Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/84ca2728-b0e3-391d-8237-b70d83a756d8.roa
File:                     84ca2728-b0e3-391d-8237-b70d83a756d8.roa (raw, json)
Hash identifier:          voaj/O53eiviybTnZjyLSeuvTlLGJ8/YOQSCO31I+ak=
Subject key identifier:   74:34:9A:1F:A3:FF:CF:CA:81:DD:0E:2F:2E:97:05:DE:7E:42:52:74
Certificate issuer:       /CN=a84229b8-4341-4c6e-9665-bb4d991b9cdb
Certificate serial:       010D0C9F4328584F4C3D4EB0D270A8BD5C6841C0
Authority key identifier: 14:F9:A4:42:11:36:C9:E8:D1:AB:75:9D:CF:2A:CD:AE:7F:19:87:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/84ca2728-b0e3-391d-8237-b70d83a756d8.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     16509
IP address blocks:        159.119.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:4e:b0:d2:70:a8:bd:5c:68:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84229b8-4341-4c6e-9665-bb4d991b9cdb
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=851f5939-d974-4093-b159-93ec9753bbde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:f1:3e:fe:a0:26:0d:bc:da:e4:69:f0:8b:
                    0f:84:2f:06:6e:41:db:d2:46:3f:d3:1c:bd:6d:59:
                    7f:b3:34:e4:47:b2:6b:18:b6:e1:a4:71:95:73:4e:
                    30:26:d7:17:52:fd:1b:d3:12:6c:82:66:f6:27:8d:
                    09:ba:46:f9:57:1b:f9:26:db:8a:3f:29:cc:e6:4d:
                    df:bf:b8:f4:28:d0:34:d6:a5:d4:b8:89:48:d3:b7:
                    d2:5a:ce:d1:1a:97:96:6a:7c:a9:da:20:6e:bc:15:
                    c8:0e:cf:b7:66:dd:d0:d5:6b:2e:a6:56:9a:c2:73:
                    d5:39:4f:11:db:51:a0:36:01:e3:9f:c7:ab:9e:1e:
                    85:e0:3a:14:0b:c4:7b:a2:f6:05:eb:08:e3:31:dc:
                    97:70:0e:ea:1e:7a:36:61:8d:5d:71:ad:1a:f1:75:
                    d8:d0:b8:ec:f1:ed:2f:82:63:49:a6:8b:93:c6:93:
                    97:f4:0f:21:cd:40:87:0f:31:7d:1f:1a:6d:c7:70:
                    ec:f4:d4:63:43:5e:ea:42:fd:f1:5b:41:a5:3f:5b:
                    d4:9f:da:9c:6c:3d:2d:0e:9c:a6:4a:79:90:85:91:
                    7f:72:b1:69:d6:77:5f:39:7b:dc:c7:91:ee:eb:24:
                    96:28:26:e1:63:94:47:f0:9f:ae:92:a7:78:70:b5:
                    8e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:34:9A:1F:A3:FF:CF:CA:81:DD:0E:2F:2E:97:05:DE:7E:42:52:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/84ca2728-b0e3-391d-8237-b70d83a756d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.crl

            X509v3 Authority Key Identifier:
                keyid:14:F9:A4:42:11:36:C9:E8:D1:AB:75:9D:CF:2A:CD:AE:7F:19:87:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.119.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ef:6c:ad:ad:dd:73:e0:02:6b:68:77:ff:55:7b:ab:ff:35:
         b8:2f:78:2b:16:72:84:80:39:53:ae:29:b1:6e:82:c9:5d:f2:
         82:9b:18:e7:8a:4b:0c:b2:f4:f7:a9:6a:2f:df:1e:f9:88:8d:
         18:4d:b4:cb:a6:ea:fd:21:b2:df:f9:7d:4f:8e:a5:2d:89:88:
         90:26:cc:da:9b:ea:d6:b5:97:ec:b7:e4:18:2d:a2:b4:82:a0:
         a6:b0:24:18:73:74:fa:cf:d5:cd:ab:d8:cf:0e:3b:c7:ea:c0:
         98:f6:56:1d:5c:8f:1b:13:c5:08:9b:c8:bd:f8:3b:9d:4b:64:
         09:57:b9:8c:77:5b:59:c7:6c:97:65:69:0c:32:56:dd:08:d8:
         78:4c:48:08:53:dc:ca:fe:9d:b4:96:eb:65:b1:da:7a:89:ad:
         f3:a2:28:9b:65:d8:77:f4:eb:1d:52:f5:4b:17:74:7c:17:61:
         30:03:c9:53:33:9f:66:29:c3:1b:5a:70:01:01:74:98:f6:74:
         27:c3:dc:0c:81:22:77:25:c6:ed:8c:39:3c:53:7e:e2:de:ce:
         e9:26:85:4f:5d:a0:c5:50:06:6b:6d:89:1e:d4:bb:4a:98:b4:
         7d:16:73:77:a8:95:be:1e:85:8e:f2:47:93:98:dc:44:7b:82:
         8a:a7:c8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:07:56 2026 by rpki-client