Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236/29606450-5510-3938-9536-7cb319bd9af4.roa
File:                     29606450-5510-3938-9536-7cb319bd9af4.roa (raw, json)
Hash identifier:          C0wfHhTe8RyBDbnQ010t3zTZeGpEYBJGJLhvRmnkRIg=
Subject key identifier:   F7:1D:9B:23:EC:AB:93:7A:91:FA:00:E2:28:49:D1:8E:0D:A5:4F:BF
Certificate issuer:       /CN=0e007d53-fcbb-4a0a-8679-7323c2a65236
Certificate serial:       010D0C9F4328584EA78791C2CD252956D5FF7FC0
Authority key identifier: D8:27:85:42:A7:7C:1D:A9:4C:8F:C7:2C:BB:0F:86:A8:27:22:17:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236/29606450-5510-3938-9536-7cb319bd9af4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399526
IP address blocks:        23.134.132.0/24 maxlen: 24
                          2602:f6ec::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236/0e007d53-fcbb-4a0a-8679-7323c2a65236.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236/0e007d53-fcbb-4a0a-8679-7323c2a65236.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:91:c2:cd:25:29:56:d5:ff:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e007d53-fcbb-4a0a-8679-7323c2a65236
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=db3eab3a-9404-4fbf-a9a5-1da686c05e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f2:b1:2f:2f:fd:5b:09:bf:c1:e4:88:f3:77:
                    2f:a8:49:31:9a:05:eb:b1:56:04:18:10:98:bd:f7:
                    35:22:38:d3:8a:82:75:2a:da:fd:34:de:64:83:2c:
                    d3:10:7d:8a:76:0c:24:b8:05:6e:2f:2c:8a:d3:d6:
                    dd:b6:b3:85:c7:01:49:88:2d:53:f6:b6:13:af:b9:
                    a8:18:fa:28:80:bc:1c:b3:37:d2:09:26:8c:7d:ba:
                    69:6d:23:59:8c:9c:35:92:fe:59:cf:40:07:ff:f8:
                    30:c3:aa:7b:b7:95:91:17:ae:dc:ac:4a:39:1c:59:
                    d2:d4:9d:48:d3:d3:27:db:18:f8:da:dc:d5:a7:6c:
                    50:98:a4:2b:a0:50:99:dc:11:29:df:b6:af:12:0c:
                    c4:82:2d:e3:7b:f0:d2:ce:af:bd:31:b4:48:7f:02:
                    2d:06:97:e4:62:6b:c3:0e:42:0a:91:0c:dc:8b:0c:
                    a7:59:e2:80:67:16:7c:9f:fe:d9:e5:2e:cd:63:03:
                    e8:e3:57:9d:c7:31:5a:84:b0:4e:2c:bb:13:38:3c:
                    9a:7e:c7:6b:0f:6d:dd:3b:01:5f:3f:ce:1a:33:5f:
                    d9:a5:0e:24:be:1d:8a:99:ea:dc:81:90:22:45:03:
                    70:47:7b:46:f3:40:85:41:fb:c9:5b:41:b7:a5:04:
                    55:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1D:9B:23:EC:AB:93:7A:91:FA:00:E2:28:49:D1:8E:0D:A5:4F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236/29606450-5510-3938-9536-7cb319bd9af4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236/0e007d53-fcbb-4a0a-8679-7323c2a65236.crl

            X509v3 Authority Key Identifier:
                keyid:D8:27:85:42:A7:7C:1D:A9:4C:8F:C7:2C:BB:0F:86:A8:27:22:17:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.132.0/24
                IPv6:
                  2602:f6ec::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:8c:9f:77:89:55:45:73:4c:56:54:9e:0e:34:ba:fe:4a:09:
         6e:74:12:8c:7b:ba:97:e5:6c:c6:b8:e7:a1:52:8a:07:67:cb:
         be:0d:1d:d2:7a:db:21:64:c9:ad:29:53:8c:70:ed:6e:43:cf:
         e3:df:05:33:1b:a9:9d:fc:94:a2:18:d0:fa:0e:33:25:7c:e1:
         8e:96:92:8c:f2:06:ec:dd:28:e7:1f:83:5b:8c:34:f8:71:aa:
         d1:01:92:d6:7a:a9:95:7b:99:e0:31:53:ea:6a:24:af:58:cb:
         a9:99:7d:af:5c:02:12:65:72:50:ee:a1:42:42:bb:dd:f0:01:
         fd:3e:78:c6:b7:a2:25:1a:c1:bc:e4:4a:8b:3c:bf:8f:d5:d5:
         4c:c3:ee:19:e3:47:e6:33:b7:41:fd:f7:15:e5:3e:d0:22:a3:
         f2:76:66:29:27:c4:e6:c2:32:f6:c7:96:f7:fd:ab:ec:84:c1:
         a8:a1:0c:b8:e4:ae:aa:2d:41:bf:62:8e:fe:53:6a:cb:ba:32:
         5d:ad:9c:5f:66:99:43:13:7c:da:15:a4:ab:2f:a7:61:e2:51:
         ed:45:af:20:0b:3b:1f:0d:f7:c1:1a:b0:16:c7:82:3f:b5:1c:
         4e:ba:73:f0:dc:c4:4c:1d:c5:b3:b5:38:7c:2c:46:05:98:7b:
         96:43:fa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:12:56 2026 by rpki-client