Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/fc46c058-9c4b-3ec2-892d-5ea0c30d100f.roa
File:                     fc46c058-9c4b-3ec2-892d-5ea0c30d100f.roa (raw, json)
Hash identifier:          NPYn8nEcMcKikqe9OSv0CiTFZo5rZqtgy51djqjaA8A=
Subject key identifier:   4D:E1:00:B8:DC:2A:B8:81:DA:84:F5:D0:89:D2:2B:BA:D8:AE:78:0F
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584EE0C2122EB07ADFC7FFBA5680
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/fc46c058-9c4b-3ec2-892d-5ea0c30d100f.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     54004
IP address blocks:        134.202.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:12:2e:b0:7a:df:c7:ff:ba:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=f38e0f16-518b-4586-aa48-3fd4f653c5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a7:72:c4:70:f5:c3:dd:66:f0:fb:3e:a1:c8:
                    f8:fa:53:39:ca:10:a4:be:7a:32:34:9e:58:44:01:
                    57:c8:b9:2c:a8:4d:9e:e8:f5:22:12:8c:2f:03:eb:
                    70:2a:8a:c9:8f:60:79:9c:cf:f1:e9:ac:1b:ac:2f:
                    9c:98:5b:e2:16:a8:e4:c6:9e:c1:ca:c1:6a:7e:6b:
                    fd:ac:9e:b6:cd:42:0e:1f:1e:d5:33:46:03:4f:fb:
                    e8:a9:bf:70:90:4a:d1:06:82:f3:d7:f5:5b:01:79:
                    46:b1:51:dc:1f:19:6e:b3:7a:8e:c1:44:9b:89:ae:
                    aa:64:a6:c2:34:9b:e7:98:32:29:bf:9a:81:a9:c8:
                    23:37:27:7f:d5:e4:56:ca:b5:7c:ef:f2:40:9c:f8:
                    0f:4a:00:9d:85:4f:98:6c:6a:02:28:8e:e4:88:ab:
                    ab:43:0f:bd:2f:cd:f1:70:af:92:5a:36:80:85:fe:
                    3b:10:08:38:f0:23:0c:7a:3b:9e:11:6d:fc:45:7e:
                    73:34:82:83:af:4a:c8:e8:b2:cb:6f:3c:67:f2:d0:
                    a1:e8:3e:3e:2a:44:8a:7e:16:ee:90:95:ca:95:d8:
                    dc:08:0f:96:8b:07:b6:d6:16:77:95:85:79:2e:d6:
                    ec:5f:a5:f0:51:46:ba:03:62:35:3b:53:7b:45:d5:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E1:00:B8:DC:2A:B8:81:DA:84:F5:D0:89:D2:2B:BA:D8:AE:78:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/fc46c058-9c4b-3ec2-892d-5ea0c30d100f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:9d:e1:82:ea:f8:ea:a5:f7:b8:f2:da:b5:f7:22:3b:53:ad:
         94:90:38:0b:a4:a0:58:6a:ef:2c:8e:b1:0e:bd:c1:3f:6a:2f:
         8a:46:ec:03:40:49:8d:c0:67:29:2f:87:61:21:97:9e:40:dd:
         4b:1b:57:8d:fb:44:0a:7f:94:cc:d9:39:51:ac:b1:46:45:d1:
         78:13:46:4a:f7:57:e2:a2:e5:c8:07:b1:79:15:77:b2:20:6a:
         f4:ac:b2:c4:9f:c8:16:7d:cb:ed:58:3a:a3:f4:41:81:19:7b:
         00:ae:ec:db:21:af:76:ab:a4:9a:ab:f7:3f:94:f5:14:e0:3e:
         bd:dd:3b:4d:0c:22:50:32:db:70:88:98:67:fc:7e:cc:d2:b0:
         c2:2b:29:ae:8d:60:16:f1:04:0b:06:4c:68:e5:14:f1:98:7a:
         85:cb:5d:f5:fd:f6:aa:f7:fb:6e:4e:f2:69:aa:bd:c9:63:24:
         a8:60:e3:d4:e4:d8:88:b6:0c:ed:dd:d2:67:5d:02:8a:04:a1:
         e1:43:43:13:f1:c8:ef:9c:42:4a:f1:e7:d6:45:f5:fe:f9:05:
         97:48:bc:5d:7f:b9:4d:54:c6:85:57:30:cf:3b:f3:14:d8:d5:
         19:55:17:b9:ea:fc:f7:2f:e2:82:db:f6:08:44:59:9b:85:1d:
         7b:6d:fe:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:46:48 2026 by rpki-client