Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa
File:                     f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa (raw, json)
Hash identifier:          QPuR66RZlL8pD0w1hoWDHmpFMyDpaDy8mifUJekVV/M=
Subject key identifier:   A0:2F:38:82:8E:C6:6F:3E:10:2D:8C:37:CD:66:74:F0:27:25:EE:1C
Certificate issuer:       /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
Certificate serial:       010D0C9F4328584DB1DAD9486DDA734D32B7D7C0
Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     2496
IP address blocks:        129.237.2.92/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:d9:48:6d:da:73:4d:32:b7:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=a0a935a0-847f-43c0-aa06-0203db3d5dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:8e:ce:52:35:11:8b:27:34:89:f3:72:bd:
                    f3:eb:c7:7a:29:9c:25:4e:9a:a9:c4:f9:25:da:91:
                    37:91:fc:15:c2:39:63:c5:2f:56:8f:de:d9:48:f2:
                    a7:70:7f:51:93:51:f3:2a:b9:43:41:47:3c:90:9c:
                    9f:5a:6c:f2:6f:71:fc:e3:36:7d:09:64:2f:1c:4a:
                    5c:9d:e8:68:39:e1:de:07:8f:f9:06:b7:36:c9:0d:
                    ed:6d:33:f2:40:33:8f:0c:38:c7:22:96:4e:57:e8:
                    3f:de:ca:46:25:cc:66:78:22:c4:d1:e4:33:d5:c0:
                    6a:d4:f5:27:45:4a:6d:be:39:90:ac:44:43:49:ae:
                    b6:9f:f9:6e:b2:68:6a:16:e6:bf:d9:73:f7:9e:68:
                    46:e8:4e:60:91:ca:69:bb:63:ae:93:bb:d2:aa:86:
                    4d:6c:1c:4c:48:97:2e:9f:44:f9:fd:82:82:6d:8b:
                    76:16:54:ec:30:cc:3c:4b:35:e5:56:27:ce:60:44:
                    0a:17:44:dd:ce:2f:c6:e2:5c:b3:cf:ae:8b:04:ea:
                    0b:c1:99:0a:23:dc:cc:23:4d:f4:2a:ff:f4:10:7f:
                    23:f5:22:6c:7a:78:fe:e7:e1:93:6f:bc:26:46:29:
                    f2:07:d1:4a:5a:b3:58:0e:c0:95:df:5e:f6:f5:8f:
                    6e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2F:38:82:8E:C6:6F:3E:10:2D:8C:37:CD:66:74:F0:27:25:EE:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.237.2.92/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6e:9f:e5:5f:63:18:06:b5:9a:f3:83:4c:c1:9a:b4:97:f3:
         14:59:3e:e9:3c:df:61:e6:11:a9:0c:12:ec:c8:35:e4:45:46:
         de:6b:4c:77:57:c7:16:97:14:0b:38:80:84:09:5c:3d:fe:9d:
         1d:9a:49:8e:25:1a:32:88:20:b2:41:06:24:76:76:58:6a:7c:
         4c:83:37:97:d2:e1:77:a7:7b:c3:78:9c:f2:b6:a2:c0:e4:27:
         c3:07:c7:38:3e:0e:ba:39:3f:c4:4c:66:fd:be:2b:f1:25:09:
         e2:44:41:14:08:32:e0:2b:6a:6d:8d:82:57:1b:3b:39:c0:1a:
         32:8f:b5:ea:64:dc:45:98:92:19:5f:a3:da:02:99:15:60:c6:
         7b:8d:4f:eb:6d:f1:7e:96:fc:20:6f:d7:4d:f4:b5:09:09:f0:
         40:7b:7d:68:31:71:07:4b:c4:26:00:da:3e:46:32:e2:3a:d6:
         07:04:60:e6:77:63:ac:45:41:11:eb:b9:bb:38:23:cf:dd:8e:
         03:b8:b1:51:34:11:3e:7e:63:97:ce:99:95:f6:23:c9:4e:b8:
         f3:ff:12:fa:31:15:15:d5:b4:30:11:4b:7e:1f:8e:84:48:52:
         10:a2:5a:80:7d:84:94:d8:63:9f:69:6b:f7:96:a9:72:97:e5:
         c3:60:89:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:02 2026 by rpki-client