Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d82588-cab9-3c31-8abd-a281fdf9e3a7.roa
File:                     21d82588-cab9-3c31-8abd-a281fdf9e3a7.roa (raw, json)
Hash identifier:          Nj/Y84FhYuH+oUYBjAjoCWHsFbSB4j0tuo4rX/z9/QE=
Subject key identifier:   4E:CA:30:7C:01:F1:A5:27:6A:0F:C1:DD:5D:12:F0:EA:52:DC:44:35
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E5A4A16194325DCDF5E638E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d82588-cab9-3c31-8abd-a281fdf9e3a7.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     16625
IP address blocks:        184.29.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:16:19:43:25:dc:df:5e:63:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=c2fa53c0-5bc8-4041-b383-145801d78a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:8f:75:9c:8d:4e:96:e3:58:bf:2c:d6:e2:
                    a2:60:44:5c:eb:ff:dc:1e:ca:af:76:e3:ed:97:4c:
                    a9:14:57:f7:eb:ab:20:46:4e:46:a9:63:f8:d8:68:
                    d3:46:30:85:71:c6:5b:eb:69:28:96:2d:36:9c:80:
                    81:12:00:3a:f0:b8:ef:2d:8b:94:fb:a8:33:52:aa:
                    46:4e:f6:5b:64:f5:12:ef:5a:08:81:38:ed:01:05:
                    58:95:d5:ec:d4:3c:47:17:5f:31:5a:be:03:a7:f0:
                    a5:74:b0:37:63:8c:46:fa:40:97:05:b4:2d:75:0a:
                    d4:a9:e7:5e:44:e0:50:b3:ca:e3:6f:be:b4:f1:30:
                    a3:00:ee:7d:c7:80:96:92:95:d9:54:b5:de:53:11:
                    6f:91:74:85:ab:56:49:ec:2f:2b:92:6c:84:6a:bc:
                    de:87:14:ad:1f:f8:09:6e:55:6c:bd:04:bb:55:c6:
                    87:35:f6:78:21:65:1c:50:08:f7:42:c7:46:50:af:
                    b1:55:48:c5:b3:bb:02:5f:15:4d:88:ba:98:d0:46:
                    5b:39:8c:b7:bc:ba:4e:af:e3:f2:5d:87:17:04:dd:
                    78:52:64:1f:84:06:01:c7:ff:aa:93:ee:a4:35:f0:
                    f2:7b:bd:9f:c4:60:7a:bf:5f:4f:2d:b6:d9:63:1d:
                    5d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CA:30:7C:01:F1:A5:27:6A:0F:C1:DD:5D:12:F0:EA:52:DC:44:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d82588-cab9-3c31-8abd-a281fdf9e3a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.29.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:eb:64:22:3c:96:9c:6c:a9:a6:da:7a:c5:a4:f7:68:b5:45:
         58:25:a5:6a:9e:ab:08:78:67:5d:90:07:f5:47:20:26:f3:5e:
         2c:13:d8:30:2b:36:65:40:a7:ea:d8:8b:c5:41:48:4c:e2:3c:
         e5:cb:1a:9a:0e:6f:f1:8c:ff:d7:5b:61:0f:90:53:5f:08:01:
         bb:75:2c:c4:87:98:2d:a3:fa:9e:70:7e:97:1b:fa:b9:5b:2e:
         4c:3f:24:89:5a:b9:94:be:91:9b:11:dc:46:25:f4:96:ed:f1:
         38:c6:2a:38:16:be:73:14:7d:3b:eb:48:9d:1f:9e:cc:35:28:
         51:07:44:b5:9e:69:cd:1c:25:92:b0:3c:2c:11:1f:24:ba:96:
         d6:4f:f8:0e:a8:6c:96:0f:ff:ed:68:1c:2f:28:e8:5c:4a:12:
         c4:df:76:62:1b:48:44:77:76:2b:69:50:35:74:d5:27:ad:02:
         be:c1:a1:18:94:78:f7:fa:38:8f:d4:81:95:9c:d4:c3:b0:af:
         85:c8:6b:85:7a:ee:c3:de:d8:5e:65:ef:14:37:d3:29:28:bf:
         2f:7c:79:41:77:d8:16:60:b5:3c:61:4a:cc:49:dc:7c:0f:51:
         50:71:be:a3:40:da:31:f7:20:63:cd:57:9d:ab:4d:d9:e8:f1:
         9e:71:35:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:41:49 2026 by rpki-client