Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/769946b1-9e2a-35b1-b434-3dae219e6223.roa
File:                     769946b1-9e2a-35b1-b434-3dae219e6223.roa (raw, json)
Hash identifier:          9+97iu/3jYLV6bjgIElZCf0p1kCJuDEbGUeHiz2+fGE=
Subject key identifier:   DA:96:18:C6:DE:CC:1D:A3:2C:9C:C2:CE:BE:59:BC:92:B5:18:FA:8A
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F4328584DAE0827C0EEB8D65825B9FF80
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/769946b1-9e2a-35b1-b434-3dae219e6223.roa
Signing time:             Thu 30 Apr 2026 16:08:40 +0000
ROA not before:           Thu 30 Apr 2026 16:08:40 +0000
ROA not after:            Wed 29 Jul 2026 16:08:40 +0000
asID:                     399809
IP address blocks:        64.29.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ae:08:27:c0:ee:b8:d6:58:25:b9:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Apr 30 16:08:40 2026 GMT
            Not After : Jul 29 16:08:40 2026 GMT
        Subject: CN=181a7999-90a2-4a49-afb2-804ce441e24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:33:b4:2c:ea:a2:17:64:40:c8:ea:95:5a:
                    19:d7:20:93:2e:ba:72:69:4b:47:e5:6d:01:a0:a7:
                    f4:6d:ac:53:7d:18:bd:7f:e3:d3:93:71:f6:98:55:
                    cd:17:28:f8:26:78:eb:e8:33:f6:8d:bc:5f:85:84:
                    6b:f5:b5:6f:32:b2:cf:ce:14:a0:2d:51:e7:9d:ca:
                    8f:f7:03:14:d5:cf:47:a0:e1:e1:2a:76:54:f5:fe:
                    1b:f3:52:82:04:4f:41:35:cd:d4:93:c1:a3:6c:96:
                    9b:10:1d:76:fa:33:49:62:73:50:56:de:24:f6:4b:
                    a8:98:a5:f2:54:6f:31:63:67:b6:85:61:de:3e:48:
                    f8:38:57:fb:39:e9:09:c5:9a:e1:f2:d1:30:a2:8f:
                    67:a2:83:a9:d9:91:27:d4:4c:a8:82:7d:fb:55:df:
                    2f:25:b8:8f:fb:b0:0e:48:d8:65:51:49:34:16:77:
                    37:9c:6c:67:0c:36:e2:05:e7:98:6f:48:b4:da:2d:
                    86:77:fb:ea:b7:11:d4:e7:58:5d:2f:47:ba:a2:91:
                    93:68:20:06:c3:81:cc:76:d7:70:70:4e:33:d1:be:
                    7a:4a:82:4d:4c:f3:f3:04:b7:10:94:4b:db:4f:25:
                    1b:05:99:d3:df:2b:07:85:d5:65:e9:67:f6:10:93:
                    be:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:96:18:C6:DE:CC:1D:A3:2C:9C:C2:CE:BE:59:BC:92:B5:18:FA:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/769946b1-9e2a-35b1-b434-3dae219e6223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d7:73:b1:c6:c2:51:90:00:14:ca:3d:3a:ad:13:25:e9:34:
         4c:59:10:13:fc:c8:fe:28:44:e8:84:6c:77:13:99:ee:b6:1c:
         13:1c:4c:4f:66:7d:73:69:f5:f5:25:68:ca:fc:0b:cf:c4:18:
         cd:6f:e3:ae:b6:f2:34:bc:71:9d:95:9b:48:f4:d2:6f:33:26:
         0d:ec:28:d0:ab:ce:56:7b:57:2b:61:7a:69:07:39:4b:19:9f:
         bd:72:14:d4:1b:e0:01:85:e6:e0:3f:a3:98:b0:a2:6b:a4:58:
         5c:ab:ed:87:b5:00:31:5b:85:66:63:0a:09:4f:ac:d9:55:1e:
         e2:f4:be:34:09:d2:c1:58:ac:a6:3e:cf:55:fa:90:36:80:e5:
         f3:68:d4:fd:90:bf:ee:34:33:e2:68:fe:94:ef:8a:b8:ab:3f:
         87:56:b6:ad:38:8f:e9:ca:35:df:5a:c7:fd:3f:4e:39:57:25:
         ae:14:08:14:b0:24:86:b3:06:1f:84:39:d2:b2:05:d7:66:1b:
         03:72:02:1a:4d:7d:f3:92:44:8c:a9:bf:2a:51:fa:8a:c5:a5:
         08:bc:91:fe:49:06:d2:26:d4:73:a3:92:92:96:c8:2f:6f:20:
         ef:10:69:81:d2:1f:82:a9:d7:2b:84:8e:37:4e:f8:c3:a2:4c:
         a9:83:86:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 00:37:41 2026 by rpki-client