Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/7044c074-f82f-3009-90ff-30495d0626b0.roa
File:                     7044c074-f82f-3009-90ff-30495d0626b0.roa (raw, json)
Hash identifier:          sT45oubXJnCbpDEXtIrJK0Q25UKuXjzmOHRud5wua0E=
Subject key identifier:   0A:12:EA:22:1C:F9:FA:D0:95:11:8F:BE:88:1C:35:1D:F7:01:A9:86
Certificate issuer:       /CN=dbf66384-fa53-47fb-938a-f1e5064023e5
Certificate serial:       010D0C9F4328584EA798DA5EFE745FDC338D4A00
Authority key identifier: D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/7044c074-f82f-3009-90ff-30495d0626b0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15830
IP address blocks:        129.176.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:da:5e:fe:74:5f:dc:33:8d:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbf66384-fa53-47fb-938a-f1e5064023e5
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=945508d3-3da1-4c36-815c-de32985da187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:0d:c6:ae:52:56:ea:2a:3f:0e:5d:69:6c:
                    97:41:18:48:d6:c3:ce:52:6e:ae:7e:f3:63:b0:dc:
                    2f:fa:c7:15:67:7a:71:13:9f:2f:ac:17:ce:8d:21:
                    6b:c4:f3:72:f2:66:90:f2:0b:68:b6:b7:0b:e8:67:
                    24:a6:1a:c6:ed:42:6f:04:0d:b8:04:6f:31:4e:05:
                    de:31:5d:0c:61:20:f4:9d:64:62:ad:65:9e:a4:3d:
                    68:22:a7:0f:ce:f0:9a:31:8c:51:b7:c7:87:05:df:
                    f4:9b:1e:36:55:b4:af:e4:cd:2c:2f:4e:45:e7:0c:
                    4a:7e:27:4f:63:5d:a5:d4:d3:af:15:fb:65:da:e3:
                    c7:09:34:ed:af:0b:fe:37:69:fa:85:49:a5:21:b9:
                    09:f8:f9:d5:4b:0c:fb:62:0f:50:57:56:fa:05:81:
                    2e:41:33:49:a7:87:de:36:27:39:ae:07:a0:47:65:
                    82:a8:d3:a1:e9:1a:5b:92:84:d7:60:48:1b:32:92:
                    80:d0:53:ab:08:a8:72:b2:0e:66:43:a2:14:28:0c:
                    05:a4:96:10:db:ed:11:2f:4b:84:75:d3:24:05:8a:
                    e2:6b:e4:38:dc:17:8e:62:1b:e5:09:aa:fa:a0:0c:
                    d4:d5:30:29:0a:be:3f:70:77:7a:0f:cb:d9:3e:c9:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:12:EA:22:1C:F9:FA:D0:95:11:8F:BE:88:1C:35:1D:F7:01:A9:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/7044c074-f82f-3009-90ff-30495d0626b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.176.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:39:02:c3:81:88:5e:39:9b:44:df:45:6e:2e:d6:20:53:02:
         69:7a:92:29:4e:a7:32:b2:fd:44:dd:2e:07:13:6a:0a:2a:97:
         0e:a0:36:7c:69:ed:7f:7f:f4:a5:e1:4d:a0:c0:32:32:a4:3f:
         8f:f3:86:cd:33:ea:e5:05:46:0a:c8:1f:62:27:65:9a:e5:3d:
         25:fe:5c:cd:bb:ad:be:ef:48:81:37:37:54:2f:fb:aa:cf:69:
         28:73:6d:bc:24:b6:e7:b3:64:64:b9:a5:e6:17:64:70:95:d3:
         bf:f0:5d:cd:e3:df:b0:1e:8d:3a:a1:cd:db:e4:03:66:65:73:
         e1:55:5c:18:ba:13:7e:73:99:e2:a5:53:59:b0:0d:1b:fb:60:
         d7:cf:67:fc:79:fb:e0:c3:83:a7:98:1a:34:aa:bc:6c:42:11:
         33:b2:13:cf:cf:50:17:76:e9:0e:32:78:92:f5:ea:39:bb:14:
         7a:b4:fd:82:f2:d3:f9:7b:8b:9e:4d:a2:fb:46:c9:3c:a5:48:
         d1:6a:16:0a:73:1d:c8:49:bc:b7:28:01:93:43:62:42:c5:0b:
         40:cb:38:7e:3b:c9:35:76:2f:3f:ab:4f:99:58:9a:db:64:9c:
         0c:fb:52:d9:07:0a:36:53:4a:b5:3c:46:ab:d1:3c:66:91:2f:
         f8:65:d1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:18:18 2026 by rpki-client