Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04c61c92-a2e7-4456-b364-bc7a8f974387/7f64c017-2454-34bd-bcb1-aa121836ce43.roa
File:                     7f64c017-2454-34bd-bcb1-aa121836ce43.roa (raw, json)
Hash identifier:          WJ2ywxppbC+Bvh/n1FaVDPJ+PEcfcT74DVd8WgyVV+Q=
Subject key identifier:   2C:14:4F:5A:4F:08:F6:0A:63:18:C4:43:0F:CE:BC:33:27:CE:D2:A5
Certificate issuer:       /CN=04c61c92-a2e7-4456-b364-bc7a8f974387
Certificate serial:       010D0C9F4328584F0ACE1C89EFF3672EDEC97BA0
Authority key identifier: A6:92:FA:05:7E:97:4A:9C:1F:A5:57:3E:15:84:FD:88:18:7E:5B:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04c61c92-a2e7-4456-b364-bc7a8f974387.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04c61c92-a2e7-4456-b364-bc7a8f974387/7f64c017-2454-34bd-bcb1-aa121836ce43.roa
Signing time:             Wed 02 Sep 2026 14:28:49 +0000
ROA not before:           Wed 02 Sep 2026 14:28:49 +0000
ROA not after:            Tue 01 Dec 2026 15:28:49 +0000
asID:                     54783
IP address blocks:        205.237.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04c61c92-a2e7-4456-b364-bc7a8f974387/04c61c92-a2e7-4456-b364-bc7a8f974387.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04c61c92-a2e7-4456-b364-bc7a8f974387/04c61c92-a2e7-4456-b364-bc7a8f974387.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04c61c92-a2e7-4456-b364-bc7a8f974387.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:ce:1c:89:ef:f3:67:2e:de:c9:7b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04c61c92-a2e7-4456-b364-bc7a8f974387
        Validity
            Not Before: Sep  2 14:28:49 2026 GMT
            Not After : Dec  1 15:28:49 2026 GMT
        Subject: CN=2ea109a9-a304-437d-8851-84abc41b4375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:c5:96:f6:bb:6e:1a:0e:2a:b6:2f:6e:a1:
                    ed:13:f7:f2:06:04:a1:76:9f:00:19:45:a6:bf:ba:
                    bb:66:6f:cc:23:fc:a3:7a:ac:a9:ca:32:16:99:55:
                    96:d9:f4:29:53:ae:e2:80:fa:46:c0:07:20:a1:81:
                    ff:c2:67:a4:93:f5:38:96:d8:fd:18:f2:16:f1:a9:
                    65:55:4a:f3:83:a7:19:55:9a:b4:f6:1f:dc:48:40:
                    57:ba:3f:40:b0:bf:45:ff:5e:25:6e:62:60:d9:76:
                    6b:ac:30:0e:2d:fe:cb:5a:ac:51:e5:d9:77:2a:1b:
                    12:1f:c8:93:a3:44:17:26:f6:31:00:14:e4:f7:dd:
                    2e:a7:c2:23:a4:fe:5e:66:74:b5:4c:39:aa:d6:ce:
                    c9:b4:78:d3:96:87:96:be:96:98:31:85:96:3c:54:
                    b4:09:55:7c:6d:34:33:0c:36:36:a4:97:98:1a:ae:
                    ea:06:bd:0e:ba:a4:cb:14:dd:d7:40:e6:c0:a0:c5:
                    b5:16:ff:d3:fd:a3:03:74:e6:a5:62:40:ca:21:94:
                    0b:e9:92:bb:ce:ca:a5:c0:bf:ad:4d:70:b6:a6:1c:
                    9f:e1:2e:25:59:6f:65:12:d4:ca:38:59:d4:6e:5e:
                    6a:f2:05:4d:c2:b9:8d:5f:04:6f:73:24:13:96:25:
                    35:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:14:4F:5A:4F:08:F6:0A:63:18:C4:43:0F:CE:BC:33:27:CE:D2:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04c61c92-a2e7-4456-b364-bc7a8f974387/7f64c017-2454-34bd-bcb1-aa121836ce43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04c61c92-a2e7-4456-b364-bc7a8f974387/04c61c92-a2e7-4456-b364-bc7a8f974387.crl

            X509v3 Authority Key Identifier:
                keyid:A6:92:FA:05:7E:97:4A:9C:1F:A5:57:3E:15:84:FD:88:18:7E:5B:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04c61c92-a2e7-4456-b364-bc7a8f974387.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:0a:aa:e4:9d:50:69:0e:1d:12:91:93:5c:80:a5:b3:c7:54:
         be:8e:9c:35:55:24:42:d2:2b:4f:03:54:f7:db:c2:e3:9c:7d:
         a9:15:84:e0:f0:e9:e9:ea:e4:04:de:af:46:e2:3c:db:1e:d9:
         c1:ae:1c:6e:24:e4:5c:92:64:52:bc:66:8c:ef:b0:b4:dd:d6:
         0c:b7:62:99:5e:c0:d6:67:01:7e:72:22:cf:f3:00:b0:c7:b5:
         76:8b:92:f8:3a:ab:bb:32:4b:17:df:71:bf:0f:43:7c:db:c3:
         4b:2c:f9:8b:2e:de:da:fe:73:41:72:4b:12:97:b2:c2:b6:0e:
         4f:25:80:64:11:fa:95:34:ec:5b:65:d7:3f:4b:07:be:d3:41:
         1d:35:34:f4:8f:15:3e:81:43:8a:3c:24:22:9d:a5:14:35:3c:
         24:09:35:06:5c:f0:ec:a2:79:25:0f:8f:50:55:6b:1c:d1:bc:
         ed:4a:ce:a4:c4:93:05:f5:e8:15:dd:0f:ab:c9:26:d2:a4:9e:
         29:e6:27:3b:53:4f:2a:da:df:b7:16:f6:4d:63:fa:d9:eb:04:
         0d:af:37:92:57:da:ac:51:84:54:4d:87:3e:ca:de:03:29:99:
         a8:71:ad:c7:1b:5c:7a:e3:30:63:ad:39:75:25:73:7e:1b:82:
         c6:e9:e8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:11:39 2026 by rpki-client