Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/856ab158-f365-38cc-8277-6c620bbe7d68.roa
File:                     856ab158-f365-38cc-8277-6c620bbe7d68.roa (raw, json)
Hash identifier:          /azVb6QoUmVnQ6eT4rTMHYR2GGi+7/o4pTTOeFulHIg=
Subject key identifier:   29:73:C0:27:9D:6B:CB:27:76:A4:80:A2:1F:6D:85:52:1F:BE:A0:90
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584F612D687B74AF2262E6C5B640
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/856ab158-f365-38cc-8277-6c620bbe7d68.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     16739
IP address blocks:        192.208.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:68:7b:74:af:22:62:e6:c5:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=35fa66e5-fdf8-4fe4-ad88-ae722af6518b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:8a:b2:80:f7:81:dc:42:77:81:18:5a:b5:
                    a3:b7:2f:c2:79:1f:5f:99:f4:50:43:42:dd:87:a7:
                    ea:03:83:8b:5a:bd:af:11:f1:bc:c5:ed:2b:4a:6f:
                    df:89:f4:78:f3:db:87:bc:8f:ac:6b:3c:a3:de:bf:
                    50:bb:12:5a:4b:c2:b9:40:9c:6d:7d:4c:2e:d2:ba:
                    3e:42:cc:bc:93:c7:1f:a6:78:82:16:de:59:8c:37:
                    e0:54:1c:48:ae:d8:78:90:c3:ae:de:9a:f3:9f:de:
                    4b:ae:e1:7a:09:20:c6:ea:3c:81:bc:23:4a:57:bb:
                    d2:45:bd:b5:44:72:b3:b8:bf:7d:7b:17:8d:c2:94:
                    4a:ef:f6:98:41:7f:f5:14:08:e9:b3:95:a5:8b:d4:
                    c8:a2:ae:6e:33:1e:bf:07:c4:1a:bb:3c:49:bd:32:
                    73:1e:84:9a:e0:f9:cb:b0:12:c9:d1:1b:11:a1:cd:
                    e9:de:c4:c2:8e:05:e2:5b:6c:c9:d0:1d:18:35:90:
                    66:e1:4a:ad:b0:8f:b3:87:79:22:21:4b:be:75:7d:
                    a0:1f:49:8a:dd:94:e3:e2:dc:bf:bd:30:3d:9e:e6:
                    fb:9c:3d:0a:49:64:3c:19:7e:2e:f6:66:2f:49:27:
                    13:9a:b8:f2:84:ee:bd:20:68:a9:17:7e:1b:c0:93:
                    8d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:73:C0:27:9D:6B:CB:27:76:A4:80:A2:1F:6D:85:52:1F:BE:A0:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/856ab158-f365-38cc-8277-6c620bbe7d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:95:1c:11:46:ce:3c:09:7d:a0:af:52:2a:ca:b9:fa:cf:61:
         14:78:dd:71:22:d6:2f:c1:b2:66:8e:b3:37:4c:ab:d2:39:0f:
         77:5a:78:1e:27:84:99:7e:20:3f:4d:85:d5:d6:fd:ed:94:ad:
         af:f0:02:fc:1f:21:6e:21:7f:64:f8:37:e2:7f:68:48:8c:3a:
         18:f7:e1:73:b7:41:26:a4:6a:6c:88:dd:14:1a:96:f7:5b:7b:
         37:c9:27:a7:31:2b:78:17:92:a0:1e:bc:1b:d3:47:4f:d9:da:
         26:e4:8a:9d:43:e3:24:06:a8:93:ae:79:bf:81:c6:aa:59:87:
         d9:14:c0:49:c3:c0:20:6f:75:de:6a:2d:7c:1f:b9:dc:2c:a1:
         6b:ff:e9:de:ca:5f:c2:59:e2:d9:5a:dc:18:36:5f:2d:ff:3b:
         37:25:f3:9d:6a:8d:9e:3c:2e:f3:1f:90:e3:76:7d:5c:05:61:
         c4:15:83:6c:97:73:5b:55:04:d6:f3:3a:c3:59:7a:da:c7:d4:
         cd:c3:3b:f0:d7:7c:bd:61:ce:7e:1a:f3:63:60:1f:df:b0:7b:
         5a:a6:a1:78:98:7e:52:73:94:b0:f9:06:b0:03:39:f7:ee:fd:
         69:91:41:da:7d:9f:e6:b8:f7:76:26:78:ae:52:70:1b:43:19:
         92:79:b1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:25:06 2026 by rpki-client