Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/96816e6b-30e5-35ef-b65a-f702d225edf2.roa
File:                     96816e6b-30e5-35ef-b65a-f702d225edf2.roa (raw, json)
Hash identifier:          bsPVflF1ocAc0p8X3orlfmLCq5pwZ0UOYc1rsi7CjOg=
Subject key identifier:   5F:22:80:1D:A8:03:96:58:5D:6C:85:E3:AD:48:99:4F:5F:44:56:41
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFD8C037BA1F807D282688
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/96816e6b-30e5-35ef-b65a-f702d225edf2.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        104.29.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:d8:c0:37:ba:1f:80:7d:28:26:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=2e058730-8855-42a1-a2e2-3a695ffc00b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:6d:9f:fe:0e:d2:a7:10:5b:35:ea:eb:6b:
                    c4:21:48:d6:cf:30:87:c0:f5:2c:a7:c3:bc:01:2c:
                    ab:34:68:df:0b:8c:0a:5e:dd:86:65:ca:f5:37:c0:
                    98:9d:b4:33:11:51:bf:de:0a:a8:3d:cf:e4:15:7f:
                    d5:bc:16:eb:a2:c2:2e:cc:b5:83:b9:00:93:8a:cd:
                    2b:0a:d2:09:2c:d3:e0:44:17:68:cb:69:42:57:73:
                    fd:fd:52:91:a0:1a:91:f1:4e:42:d3:1d:2f:68:6c:
                    2f:ca:37:6a:4f:aa:1f:f5:0d:e1:52:84:7e:0f:53:
                    4d:ea:4c:96:47:42:d0:42:e5:be:60:57:1c:5f:20:
                    e6:73:ca:55:52:cc:1f:87:fe:f2:b2:29:f8:e1:77:
                    cd:f3:f9:af:67:56:33:f0:38:a1:5d:2d:d9:d9:95:
                    63:b3:70:8d:a2:90:85:dc:1b:37:c5:30:75:2f:a0:
                    9b:a5:f2:bf:b1:70:21:db:1d:6a:31:d5:6a:3a:61:
                    db:59:84:2c:f1:00:40:c0:71:a8:e3:a0:76:3f:f3:
                    0f:fa:88:17:be:e7:f9:25:eb:be:72:e7:49:fc:88:
                    7b:e1:97:2f:d1:dd:fd:ef:c0:2c:1a:ae:72:f5:04:
                    72:56:34:14:4e:d8:1c:57:77:87:f0:7a:98:89:a3:
                    40:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:22:80:1D:A8:03:96:58:5D:6C:85:E3:AD:48:99:4F:5F:44:56:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/96816e6b-30e5-35ef-b65a-f702d225edf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:6a:b4:dc:a3:fd:5c:51:af:0c:eb:66:95:09:72:6b:88:a3:
         0d:04:9d:3a:78:b2:94:ee:a0:c7:4a:9d:8a:a6:da:13:05:24:
         2f:bb:41:9e:77:3e:51:ac:10:cb:ba:60:88:ab:91:fb:89:9e:
         be:63:e0:81:0b:8c:7a:32:11:5c:0b:ea:37:31:e7:e0:0a:5f:
         a0:14:bd:07:e9:6c:9b:91:b5:9c:19:a3:df:b1:87:7a:62:ec:
         3a:7a:37:4d:a6:6d:03:57:63:94:2e:66:5e:74:4b:54:a9:43:
         1f:32:cb:b0:aa:ec:07:b1:43:d6:c1:c1:12:a9:29:51:4e:ea:
         a2:d9:d6:6c:96:45:ea:f7:e5:06:87:a3:f8:f8:2d:6a:07:b5:
         b2:27:49:76:f4:bc:57:38:08:e9:f7:6a:a7:38:b5:6b:e0:0e:
         dd:2e:b3:c3:ee:2d:2e:09:01:f3:04:6f:10:e1:0d:8d:c9:62:
         6d:27:f7:90:5b:e2:29:e2:72:6a:e8:05:f7:73:e1:7a:0e:30:
         30:d9:bd:0f:1e:44:23:05:d7:f4:f2:2f:0d:d4:f0:f1:8d:ae:
         8e:9e:bc:84:fb:50:e4:42:7d:40:c0:c7:77:80:c6:4e:cd:9e:
         30:e5:7d:87:fa:47:a1:5b:0f:8e:bc:f3:f8:75:58:f9:a1:e7:
         1c:ad:b9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:09:14 2026 by rpki-client