Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/29077896-9620-3e68-a116-dbfb8641ca35.roa
File:                     29077896-9620-3e68-a116-dbfb8641ca35.roa (raw, json)
Hash identifier:          5quJ1gmed3m4vYc4SX5M74WNbAhHvAIcAWUHfseQhNI=
Subject key identifier:   CB:D5:2B:C3:BE:60:F6:60:21:2B:4D:2B:7A:49:FC:CC:2B:83:68:42
Certificate issuer:       /CN=f8f6ac79-beee-4eba-a69a-a3f28f625f4e
Certificate serial:       010D0C9F4328584F49733CEC5CE9A6D68872A280
Authority key identifier: 37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/29077896-9620-3e68-a116-dbfb8641ca35.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12129
IP address blocks:        204.106.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:3c:ec:5c:e9:a6:d6:88:72:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f6ac79-beee-4eba-a69a-a3f28f625f4e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b438b5a0-cec3-4a38-a96f-66ffaafaef18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:f3:bd:2a:e2:ec:bf:c8:b2:53:bd:4a:24:
                    7c:e4:48:fa:ad:14:64:2b:7b:e9:57:be:1c:ea:e2:
                    07:21:25:3c:80:d6:e8:95:26:92:d8:86:18:57:db:
                    25:6d:ea:6e:50:48:36:7b:fc:15:3a:ab:a7:3f:bd:
                    08:94:6c:e4:6f:18:ea:ec:a8:ac:88:f5:1b:e8:66:
                    fd:fe:a9:f1:3d:fc:7d:1a:d2:47:da:13:af:23:e0:
                    b0:b9:bb:9d:e1:ba:10:90:25:98:37:ed:b3:c3:27:
                    4e:db:55:5c:0f:4b:ac:fe:33:fa:85:b5:ef:ed:9a:
                    ad:1b:55:81:a6:9c:97:bf:97:6c:df:58:5b:69:7e:
                    64:fa:d9:d9:fe:d9:5c:0d:dc:d0:a9:e1:94:22:12:
                    a5:76:e3:2c:f1:42:e2:b6:93:fd:12:80:e6:cd:09:
                    62:21:c7:8f:f1:a8:71:e6:e8:4b:17:71:fa:a4:bd:
                    f9:8f:ef:24:c5:b0:7b:f5:2f:42:3a:82:1e:88:3b:
                    62:e6:6c:e3:54:fc:8d:d1:ad:67:a5:21:7a:88:e6:
                    6e:4d:84:58:c3:eb:66:c0:95:9a:a6:46:64:48:50:
                    d0:7c:3f:e7:08:97:b9:cb:e4:af:69:da:d6:28:f8:
                    cb:10:59:ae:f4:da:d7:e5:5a:c4:3e:d2:9f:6a:e0:
                    3f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D5:2B:C3:BE:60:F6:60:21:2B:4D:2B:7A:49:FC:CC:2B:83:68:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/29077896-9620-3e68-a116-dbfb8641ca35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.crl

            X509v3 Authority Key Identifier:
                keyid:37:B3:E8:75:84:3A:AE:55:CC:F3:F5:27:EE:47:DD:0A:B1:0F:03:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f8f6ac79-beee-4eba-a69a-a3f28f625f4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.106.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a8:bc:9d:b3:a5:36:4b:ca:46:6e:e7:b9:e9:e1:4a:c3:64:
         7d:d9:4e:96:5f:e0:c3:88:be:78:3f:83:b8:c7:4a:d6:a1:e3:
         46:1b:0a:1d:28:af:96:57:1f:e7:04:15:9f:06:81:63:48:9d:
         5e:ed:41:69:05:bf:1f:91:5a:c3:69:eb:a3:83:05:82:a8:bd:
         2d:dc:56:aa:15:04:f4:e1:b6:d7:7b:67:50:d4:0d:38:5a:c7:
         bf:4a:22:27:a8:b2:9f:1f:13:12:cc:0c:00:33:92:67:3c:a5:
         f6:dc:23:a7:c5:98:93:04:d3:55:0c:1a:e1:39:fe:72:93:26:
         bf:df:93:2b:55:ac:28:e7:54:e0:47:93:c6:5b:48:95:38:1b:
         75:48:3a:53:61:0d:f6:32:bd:ef:df:c7:51:1c:ee:90:1b:31:
         18:f9:4a:69:9f:07:fb:4c:ef:02:a6:58:b1:35:8f:fa:8b:59:
         8b:30:6c:d7:ae:e2:ee:c1:f3:b8:3f:cf:04:1f:b5:f3:ff:b6:
         21:5f:b7:96:fd:c2:0f:e2:dc:fb:7f:1b:cc:f7:7e:c6:6f:bf:
         f3:61:80:9a:32:bb:2d:e6:98:9d:0c:79:ae:15:4e:fb:67:0c:
         91:b6:dd:c8:84:2b:ce:11:56:55:65:8d:33:74:2c:08:b5:8a:
         63:6b:09:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:03:34 2026 by rpki-client