Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/29868ec8-a31c-3e72-b508-0ea3f499badd.roa
File:                     29868ec8-a31c-3e72-b508-0ea3f499badd.roa (raw, json)
Hash identifier:          dZkD0GRQa/HaQ1jMXn9oQpK3tP+j5rt1NSYyHMhWsOA=
Subject key identifier:   58:D5:4A:AA:7D:BE:12:E5:CE:55:DA:CA:27:7E:36:50:F3:36:6F:DE
Certificate issuer:       /CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
Certificate serial:       010D0C9F4328584E059BCE4DBD0C2F0BE81F7200
Authority key identifier: A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/29868ec8-a31c-3e72-b508-0ea3f499badd.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     394725
IP address blocks:        206.126.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:ce:4d:bd:0c:2f:0b:e8:1f:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=29fbbd56-f849-4e37-bc1d-70d08f49c837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7d:a9:94:34:8b:73:7d:0c:8c:d0:4b:05:94:
                    72:1e:4d:bb:91:01:9a:ac:b4:a8:cd:e1:04:86:28:
                    ac:63:a3:e7:b3:55:17:b8:b3:38:5f:ad:02:6c:45:
                    1f:de:98:6a:9a:21:6e:8d:e5:1a:d3:2c:31:94:2c:
                    fd:96:06:7c:2d:bb:0f:7d:c5:ae:86:62:9a:43:a3:
                    4a:94:00:97:ef:f0:4c:69:e8:70:10:93:34:91:34:
                    96:72:cf:b8:e3:df:f1:26:40:6f:97:f7:ca:a4:bb:
                    4a:a5:de:22:f0:64:19:a1:cc:61:f6:2a:e9:5a:20:
                    74:4d:db:eb:2f:b6:dd:87:95:de:9b:cd:89:62:0d:
                    23:18:cc:c8:c0:75:4e:e2:32:14:a7:cd:2d:cc:7e:
                    b8:1b:cf:a7:50:c2:22:ec:d7:40:4b:8c:bc:f6:1e:
                    f9:1c:47:32:ee:c4:0b:6c:b4:e1:1c:25:9b:b3:08:
                    15:eb:e2:b1:2d:1c:3f:4f:60:9a:de:3c:19:3b:fd:
                    7d:b2:21:3c:42:66:d6:a7:58:2e:ff:12:ad:6d:8c:
                    95:73:de:96:e1:75:e8:66:c9:c7:41:6b:66:b3:91:
                    31:0b:64:c9:eb:b2:64:73:da:00:f5:b3:31:f5:27:
                    24:63:70:b0:dd:7b:21:ae:32:9c:3d:a9:65:a1:61:
                    7d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D5:4A:AA:7D:BE:12:E5:CE:55:DA:CA:27:7E:36:50:F3:36:6F:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/29868ec8-a31c-3e72-b508-0ea3f499badd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.126.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:5a:d4:15:c3:47:ab:d1:ef:ad:b1:f6:5c:c2:50:1e:c2:39:
         89:cc:ca:0e:e5:24:4c:c6:19:34:96:b5:1e:ed:2b:0e:76:db:
         da:0e:ed:e6:31:68:ed:54:bf:c4:be:3e:01:80:ba:d8:7a:0e:
         91:22:c1:63:66:23:e6:3d:83:c3:68:70:03:43:c9:f3:41:48:
         c0:13:1f:53:5e:fe:be:c5:06:8e:9a:3a:3f:b0:41:fd:e6:a1:
         a8:38:11:50:77:bf:13:4c:17:f5:22:9e:38:f2:47:56:52:ac:
         fb:c1:d4:36:04:0e:ed:90:68:ce:fa:ef:31:33:a5:1b:76:6c:
         98:b7:a4:75:e5:ed:a5:45:de:f9:3e:0a:98:27:d3:2f:09:95:
         89:e7:ac:f7:a4:2e:f6:1a:0e:dd:a6:9a:00:a2:83:16:72:d9:
         e7:7c:9d:bb:00:07:16:7f:83:ec:4b:7b:67:89:9f:fc:ae:8e:
         41:2b:76:d1:bb:63:ce:99:d2:b2:13:53:ca:38:97:da:18:73:
         38:72:14:ac:8f:1a:e1:04:d2:e7:4c:33:ac:04:c3:e9:0b:d7:
         07:9c:30:09:b1:3b:1b:66:e4:6c:af:8d:2a:9e:ad:d8:ec:fe:
         c4:04:fe:92:ef:b5:44:36:42:39:e3:07:96:eb:51:b1:cf:92:
         3d:9e:35:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:48:29 2026 by rpki-client