Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa
File:                     aafbf529-4916-398b-bbf0-e5bb5123a67b.roa (raw, json)
Hash identifier:          ZKwDNsQAVDH8t5Ed0UFxW8OBjmNp8QjW9YmofByjQtw=
Subject key identifier:   3D:5E:D9:71:88:F1:38:80:F9:0E:6C:30:0D:A3:E6:52:E8:A6:04:6D
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584ED001EEC789F8786F7400BA00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     2734
IP address blocks:        67.212.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:ee:c7:89:f8:78:6f:74:00:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=1d8781de-8c02-4082-9367-e58e9792a9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:14:2a:3a:35:8c:65:86:c7:bc:d9:8f:df:93:
                    be:c6:46:22:a7:1b:8b:cf:59:0f:5d:5e:d8:c0:7b:
                    1d:3a:4f:59:0b:12:4a:a0:2d:bb:c1:6d:33:18:1e:
                    66:0b:e3:0d:7c:ed:98:ff:33:48:47:14:52:fd:7b:
                    72:12:56:5b:0a:61:75:21:0d:6d:5f:85:4e:7b:0a:
                    08:ff:90:d9:b9:fd:59:02:7a:23:96:7b:af:9c:15:
                    cd:c0:5c:41:c5:22:55:be:51:83:1e:4c:c7:be:45:
                    a3:4b:63:ff:04:7a:a5:54:77:1a:09:36:9e:69:f4:
                    4a:02:81:0a:fb:4a:0c:94:0e:2b:78:51:7d:dd:6b:
                    1b:28:13:a3:b4:c7:0c:f3:a2:26:0e:58:9e:23:fd:
                    50:5e:9c:ba:37:ae:07:81:3f:08:d3:74:0a:c0:0f:
                    07:8b:06:c8:4e:b2:e6:68:39:64:cc:fb:89:a4:1f:
                    fa:9b:95:d4:96:5f:f6:a8:17:3e:80:cc:a4:5a:1a:
                    31:b4:f0:4a:37:19:94:98:47:c6:9a:53:66:a3:cc:
                    c8:2f:06:79:9c:14:29:4d:b1:b3:17:a1:f8:69:7d:
                    43:93:b7:40:13:7d:00:3f:76:48:92:f3:3d:fc:4e:
                    ae:d4:17:a2:88:e8:f2:ab:8f:c1:4e:7f:5a:64:4e:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5E:D9:71:88:F1:38:80:F9:0E:6C:30:0D:A3:E6:52:E8:A6:04:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:8a:00:43:02:13:7e:cc:8f:0e:42:78:02:d3:93:e0:c0:b3:
         67:82:02:10:40:04:d0:7f:8d:59:bb:11:f1:f3:19:b6:ab:7c:
         ca:c2:b5:2f:9a:e9:6f:a6:91:fb:f9:c3:ba:7c:a0:c9:7b:be:
         43:67:b0:fd:a3:2a:60:b9:35:ab:7c:7d:00:9e:5f:4b:d5:41:
         5c:2b:21:72:a7:d8:84:66:5a:e9:67:63:68:f6:fc:20:59:d5:
         f9:da:23:cf:85:21:16:8e:2f:8b:0f:e0:6f:b8:f6:0b:3e:0d:
         97:d6:09:c9:d8:87:88:d9:c7:f9:70:5b:4f:9f:dc:55:ca:b0:
         36:ba:da:e8:2f:38:2c:50:16:5c:5e:19:ca:6b:8b:59:71:95:
         2a:50:18:75:41:53:34:ea:37:e6:d3:45:10:69:3a:3a:8d:9a:
         b5:e1:83:1b:eb:2c:5a:00:e9:f6:68:c0:48:1f:cb:3d:58:de:
         0f:5c:da:8d:ff:af:fe:4f:5e:84:d3:74:bc:08:44:95:b2:53:
         73:98:c4:5e:f4:b1:4b:a7:d6:c9:ca:0f:5d:0c:84:88:e1:f2:
         a9:22:1d:0a:58:4f:0a:54:90:dc:43:a7:81:6c:b4:87:5a:0c:
         7b:40:2f:a0:80:d2:c2:12:57:76:a1:09:5f:e9:e3:b1:82:7d:
         07:27:5e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 19:56:12 2026 by rpki-client