:af:39:b9:52:87:70:7d:48:5c:56:57:9f:69:c1:23:c5:
         08:32:3e:fd:29:6f:12:84:8a:21:25:cf:44:fe:2d:9a:cc:75:
         f6:db:de:13:98:52:42:25:a4:16:1e:5c:25:df:f5:d8:04:1d:
         fa:be:49:b2:6c:c1:23:5c:5a:24:a4:6a:75:53:64:25:d4:6c:
         19:09:7b:c3:75:2f:bf:b5:94:08:02:7c:da:a7:5d:12:ed:c7:
         35:17:00:9d:14:1a:d8:33:eb:19:b6:72:d0:49:f9:21:50:0c:
         58:45:8d:ba:ca:27:dc:1b:3f:0e:35:a2:41:81:53:34:14:3d:
         36:14:61:4c:b7:9f:f3:e3:93:b7:28:da:2a:2d:ce:79:06:63:
         06:1a:cf:a4:e2:aa:d5:96:a9:9b:a3:38:21:08:7e:28:7e:38:
         e9:19:a3:d1:ef:16:bc:8b:96:d4:59:95:5f:84:e1:29:d8:a8:
         bd:24:38:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 18:04:38 2026 by rpki-client