Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa
File:                     a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa (raw, json)
Hash identifier:          r+zLdHVAawbNAFXCGl3jjcrQ4NNCtd+rHDoSKVsnSVg=
Subject key identifier:   B5:E5:D8:C8:BB:66:BC:32:44:C1:2D:72:EA:CA:AA:40:39:84:85:CD
Certificate issuer:       /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
Certificate serial:       010D0C9F4328584F0D6CE7DCE7BC55BC77B8C910
Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     18587
IP address blocks:        204.209.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e7:dc:e7:bc:55:bc:77:b8:c9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=db2a1e4c-1254-4048-b870-36e69d723258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9f:f2:91:84:ab:ed:86:03:06:f0:19:b8:a8:
                    ae:27:3e:c9:3b:d0:ec:0d:6c:c5:85:f1:a1:09:6c:
                    65:6a:34:38:f9:e9:57:7b:ca:2a:fc:5c:f2:89:18:
                    fd:dd:a2:3c:ab:ee:2b:62:38:a4:f5:d2:23:99:1f:
                    e8:8e:02:b9:26:d2:b9:97:38:45:6f:dd:63:2f:b6:
                    71:22:f9:6e:2d:20:68:74:28:e4:a5:ec:e1:80:7d:
                    35:e1:3a:da:91:3b:85:03:e9:13:33:d6:5b:ab:8f:
                    07:4a:bb:36:18:d9:2f:68:7d:88:bd:5e:f8:4e:05:
                    7f:69:50:ce:d6:b8:07:7b:ad:ce:23:91:af:0f:1c:
                    51:7d:1d:f1:53:87:35:b2:38:b1:d8:22:b6:3b:f5:
                    f1:9b:55:51:1b:0c:69:ec:5c:60:e7:20:55:7a:63:
                    22:a0:08:a6:f5:fd:41:0d:05:6a:f6:2d:8a:30:7a:
                    58:2d:8e:50:55:2d:df:c1:35:ee:93:98:78:bb:36:
                    36:5f:31:94:e8:c0:3f:04:9a:9d:01:20:ac:f1:6c:
                    db:15:36:5f:73:f9:74:bf:2b:1c:50:e8:ad:01:ce:
                    5f:16:43:72:f5:fa:67:c2:a8:d7:b5:31:61:bd:76:
                    ee:c9:93:b7:ab:13:ad:5f:ea:05:1a:3a:5d:87:2d:
                    1e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E5:D8:C8:BB:66:BC:32:44:C1:2D:72:EA:CA:AA:40:39:84:85:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/a1f6d499-4f97-3e96-b33e-adb8ba79683d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl

            X509v3 Authority Key Identifier:
                keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:5c:e3:ce:c9:f9:38:a6:2a:eb:cd:d1:4b:b5:3b:9c:4a:b5:
         05:8e:17:17:5f:36:34:9c:28:4e:80:7e:3e:4a:17:b6:c7:89:
         68:cf:f1:1c:e9:a2:08:00:22:29:57:9a:3d:26:96:f9:e5:67:
         04:8f:03:49:25:1b:7c:f6:5e:08:5a:27:e5:c7:5f:97:e3:db:
         64:a2:3a:55:65:25:e4:13:91:cd:86:aa:b2:c8:b7:ab:c0:e2:
         60:39:83:9f:89:db:16:7c:d8:63:f1:e7:65:e1:dc:b6:79:56:
         1d:bd:70:ee:c6:ad:63:6b:df:eb:fc:e6:71:92:2f:25:f0:21:
         95:30:d1:e7:4d:57:fc:b0:1f:67:46:e7:06:94:4d:de:60:f3:
         fa:9a:94:1d:c4:3c:28:7f:55:05:80:a1:69:cd:c1:09:c9:fc:
         df:d2:d0:a3:4b:09:78:38:5a:b0:33:66:9b:9f:52:33:8d:fc:
         1f:db:2b:b5:eb:ef:3c:03:f8:7f:e2:90:c2:7e:73:19:0f:b8:
         69:03:de:4b:00:75:e2:0c:08:76:29:2b:d4:e7:73:fb:5f:10:
         90:a9:c8:08:dd:4a:8a:dd:6f:8d:77:28:b7:43:4b:15:ca:58:
         20:05:7b:7e:ca:dc:c0:37:4a:17:a6:c4:ed:46:46:0f:da:8c:
         d3:13:a6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:29:05 2026 by rpki-client