Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/9dc00c4a-5611-3d74-9250-bf682e54f1b4.roa
File:                     9dc00c4a-5611-3d74-9250-bf682e54f1b4.roa (raw, json)
Hash identifier:          acZg1Bn0HC3B1qIvIRw3ZUWEU7d68p0hb24rM+m6f4s=
Subject key identifier:   EB:3A:29:E4:17:F6:7F:8E:B1:B3:4C:5D:B7:CE:69:B8:84:BF:19:15
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584DBBA06CE71D32DD572DF42540
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/9dc00c4a-5611-3d74-9250-bf682e54f1b4.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     14297
IP address blocks:        206.201.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:6c:e7:1d:32:dd:57:2d:f4:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=aa95f507-0c23-4fdd-8d12-1a4df87a19de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e7:16:52:08:a8:d8:f8:78:53:62:88:36:2e:
                    18:8e:e4:b0:da:d9:bd:1a:b0:3c:b0:bc:25:15:50:
                    e7:9c:7d:3f:3b:cb:19:07:a4:0b:39:44:9d:51:98:
                    a5:e7:97:ad:72:74:03:3f:a0:7f:d6:c1:7b:69:74:
                    69:ef:a3:29:9c:2f:10:d1:69:89:3f:a8:97:d5:e6:
                    35:c9:d0:ed:16:76:71:2b:3f:97:3c:99:e2:1c:49:
                    cf:ab:87:7b:d9:b1:ce:aa:b2:45:dd:a9:bc:d2:17:
                    b7:56:ad:f4:77:05:fc:5c:25:04:33:df:8b:99:6a:
                    b7:6d:ca:12:9c:80:f3:ba:fd:3d:a0:14:00:1b:53:
                    61:36:fb:b3:66:31:5c:0f:6a:40:1b:ab:5a:8a:38:
                    85:b5:14:da:03:26:be:a7:ab:8e:ce:3b:66:1f:67:
                    74:a8:e2:77:1c:95:6b:12:f9:8f:a0:94:f0:2b:3c:
                    35:88:b8:77:1f:f6:7d:6b:68:70:c8:dd:fd:68:7f:
                    16:3c:8b:15:99:81:5c:db:03:86:4a:ea:d7:3c:84:
                    d3:0e:af:d8:c7:15:a2:5c:fc:54:3a:83:b4:04:b7:
                    d6:c3:e6:23:75:df:05:2f:c6:79:ae:1e:90:32:1b:
                    eb:b5:ab:59:de:ec:ef:58:d6:36:ea:36:06:7c:23:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3A:29:E4:17:F6:7F:8E:B1:B3:4C:5D:B7:CE:69:B8:84:BF:19:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/9dc00c4a-5611-3d74-9250-bf682e54f1b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7a:35:fb:bf:17:8b:80:d6:86:d6:9a:f6:df:55:95:78:d9:
         b3:5b:b8:57:24:26:10:46:63:3c:f4:ee:e5:b0:45:ed:d4:85:
         6c:b3:cc:85:d2:ad:9c:97:04:5f:a7:b8:57:24:8c:2e:ba:d8:
         66:d0:07:64:f3:7c:55:47:94:f8:7d:ba:95:a3:a0:4d:ab:3b:
         34:11:39:fa:be:85:73:3a:b3:1c:e7:0b:fb:8f:4e:b3:6a:df:
         db:91:d4:2b:df:85:6e:b2:6f:b8:5c:53:30:cf:76:97:30:f7:
         9d:54:b3:35:55:2c:da:72:22:39:be:5d:54:bd:fa:11:bc:da:
         00:0e:33:0c:f1:e1:60:10:47:9b:1c:bc:59:9c:4b:c5:b0:ae:
         9c:f9:33:8d:a3:99:88:cb:07:c3:7d:ab:02:05:15:f1:59:f5:
         19:d1:2e:2b:55:56:cb:8b:1b:70:75:0f:17:9b:98:73:a8:da:
         88:c9:c8:d4:45:db:31:cf:59:af:1c:84:03:05:33:3a:87:b8:
         4d:b2:1a:44:e6:7b:d3:72:24:a0:e8:af:33:63:3c:cf:ed:f9:
         e4:dd:0e:3d:9c:d3:cb:87:dc:43:d6:11:07:de:86:c0:4e:d2:
         85:6a:c0:41:63:79:b5:b7:0f:ae:4c:65:41:bb:42:6e:8c:78:
         b2:76:d8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:23:40 2026 by rpki-client