Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/29077896-9620-3e68-a116-dbfb8641ca35.roa
File:                     29077896-9620-3e68-a116-dbfb8641ca35.roa (raw, json)
Hash identifier:          Cw56OMyp5Y2qCGx4psMf+KWE7DVbOU6vJsmxKzW13Sk=
Subject key identifier:   93:38:EB:27:AA:3A:15:F5:58:0E:9F:7E:33:ED:B7:56:2D:EB:F0:FD
Certificate issuer:       /CN=f8f6ac79-beee-4eba-a69a-a3f28f625f4e
Certificate serial:       010D0C9F4328584DF4DB3DA2B75F887307282B00
Authority key identifier: 37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/29077896-9620-3e68-a116-dbfb8641ca35.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     12129
IP address blocks:        204.106.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:3d:a2:b7:5f:88:73:07:28:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f6ac79-beee-4eba-a69a-a3f28f625f4e
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=351b8e2b-bfa8-45ee-81f7-63724e42e700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:dd:c1:61:60:3b:80:22:e9:58:25:e6:28:
                    62:d8:0f:67:c6:90:4c:6b:b7:98:2b:9b:2b:c0:9e:
                    3d:73:33:66:ee:32:7e:cc:32:49:8b:11:56:1d:98:
                    8f:39:e8:35:30:54:6f:a5:54:f2:0d:fd:6e:67:01:
                    08:14:bb:e0:3c:06:29:0f:f8:19:8d:7f:55:3c:68:
                    2d:4a:a8:02:11:84:7c:51:77:95:fb:9d:a6:96:c9:
                    af:0e:5a:80:8a:73:b6:87:21:3c:b2:c2:f4:c8:a1:
                    b6:03:9c:31:04:75:35:23:90:f8:ac:8b:4a:21:c8:
                    39:dc:b9:a9:7d:ed:98:a4:8e:e0:42:81:dd:f8:17:
                    56:53:4b:4c:38:18:95:a2:4a:0a:68:0e:cf:2c:b2:
                    c1:99:65:36:64:84:ff:34:dc:40:de:71:dd:e6:0b:
                    8f:24:7f:22:1d:56:71:2c:30:26:61:b6:1c:81:2b:
                    a3:2a:a1:77:09:0b:01:4a:1a:38:5e:78:1f:72:ee:
                    84:b1:f9:cc:46:54:83:36:55:fa:c4:14:37:c1:2b:
                    0e:82:c1:d9:25:dc:7d:7e:f2:6f:8f:03:f0:93:4a:
                    15:cf:3e:64:4d:b6:c9:d4:43:d2:f9:b2:ff:8f:56:
                    7a:87:f5:53:0a:a8:b9:e0:70:27:c2:b5:98:77:b1:
                    79:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:38:EB:27:AA:3A:15:F5:58:0E:9F:7E:33:ED:B7:56:2D:EB:F0:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/29077896-9620-3e68-a116-dbfb8641ca35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.crl

            X509v3 Authority Key Identifier:
                keyid:37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.106.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:5d:ca:c0:67:1e:34:df:bb:60:1d:32:4b:23:02:9f:fa:d3:
         87:ae:f6:5c:ca:3e:87:9b:dd:0d:c4:b9:3e:35:c8:4a:ce:da:
         87:0c:83:88:77:05:a0:16:72:5a:65:8e:77:e6:5d:49:0b:25:
         bc:3b:32:1d:ce:5c:f8:6d:a1:f3:40:61:8c:b1:d3:29:55:88:
         fe:50:ff:01:fb:40:aa:ed:f1:d6:5e:d9:f2:b1:14:7e:c6:93:
         af:40:04:1d:5b:ea:0b:80:e2:63:06:03:9f:d9:9d:b0:75:a6:
         8b:8e:d5:4a:e9:58:e2:96:f8:79:74:7a:28:48:47:4a:26:b6:
         42:b3:d8:95:90:0a:3b:3d:d9:7c:03:23:77:a8:5b:f5:19:e2:
         61:3b:ce:1e:be:c1:e6:37:9b:56:d9:74:0d:fb:6f:5a:d6:23:
         05:3e:96:da:52:83:c5:d1:d8:f1:1d:40:98:01:43:a7:f8:85:
         53:c0:35:9f:01:f2:1a:1b:18:f2:a4:72:e1:23:b3:8f:14:6e:
         61:c1:4f:df:79:38:b8:ab:e2:00:a5:c6:98:1d:51:44:d2:0b:
         81:5b:b5:3a:39:db:91:d9:7e:e2:09:55:79:59:be:22:a8:fd:
         70:14:3d:fb:a8:be:aa:d5:14:f9:55:a2:d1:1a:97:aa:ae:67:
         5f:b7:8f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 20:40:44 2026 by rpki-client