Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/d1fae880-b285-35f6-8ff7-129faa08b072.roa
File:                     d1fae880-b285-35f6-8ff7-129faa08b072.roa (raw, json)
Hash identifier:          mu40I04f725LrgK8ILWDTFeq4rbpGh3S59s5GqHXss8=
Subject key identifier:   FE:50:CB:83:36:93:CB:D8:90:76:10:99:B9:28:34:2D:C0:7F:31:30
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584EC7A1D158B6A698BC4BB05480
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/d1fae880-b285-35f6-8ff7-129faa08b072.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     0
IP address blocks:        206.72.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d1:58:b6:a6:98:bc:4b:b0:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=e0864831-d5d6-414b-87c7-43267a06ade4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f9:65:c2:52:7f:36:96:c8:d1:26:91:2f:f4:
                    8b:70:4c:7f:4b:99:9b:28:f3:a0:58:84:4e:90:81:
                    09:fb:7f:dd:ad:50:48:ab:05:76:a6:36:23:fc:30:
                    65:d0:fc:cf:82:0e:24:f6:76:97:ea:39:bb:af:f9:
                    06:49:77:d9:e8:ec:53:64:40:e4:90:93:ec:db:7c:
                    78:73:26:17:6a:f9:81:80:67:15:cd:38:64:3d:5d:
                    d6:0a:c2:d2:69:b8:0a:1c:78:27:b5:df:36:69:6c:
                    dc:cd:b9:c7:88:83:cb:c3:8f:f7:df:13:b7:69:44:
                    8c:87:6c:a5:76:a7:fa:dd:f6:c0:dd:cc:7a:b1:11:
                    fb:d2:7e:6e:bf:f0:62:ba:cf:b5:7a:a2:1a:cb:72:
                    ea:fd:01:9d:04:5c:e8:ab:57:b6:b1:90:62:91:1e:
                    f8:ff:41:bb:dc:69:2a:ac:36:6a:7d:38:bf:9f:ef:
                    c1:f2:f0:f2:f3:4c:c0:47:d6:cb:61:1d:f0:60:86:
                    26:25:60:6f:3a:52:86:37:02:fb:6d:e8:0c:a3:05:
                    ce:41:f3:ce:bd:ec:81:f2:04:ca:c7:a0:94:cf:7e:
                    48:40:77:07:b9:90:e4:59:ff:82:54:4f:98:01:ad:
                    52:8b:d9:bf:58:94:09:1a:62:c2:a3:4e:e1:cc:f7:
                    28:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:50:CB:83:36:93:CB:D8:90:76:10:99:B9:28:34:2D:C0:7F:31:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/d1fae880-b285-35f6-8ff7-129faa08b072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.72.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6e:b2:ed:86:40:7b:8a:bd:f6:90:93:84:0e:8c:72:5b:de:
         66:c8:32:5e:e5:de:03:80:a8:96:49:75:2b:4b:ce:eb:a3:3e:
         3a:47:78:c7:2b:01:97:a6:3e:37:20:0f:11:1c:9c:f4:f4:d6:
         6e:81:a7:ec:5c:76:7c:70:22:15:64:72:cb:14:78:5f:82:34:
         69:a7:3f:76:ee:79:94:dc:bf:9f:f3:eb:af:6c:3b:77:4c:66:
         83:0b:7e:aa:20:87:af:4b:20:fe:a1:0a:b6:5f:35:e6:d6:33:
         c6:7a:87:61:72:5d:24:2d:6f:16:4e:20:8f:80:e5:94:24:73:
         c9:11:3a:a5:18:62:78:7d:44:0f:61:e9:06:76:e8:c7:43:ec:
         b1:68:31:3f:bf:9a:8e:f9:fa:e6:ee:5e:d1:e4:47:ae:05:7f:
         df:15:31:ce:8e:af:ca:db:18:13:89:89:91:de:16:7c:8b:4e:
         dc:68:34:e8:6e:75:fa:db:e8:ba:1f:7c:67:d6:7f:f4:de:38:
         b2:67:da:f4:95:89:e4:19:43:8e:39:72:57:03:16:2d:f9:5a:
         de:eb:71:c9:a5:6a:b8:0b:a0:81:85:24:4c:4c:f3:71:7e:41:
         45:d3:87:a0:7f:e4:94:a4:d9:bd:35:f4:b1:b3:1d:56:63:7d:
         ea:e8:e4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:01:55 2026 by rpki-client