Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c930d291-9406-3b4d-9d79-662290d58625.roa
File:                     c930d291-9406-3b4d-9d79-662290d58625.roa (raw, json)
Hash identifier:          CbHC2ZBXSXDPmX8lkwygOpw7/sfRwrsL1MYjCBFF0cU=
Subject key identifier:   01:75:68:D9:AB:30:CC:23:7E:23:FE:D2:19:B3:F4:F4:9C:58:9A:5A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584E0005D0AF2D569B32276A1880
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c930d291-9406-3b4d-9d79-662290d58625.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     852
IP address blocks:        209.29.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:d0:af:2d:56:9b:32:27:6a:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=0dacc8a1-8524-4891-a8f0-1e8f91628b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:44:12:53:3f:94:65:a1:1c:e2:53:7b:c1:8b:
                    72:dc:a8:f8:73:d8:de:58:1f:2e:91:dc:3c:9f:98:
                    b4:4b:fc:d7:ca:de:fe:a8:a9:1a:67:cf:04:62:0c:
                    e5:85:94:b8:c3:49:76:90:16:0d:24:07:b6:55:45:
                    c0:1a:29:a7:55:f1:c5:c6:5d:44:12:38:46:2c:46:
                    e1:71:7b:08:49:e3:90:13:7d:71:66:ea:21:be:f3:
                    72:18:61:54:6c:b0:1a:ca:0e:2d:8b:b3:86:bb:79:
                    4a:ac:26:73:3f:5c:6c:60:79:49:bf:c4:6e:7c:0a:
                    c9:ca:70:67:fc:72:26:fe:86:b6:03:90:e9:39:21:
                    ae:82:bb:08:d5:5b:d7:88:d0:74:7b:30:f6:3a:82:
                    bd:b1:00:64:ed:7b:b9:88:08:39:6b:02:e2:a8:86:
                    8f:66:7a:57:0b:ff:0b:2b:04:66:07:cd:63:e9:79:
                    47:5d:bc:1c:d8:f3:4d:86:bf:25:d7:43:a7:19:63:
                    5b:db:a4:ea:24:b7:97:03:50:13:82:3d:14:67:2c:
                    63:e4:fa:47:54:b8:7b:b0:7b:4f:4a:2e:b5:6f:ac:
                    57:63:ee:d3:6b:86:2a:4b:57:79:26:70:81:a4:01:
                    63:7c:ac:22:9d:8d:d0:08:6f:61:81:2b:7d:86:16:
                    ac:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:75:68:D9:AB:30:CC:23:7E:23:FE:D2:19:B3:F4:F4:9C:58:9A:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c930d291-9406-3b4d-9d79-662290d58625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:e0:69:c1:1c:ae:af:62:ac:2e:3f:52:f0:97:47:03:77:13:
         7f:b5:15:38:ac:a7:53:09:d8:a4:22:ed:39:e2:bd:b3:e9:cf:
         5f:28:1d:0b:ea:cc:99:3c:a7:c2:1a:71:0a:1c:21:33:02:ca:
         23:07:d2:13:dc:be:a2:0a:06:29:31:44:fe:e0:68:f6:cb:1a:
         6f:72:4d:18:03:74:2f:74:a0:03:85:ce:78:2a:fa:cb:bb:c2:
         c9:77:4f:11:10:5a:80:93:d4:28:23:47:e3:67:59:fb:73:63:
         52:41:55:61:93:33:89:c2:79:83:8f:a1:c2:7f:ef:5f:f4:4b:
         23:8e:27:fa:45:52:af:0a:66:65:ec:37:ed:cf:e3:45:0e:15:
         b5:e0:c7:ae:40:81:4b:9e:1e:96:41:a3:40:cd:dc:10:9e:d5:
         52:66:f9:c2:48:42:76:35:90:d2:7a:85:14:db:c1:c0:8b:6d:
         ef:aa:71:8f:74:fe:33:50:94:0f:0b:0b:06:4e:c6:b9:7d:1b:
         8c:71:a5:e1:d0:ce:09:69:75:be:82:43:28:b0:68:ab:c2:71:
         e0:9f:c1:fd:68:62:e3:4a:3f:cf:f2:b9:55:ff:91:47:71:9e:
         0f:ab:a1:1a:df:60:2d:53:1d:40:89:82:55:6d:3a:6f:a6:00:
         cf:b0:aa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:57:13 2026 by rpki-client