Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9cb4e0d6-aeef-3966-b998-b8125fd37ed6.roa
File:                     9cb4e0d6-aeef-3966-b998-b8125fd37ed6.roa (raw, json)
Hash identifier:          kF8JayX8eZJBnQMhDlgZPWUJI8oqLdCHkN3or7M380g=
Subject key identifier:   49:67:FB:54:7D:8F:81:CD:E7:DB:49:5C:8B:D3:66:8A:00:C8:A5:9C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E97B50EE7124D2D70159F632C
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9cb4e0d6-aeef-3966-b998-b8125fd37ed6.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     274773
IP address blocks:        216.10.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:0e:e7:12:4d:2d:70:15:9f:63:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=7bb69c06-b5db-44b3-bb5b-8e7212070a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fb:65:10:8b:02:f7:66:61:77:4c:69:7d:63:
                    3a:3f:1c:40:bd:df:88:a1:36:31:07:1a:cb:27:d8:
                    21:ec:5e:82:11:3d:81:38:45:dd:94:18:98:e2:ff:
                    ae:9f:b6:2b:36:ff:50:12:89:1d:ca:11:e7:43:54:
                    b9:2f:53:e8:c7:3e:29:43:2b:24:3f:76:bb:df:73:
                    15:a0:98:be:09:f0:81:4d:58:32:82:3c:68:ae:fd:
                    bc:55:57:c6:32:53:dd:dd:9c:cf:ad:79:2b:ef:27:
                    fa:ee:d3:62:82:29:31:7e:74:02:3e:a4:79:21:ef:
                    83:4d:11:e8:23:b9:8e:b6:07:69:82:fa:91:1c:9f:
                    8e:9b:10:84:9a:a8:b3:ec:c3:ea:45:a5:ad:cc:88:
                    9c:e2:0b:19:e5:a0:4e:03:24:73:f2:d9:c7:c0:c3:
                    8e:11:3d:43:03:2c:28:4e:04:2e:3f:df:7f:1a:6f:
                    3d:e3:1c:f8:de:18:71:8d:a7:fc:5b:5f:38:6e:75:
                    dd:eb:64:20:99:ed:29:26:93:c3:02:75:59:ef:7a:
                    0a:29:ac:43:d2:30:f7:bf:92:c6:b7:ba:ed:2b:b7:
                    be:98:b0:c1:bb:ad:bd:f6:ca:bd:96:2b:0e:67:ff:
                    1e:b8:a4:a7:82:d5:3d:f8:78:4b:84:0f:63:8e:35:
                    a2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:67:FB:54:7D:8F:81:CD:E7:DB:49:5C:8B:D3:66:8A:00:C8:A5:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9cb4e0d6-aeef-3966-b998-b8125fd37ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.10.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:4f:4a:16:96:b8:e3:1e:6a:cf:0a:72:0f:bd:6a:7a:55:0a:
         32:2c:78:42:0f:2d:9c:6f:f0:84:ee:3b:a0:29:d6:9e:a6:57:
         90:8f:2b:29:30:24:a4:a0:ce:35:96:24:f4:7f:b0:d9:22:17:
         8f:fa:d6:53:07:d1:b6:33:1f:75:0f:a7:a4:7c:bb:de:32:48:
         fa:33:66:4a:79:c2:a7:06:2e:56:b7:6c:7b:97:39:9a:41:ed:
         7a:b6:a8:ef:2f:a0:c5:21:0c:e3:61:7a:88:c9:0a:88:ce:db:
         88:c1:09:c0:87:79:3a:d7:0e:d0:6c:d1:7b:bc:69:72:0c:ca:
         c4:64:5f:53:d8:ab:8c:f9:19:e4:3d:14:b8:a9:de:6c:b3:72:
         a8:7a:5f:50:8e:80:e6:46:4a:eb:12:c2:66:cb:34:8a:4c:78:
         59:71:0c:ea:dc:ef:5f:e6:7b:c3:d5:a4:34:93:80:69:64:4e:
         96:17:8d:76:6a:70:24:31:4c:02:13:ac:dc:3d:fa:72:3b:1e:
         3e:12:10:af:0e:92:54:91:7e:5a:46:a3:b1:73:f1:ef:ac:c2:
         c0:92:97:0f:c8:a3:6b:d2:b3:5c:0a:46:72:82:0e:09:58:96:
         23:cf:d8:cc:c0:f6:cd:92:ed:a3:11:98:b4:26:e7:4e:f3:d2:
         31:21:22:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:16:36 2026 by rpki-client