Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/29faef7b-fbbf-39be-bd63-c00358954ef1.roa
File:                     29faef7b-fbbf-39be-bd63-c00358954ef1.roa (raw, json)
Hash identifier:          /FRtee78Lo/0jBuG6NaGyjpxTAt8DVY0bsizWxNuCz8=
Subject key identifier:   CE:D2:5E:99:6F:A4:C9:BD:67:43:6D:07:12:2F:B7:A7:1C:A6:15:27
Certificate issuer:       /CN=30ed4af0-ad84-44f1-84da-cd9b1c667340
Certificate serial:       010D0C9F4328584DD625C9E58BCB7E2160995800
Authority key identifier: 7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/29faef7b-fbbf-39be-bd63-c00358954ef1.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     32707
IP address blocks:        216.8.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:c9:e5:8b:cb:7e:21:60:99:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30ed4af0-ad84-44f1-84da-cd9b1c667340
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=a3e771b6-442f-44e4-9b73-4746a55a6637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5d:f2:ac:5a:49:75:63:27:d2:35:3c:61:5b:
                    83:5d:e2:ec:6a:87:b2:66:9c:23:b1:33:9a:33:bd:
                    09:a8:3c:77:da:cc:09:25:b0:c4:3f:b1:95:b3:a8:
                    cf:50:1d:30:d9:74:5a:a4:92:95:46:c5:58:d9:81:
                    0f:0e:2b:5a:8d:a7:d7:6c:09:ed:08:02:28:b4:e0:
                    b9:a4:a7:cf:3a:6a:a1:5f:1d:f0:16:93:ae:13:c3:
                    01:ef:42:fe:c3:30:8c:b5:f9:a2:0d:af:69:86:bc:
                    52:0b:83:06:9a:af:29:9c:52:0d:d5:62:87:4a:3e:
                    fd:05:f1:10:ae:1f:3f:f8:df:25:ab:9e:a3:24:b8:
                    f3:93:f6:a5:63:9b:0e:28:d2:69:1c:18:0e:a7:f7:
                    21:4f:44:fd:5a:97:b0:70:ad:aa:66:d5:1e:46:83:
                    cf:0d:83:ef:31:e7:16:18:f4:e1:c2:42:bd:31:fe:
                    62:33:01:09:a4:f0:cb:66:e9:43:27:7f:e9:d6:17:
                    8e:60:4b:8e:a6:72:5a:9d:ad:12:34:5e:89:6f:36:
                    0c:23:77:02:3a:b8:f1:37:a5:1c:fd:ec:0f:18:16:
                    ea:7c:68:d1:e5:c4:ac:1c:52:66:8e:dd:86:c8:3c:
                    33:f5:a4:2b:09:03:70:37:92:04:44:c1:e3:86:14:
                    f7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D2:5E:99:6F:A4:C9:BD:67:43:6D:07:12:2F:B7:A7:1C:A6:15:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/29faef7b-fbbf-39be-bd63-c00358954ef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl

            X509v3 Authority Key Identifier:
                keyid:7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.8.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:7e:d7:04:78:cf:41:52:c1:a2:ce:fe:15:42:de:96:24:5a:
         ec:0e:5c:e9:4d:0f:38:a7:a9:4c:a2:f7:f4:eb:b6:c5:d2:58:
         b3:88:a7:8c:a1:c6:23:7c:e7:d0:14:02:28:23:7e:04:2c:91:
         71:fa:77:d2:e0:65:a8:13:d5:df:25:04:bd:41:2a:ae:16:aa:
         3d:04:2b:aa:6f:01:49:4a:f9:be:0f:70:15:db:9f:31:65:95:
         48:6a:2d:cd:78:cd:98:0d:33:fb:c6:82:c7:5c:54:3e:0f:1a:
         c2:60:39:2a:62:86:4f:6b:93:bd:4f:17:7c:87:31:5e:43:ba:
         6b:25:36:15:db:34:fc:f1:2e:8f:13:ce:52:76:8c:f4:06:2c:
         e1:88:bc:5f:3c:a0:f2:d2:d5:d8:40:44:71:51:3b:3d:20:dc:
         d0:4d:1b:a2:d6:38:ef:1c:2c:d6:fb:7c:75:db:e8:d8:cb:61:
         cc:ee:0e:cd:60:cf:50:61:53:b6:76:51:68:f6:eb:41:0c:35:
         3e:ec:2b:9b:db:4b:1d:87:75:98:b8:33:da:0d:89:60:c9:53:
         b2:e4:77:ca:d6:8e:4d:0e:9d:cf:eb:05:b1:88:a5:95:e5:4e:
         d4:3f:51:91:01:24:95:ed:f8:0e:91:07:60:79:81:8c:83:54:
         90:fe:6b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:41:37 2026 by rpki-client