Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1897a00b-cd50-3675-8ff5-0455489b8412.roa
File:                     1897a00b-cd50-3675-8ff5-0455489b8412.roa (raw, json)
Hash identifier:          D1ozk0VYrHnmnINQS6UvXNME9wAVD+X2APXQSqmUY2A=
Subject key identifier:   75:3D:BD:72:DF:96:83:21:B8:9E:33:2D:07:47:62:32:E2:C2:99:33
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584FA18B6CBEF31621946E6E1A00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1897a00b-cd50-3675-8ff5-0455489b8412.roa
Signing time:             Mon 26 Oct 2026 14:21:31 +0000
ROA not before:           Mon 26 Oct 2026 14:21:31 +0000
ROA not after:            Sun 24 Jan 2027 15:21:31 +0000
asID:                     329621
IP address blocks:        149.29.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:8b:6c:be:f3:16:21:94:6e:6e:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 26 14:21:31 2026 GMT
            Not After : Jan 24 15:21:31 2027 GMT
        Subject: CN=2d873a94-b41b-438d-9091-655f59b7bdeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:00:26:b3:3b:d1:96:9a:10:69:33:57:06:bd:
                    49:37:07:30:16:73:b6:a1:58:53:aa:88:17:cc:96:
                    9b:58:f9:ba:2c:a7:01:e8:6d:8f:85:ae:ba:2c:da:
                    ef:77:63:dd:0f:0a:95:c5:f5:84:1f:2b:63:75:bf:
                    47:45:7d:77:d7:bf:e6:99:e1:ff:be:48:9e:f8:56:
                    d4:38:3f:d7:99:cc:cf:1c:f1:3c:2d:36:af:52:0b:
                    30:75:37:1c:a9:9d:df:0a:a2:ff:f5:ce:e8:c5:ea:
                    91:0c:6f:8d:e2:9f:ec:1f:9a:8f:f6:e7:8e:51:fe:
                    f1:d8:a8:d2:55:ee:32:0e:07:bc:20:20:65:6a:91:
                    ba:df:e7:ad:ce:ae:27:6b:07:29:63:2d:ea:91:55:
                    06:23:9c:15:c4:1a:ba:b2:30:31:df:d3:d4:2c:d9:
                    5c:3e:4e:d6:51:49:8d:32:9d:08:c8:64:37:b6:e3:
                    74:c5:f4:59:1b:6c:59:ec:9b:e2:4c:6e:80:db:a3:
                    8f:a4:08:df:94:8d:c6:ae:8c:63:06:72:8f:b9:d5:
                    45:c8:e7:b8:bd:5f:0f:08:20:22:71:35:f4:bf:2b:
                    d8:50:86:90:93:16:b6:74:71:53:6b:bd:b3:48:f3:
                    bd:d8:f4:54:7b:fd:99:bd:f1:d0:af:27:05:a1:9c:
                    93:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3D:BD:72:DF:96:83:21:B8:9E:33:2D:07:47:62:32:E2:C2:99:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1897a00b-cd50-3675-8ff5-0455489b8412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.29.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:87:4c:44:2d:24:4a:98:42:7f:6e:18:5e:d5:c6:2d:5d:b9:
         9e:0f:6c:60:5b:c8:cd:b6:e9:d7:ee:1c:d6:05:b5:40:36:de:
         9b:79:99:2a:ef:f1:8b:b1:c8:be:7b:b1:ff:e2:e3:e9:7f:61:
         f0:fe:18:36:fc:c1:fc:4e:66:fe:e8:3c:85:96:d5:23:ff:f1:
         5b:f6:ab:b5:52:29:2c:07:4d:72:53:97:18:52:f3:27:9b:bf:
         9e:cc:b1:e2:71:6c:43:2b:b2:14:dd:98:ff:9f:53:a6:97:3e:
         e6:3c:e0:6a:81:48:86:9a:a8:1a:15:ad:c2:bf:df:9a:cb:67:
         29:51:bb:29:90:3f:06:a0:60:98:68:e6:93:7c:78:f9:08:52:
         93:eb:be:a1:9f:4c:93:e2:fe:7a:b4:98:ff:c2:08:e7:d5:bc:
         b1:50:7a:c5:40:a0:b7:8f:6e:20:c6:28:17:7b:14:32:8e:c1:
         f7:e0:23:92:ae:12:64:4f:94:bd:15:2b:9d:c3:1c:d1:ac:e1:
         75:eb:ab:b8:90:3c:e3:4f:90:1f:ed:68:97:38:ff:33:bb:2c:
         af:16:b7:bf:61:65:c1:de:b0:0c:ae:28:34:11:7e:ca:93:3d:
         30:1a:cd:1d:92:ef:6a:76:a1:fb:ad:e9:25:5a:d9:0d:97:fb:
         89:c1:8a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:46:22 2026 by rpki-client