Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/29387d14-5369-3841-8b55-747cef9985b6.roa
File:                     29387d14-5369-3841-8b55-747cef9985b6.roa (raw, json)
Hash identifier:          +iMUZ4B8mLGsJ0c8AZKxrpSjYLx8/sAH1hJ/SHK798k=
Subject key identifier:   16:84:C7:F9:28:D2:1A:B6:7B:D0:61:D5:7C:60:70:28:F8:06:6B:31
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F4328584EED52040DF8B05B529563AA40
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/29387d14-5369-3841-8b55-747cef9985b6.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     46562
IP address blocks:        104.200.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:04:0d:f8:b0:5b:52:95:63:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=5b6b94e7-dfc8-4532-a9a9-a4de10b64b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:9e:97:61:8c:e0:c6:28:02:da:52:cd:5a:
                    7f:59:28:18:3c:c5:ca:1f:82:9d:ea:f1:c2:8f:d5:
                    4e:f9:c9:e7:b8:39:11:b5:d0:24:95:7e:23:35:a0:
                    ca:fe:50:ba:c7:57:b4:63:74:8d:88:60:73:44:38:
                    99:34:1c:34:17:24:15:b6:05:ef:dc:2f:4b:8f:d9:
                    b5:aa:d7:70:a0:46:12:c1:dd:ac:8b:ca:ee:6b:2d:
                    26:45:1c:77:05:e5:69:dd:89:0d:3b:25:e2:80:d5:
                    5a:f3:4b:04:8d:0a:d4:fc:c4:7f:5a:72:22:01:fc:
                    d8:dd:25:dd:48:2c:5a:8b:bb:42:e0:00:d3:21:5c:
                    28:43:d1:d3:8c:88:8d:cc:c7:6e:77:bc:e2:77:f6:
                    75:5b:eb:22:4c:7c:e6:1b:fd:15:c0:f9:89:51:d2:
                    51:fd:38:4f:e2:0d:aa:a6:77:f8:80:10:57:cf:0e:
                    dc:a5:93:b5:83:aa:1d:74:3a:81:ef:3a:3b:6d:6d:
                    6d:0f:b7:30:28:81:ad:37:71:a4:1e:3a:47:5c:bc:
                    1e:d5:91:df:78:0d:52:b5:c6:f3:c6:c5:39:79:f4:
                    41:8a:42:65:f9:67:57:6a:bf:d5:33:eb:66:a5:32:
                    16:a9:14:2c:26:4c:a3:97:18:29:c8:53:f9:e7:06:
                    ce:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:84:C7:F9:28:D2:1A:B6:7B:D0:61:D5:7C:60:70:28:F8:06:6B:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/29387d14-5369-3841-8b55-747cef9985b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:4d:e8:da:6c:6f:59:f6:02:d9:20:05:05:67:2a:25:6c:50:
         6d:25:1e:b7:04:5e:1d:94:cc:c8:0b:60:26:a7:aa:4a:dc:cb:
         e7:13:24:7e:ae:63:63:2f:fb:68:37:95:d0:6e:79:9a:92:eb:
         cf:6f:7a:53:09:6f:de:a5:bb:17:59:66:ea:0a:fd:8f:5e:99:
         6c:18:d6:67:9d:db:4a:4e:15:75:1c:ed:95:3b:e7:7f:b8:38:
         8e:82:39:17:eb:cf:04:e8:94:fc:ea:58:79:59:69:01:2f:c1:
         eb:17:66:5f:80:3d:74:1c:8c:f7:57:e7:17:3f:2a:80:0a:e1:
         1d:9f:d3:9b:74:24:aa:49:23:5c:f9:4d:f1:05:03:67:4b:e2:
         0a:25:95:78:db:0a:a6:06:2b:69:c0:55:6b:0a:11:f8:46:71:
         02:e8:c2:d2:cb:89:77:c5:43:ba:bb:9d:b8:4c:bc:b6:2b:e9:
         db:a9:a7:00:32:09:ad:8b:a7:b8:b3:a7:28:c2:ca:1e:7a:dd:
         26:16:23:b6:f0:20:a5:4f:da:53:3c:ea:a8:56:1d:54:f3:f6:
         46:7a:05:2c:0e:d6:70:af:de:44:bc:c4:15:69:ba:39:14:7f:
         83:60:9e:68:a4:89:a6:bf:15:71:34:41:af:a9:96:8a:98:74:
         b1:ec:58:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUgQN+LBbUpVjqkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDUzMjNkYWMtYTE1ZC00ZjgyLWE3MGItMzBlMWE0Y2Ex
Mjc5MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
NWI2Yjk0ZTctZGZjOC00NTMyLWE5YTktYTRkZTEwYjY0Yjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOCel2GM4MYoAtpSzVp/WSgYPMXKH4Kd6vHC
j9VO+cnnuDkRtdAklX4jNaDK/lC6x1e0Y3SNiGBzRDiZNBw0FyQVtgXv3C9Lj9m1
qtdwoEYSwd2si8ruay0mRRx3BeVp3YkNOyXigNVa80sEjQrU/MR/WnIiAfzY3SXd
SCxai7tC4ADTIVwoQ9HTjIiNzMdud7zid/Z1W+siTHzmG/0VwPmJUdJR/ThP4g2q
pnf4gBBXzw7cpZO1g6oddDqB7zo7bW1tD7cwKIGtN3GkHjpHXLwe1ZHfeA1Stcbz
xsU5efRBikJl+WdXar/VM+tmpTIWqRQsJkyjlxgpyFP55wbOEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBaEx/ko0hq2e9Bh1XxgcCj4BmsxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMy
M2RhYy1hMTVkLTRmODItYTcwYi0zMGUxYTRjYTEyNzkvMjkzODdkMTQtNTM2OS0z
ODQxLThiNTUtNzQ3Y2VmOTk4NWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUzMjNkYWMtYTE1ZC00ZjgyLWE3
MGItMzBlMWE0Y2ExMjc5L2Q1MzIzZGFjLWExNWQtNGY4Mi1hNzBiLTMwZTFhNGNh
MTI3OS5jcmwwHwYDVR0jBBgwFoAUyDY3c/UqyujL65IZblyvIFXxGr4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMyM2RhYy1hMTVkLTRmODItYTcwYi0zMGUx
YTRjYTEyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMJN6Npsb1n2AtkgBQVnKiVsUG0lHrcEXh2UzMgLYCanqkrcy+cTJH6u
Y2Mv+2g3ldBueZqS689velMJb96luxdZZuoK/Y9emWwY1med20pOFXUc7ZU753+4
OI6CORfrzwTolPzqWHlZaQEvwesXZl+APXQcjPdX5xc/KoAK4R2f05t0JKpJI1z5
TfEFA2dL4gollXjbCqYGK2nAVWsKEfhGcQLowtLLiXfFQ7q7nbhMvLYr6duppwAy
Ca2Lp7izpyjCyh563SYWI7bwIKVP2lM86qhWHVTz9kZ6BSwO1nCv3kS8xBVpujkU
f4Ngnmikiaa/FXE0Qa+ploqYdLHsWM0=
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:23:57 2026 by rpki-client