Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa
File:                     29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa (raw, json)
Hash identifier:          M2ByzKmuvevUP4ZKT7yspSjYht59nGkTqTdUJNKJ2c4=
Subject key identifier:   A5:D5:18:38:B3:1D:BB:6C:52:24:5C:C5:5F:B2:F0:1E:8B:61:AB:4D
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F4328584F63F80FF110597F4EEB5D7D80
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     27321
IP address blocks:        149.20.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:0f:f1:10:59:7f:4e:eb:5d:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=33e39b2e-0dc5-418e-b638-360c153d46c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b4:1d:e7:12:84:d6:6e:c4:1b:18:a0:39:83:
                    5b:11:c4:ff:e0:14:09:29:78:40:c5:de:98:7a:ce:
                    c5:90:87:74:84:71:ef:e3:ed:6f:56:bc:c6:50:a6:
                    e8:b6:90:8f:12:58:d3:48:c9:3a:dd:ad:9b:2d:7d:
                    d7:20:77:d6:c6:b8:9c:91:96:ed:ae:ec:0e:55:0b:
                    6e:24:ff:09:47:3b:be:6d:16:6d:69:f2:a2:1b:e7:
                    8f:87:86:49:29:2b:b1:cd:ff:73:e6:6f:e6:22:e3:
                    9c:13:72:a2:26:e9:0e:9a:fd:fb:87:4f:59:70:01:
                    2a:ad:77:45:07:8d:ea:ca:a4:7c:3f:22:66:70:ef:
                    0b:d9:5d:72:dd:5a:d6:ba:f5:e5:ae:22:21:d5:da:
                    f9:90:c7:9c:44:e5:2a:f3:ac:c2:4e:05:f3:50:9d:
                    8b:e3:44:8a:be:e7:6c:02:b3:b2:22:77:22:4e:63:
                    5a:9a:0e:69:8d:3d:12:73:5b:c4:97:63:bf:2d:9b:
                    fd:a5:55:e5:e9:9c:38:0b:df:c1:a6:6a:9a:ce:c3:
                    44:45:33:de:f1:c6:66:93:4e:2a:29:6f:e9:e1:94:
                    f6:df:44:e4:6b:81:bd:a2:a3:d1:cd:db:4b:97:78:
                    9b:75:b7:18:f9:0d:0e:e4:4a:fb:9c:a8:f8:4c:19:
                    07:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D5:18:38:B3:1D:BB:6C:52:24:5C:C5:5F:B2:F0:1E:8B:61:AB:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:71:e9:87:b0:50:86:96:f2:39:37:8f:36:89:e2:90:12:0f:
         f5:b7:fa:ac:4a:12:2b:64:9e:be:6f:2e:fd:bc:54:6b:64:58:
         33:4a:e6:13:cd:46:6a:95:f1:7b:36:4d:6b:ae:e2:9f:71:67:
         12:ab:8b:e9:55:53:8a:55:39:b0:75:62:04:b5:c5:d3:e5:4c:
         e3:25:b6:ca:52:67:6f:0e:4c:53:68:35:b6:8c:0c:c0:e4:6d:
         1a:b0:6f:4b:43:f9:83:2d:4c:8d:91:d6:0b:70:d8:26:fd:39:
         3c:93:ed:33:0b:f2:ae:70:31:fa:62:8d:be:bb:bc:3c:d8:7c:
         87:04:c1:5b:7e:b3:cd:2b:f7:6e:a3:b1:82:a8:6d:2b:f4:bd:
         64:8c:7d:9d:50:c8:87:18:ea:44:6d:60:fe:08:78:50:3c:15:
         b5:ac:bc:25:95:3b:7d:be:64:c8:74:1f:a0:eb:15:29:1f:be:
         25:2a:db:1e:32:dc:80:bf:ef:e7:4c:ef:4b:7f:71:39:11:c5:
         a3:f0:8c:0d:f1:3f:04:f4:ce:33:c7:a1:9e:fd:bd:04:1f:71:
         c6:18:50:b7:81:76:d6:96:86:95:f7:08:75:e8:4a:9f:af:2f:
         f3:c6:ce:2a:2b:d9:e9:40:7f:69:ce:91:41:ae:27:31:64:04:
         82:15:3b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:28:03 2026 by rpki-client