Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a30c69af-4a9f-3c4c-8d54-b9102c913071.roa
File:                     a30c69af-4a9f-3c4c-8d54-b9102c913071.roa (raw, json)
Hash identifier:          d5yks3lK2PLPJHC3BAIf0WWlNi/nkxNHshWiZVPknuE=
Subject key identifier:   62:3E:BB:2A:19:1F:E5:54:B5:98:E0:08:81:C5:8A:71:B7:23:D3:0C
Certificate issuer:       /CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
Certificate serial:       010D0C9F4328584DAAE0374FE195C3C34EAFE100
Authority key identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a30c69af-4a9f-3c4c-8d54-b9102c913071.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     21693
IP address blocks:        192.92.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:37:4f:e1:95:c3:c3:4e:af:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=8e19fd8d-1d5c-4a85-b0f5-3b10d63f46ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:d8:42:98:ab:85:24:43:a0:40:a3:2d:33:
                    1c:0c:b7:0b:44:32:d3:e8:fb:b7:e1:06:ed:1f:24:
                    ad:0f:00:b2:6f:84:ba:2d:eb:5f:f7:73:ee:5f:ff:
                    c0:2c:8c:18:71:f0:05:6b:00:24:a4:20:ac:13:4e:
                    c9:60:fc:d9:1f:ca:4f:6b:cb:ec:1f:ef:23:f7:c9:
                    e8:08:3c:74:58:ef:58:75:92:94:3b:41:5d:4d:c3:
                    6d:37:ab:0d:4a:e9:38:2c:e5:a0:4d:30:c4:5e:41:
                    73:05:5a:60:16:85:03:06:78:16:0e:b6:7a:9a:2e:
                    08:43:b0:b4:78:94:d1:2f:7e:b5:10:1c:b7:85:8d:
                    dc:6c:78:1f:0a:08:09:de:29:91:69:73:a1:7b:4f:
                    ae:e5:29:58:86:d9:b4:3f:05:e7:4a:df:db:c6:d8:
                    22:c3:cf:b2:72:a7:a4:82:e3:3f:ef:56:49:5c:f1:
                    31:6a:9e:c1:82:3d:02:6a:51:fb:f9:32:88:d8:04:
                    5a:3c:55:f9:2e:24:91:c4:ef:c1:f1:6c:3f:2a:9c:
                    7b:b2:1b:46:df:b0:a8:d6:34:90:e0:71:89:b7:9f:
                    9d:8e:6f:a8:4c:5c:ce:85:7e:fe:26:b0:c2:e1:0e:
                    7c:39:f9:85:55:ae:52:21:5d:79:d3:f4:a3:7f:52:
                    c1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3E:BB:2A:19:1F:E5:54:B5:98:E0:08:81:C5:8A:71:B7:23:D3:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a30c69af-4a9f-3c4c-8d54-b9102c913071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl

            X509v3 Authority Key Identifier:
                keyid:9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.92.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ca:40:05:33:13:e7:43:82:41:fe:11:b5:92:d0:4e:fe:ac:
         44:aa:0d:e7:27:c3:44:da:81:d8:40:e7:ae:65:36:9f:7f:ea:
         e7:ce:4a:7d:87:f7:20:ca:78:9d:58:bc:8f:c6:92:db:82:52:
         bc:b0:74:27:53:b1:f3:93:dc:1f:10:21:71:6a:43:49:08:5c:
         a0:a8:76:8f:88:d5:dd:8b:c2:2c:bf:87:fc:27:41:dc:5d:4c:
         cd:03:7e:65:17:5b:72:73:c2:8f:3d:eb:3d:20:38:27:56:6f:
         82:e2:f1:4d:16:ac:17:c1:dc:df:5d:02:1a:e4:3e:28:a8:c5:
         f6:b0:8c:c1:4f:77:6e:df:e9:97:d5:4a:bb:d6:e4:1b:55:3f:
         57:1e:98:f6:7c:68:f4:c1:93:e3:91:ac:8a:79:3c:dc:1c:1c:
         94:b0:5b:24:29:89:da:a5:28:b2:e3:d5:26:00:21:1c:2f:1b:
         33:5f:dd:8b:9f:b0:e5:11:cc:94:a9:02:87:25:33:da:e8:f0:
         38:37:73:ca:98:35:c0:e1:6a:67:3d:f3:0e:43:10:40:b5:cb:
         be:47:93:83:57:81:ac:91:e2:d2:7d:68:d7:30:50:c6:0a:c4:
         82:23:46:33:8f:5d:df:a1:b9:30:ca:68:e2:ee:73:13:b4:09:
         cf:0f:48:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:15:45 2026 by rpki-client