Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/39a8d9ab-c288-30b1-92f2-001a2c976038.roa
File:                     39a8d9ab-c288-30b1-92f2-001a2c976038.roa (raw, json)
Hash identifier:          I26WTnbpdZ5IZdIVLY/KlZKlU/MJwxVJPyv/LH6go1M=
Subject key identifier:   32:29:05:06:55:82:50:8E:FB:78:80:BA:DC:44:FF:EF:AE:46:84:6B
Certificate issuer:       /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
Certificate serial:       010D0C9F4328584E921F9E40B9191191CB755A60
Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/39a8d9ab-c288-30b1-92f2-001a2c976038.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     2496
IP address blocks:        129.237.174.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:9e:40:b9:19:11:91:cb:75:5a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=6b6c6e2b-b673-421f-a366-eed3d6a54792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2c:65:81:28:f9:89:a9:d0:92:29:e9:64:42:
                    21:d0:46:4d:20:44:f9:67:69:9c:a3:a7:6d:83:14:
                    5c:d0:47:52:03:b5:13:7f:c9:a0:e9:38:fa:7f:7a:
                    54:a1:1e:ad:f2:aa:c7:60:3d:d1:89:5b:ae:e4:61:
                    45:1f:3d:12:1d:be:22:2c:30:b3:92:9e:6e:be:c8:
                    a6:fa:fa:e0:05:fe:4a:b3:4a:09:c5:31:a5:20:11:
                    87:8d:f8:d4:d0:1e:13:a8:1d:04:a6:49:4c:79:24:
                    53:16:c0:4b:9f:c5:88:01:79:0f:09:99:0a:71:1c:
                    31:a0:b7:90:14:01:7e:ae:b1:4e:c8:5a:4c:22:dc:
                    6e:1b:4e:11:03:5c:29:87:ed:64:e7:17:8c:53:4f:
                    b1:19:39:8a:ce:76:ec:3e:3f:61:55:a5:c1:0b:ae:
                    a3:80:16:88:62:8e:98:03:9c:17:66:60:aa:bf:3f:
                    dc:9d:ee:6e:64:5e:6a:35:e0:5c:54:2f:60:fb:15:
                    b7:f4:ea:0f:30:32:eb:e2:64:7a:c2:fb:ab:1c:52:
                    a7:88:37:91:4e:8e:3f:73:26:36:e0:69:47:11:c3:
                    d6:b4:2c:92:a0:71:b6:60:bf:3e:78:8c:fa:b4:2e:
                    0a:06:38:55:3b:12:40:4e:d4:ed:0d:1b:46:90:e3:
                    08:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:29:05:06:55:82:50:8E:FB:78:80:BA:DC:44:FF:EF:AE:46:84:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/39a8d9ab-c288-30b1-92f2-001a2c976038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.237.174.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e8:01:45:e6:25:2e:36:35:60:32:51:9e:1b:2c:8c:36:d7:
         45:9a:f6:68:78:88:c1:05:f5:3a:68:2c:73:c9:63:fb:1e:55:
         8b:86:0a:7a:2b:bf:bf:04:e8:b6:fa:70:30:8b:34:84:60:11:
         8b:49:fb:c6:0e:d1:09:59:16:32:36:70:b6:fd:b8:41:94:c6:
         95:6f:77:cd:8c:da:b5:39:23:5b:67:96:01:59:da:54:03:ba:
         3c:8c:6c:82:b4:f3:4a:f8:81:00:a1:ac:01:bc:91:4a:73:f8:
         56:cb:78:62:74:3b:d5:da:57:24:24:39:f5:cc:03:e8:3f:0b:
         e0:c5:22:b0:a5:4b:7f:5f:bc:5b:b2:a1:bc:5c:31:af:e4:85:
         47:3e:86:68:1d:e9:a7:db:9d:f9:0a:07:4d:79:24:53:be:5f:
         4c:33:b3:0c:fd:65:29:b6:14:07:8d:72:b4:bd:48:ba:60:dc:
         e5:ac:be:b0:31:be:c8:da:e0:61:60:7f:5c:9d:32:a1:ce:40:
         06:d8:97:41:94:57:9e:aa:9e:74:ef:46:27:2d:97:ad:d8:f0:
         eb:f2:50:31:32:78:ab:42:06:89:59:df:0e:f9:b2:7c:aa:87:
         e0:84:b6:72:97:6b:45:3a:db:d0:5b:2a:95:47:54:c7:78:d1:
         6e:35:f0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:57:32 2026 by rpki-client