Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/29ab2031-b53f-3843-bee4-c9cdb11143e9.roa
File:                     29ab2031-b53f-3843-bee4-c9cdb11143e9.roa (raw, json)
Hash identifier:          Mb06De+LN4/FprgN7N/UJNhEnbZIhJxUN8c/aafaG8A=
Subject key identifier:   8A:C3:0B:1E:12:2C:DF:B3:4F:51:C8:D8:14:8D:F0:36:48:32:DD:05
Certificate issuer:       /CN=55651fc6-0e55-441d-b7a4-89e8800340c4
Certificate serial:       010D0C9F4328584D6515282667473C0BA7C8A200
Authority key identifier: 37:92:8E:37:F8:9B:8E:3D:B6:C3:A2:60:E7:31:D6:CA:7A:99:CE:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/29ab2031-b53f-3843-bee4-c9cdb11143e9.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     15695
IP address blocks:        2607:a800::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/55651fc6-0e55-441d-b7a4-89e8800340c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/55651fc6-0e55-441d-b7a4-89e8800340c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:28:26:67:47:3c:0b:a7:c8:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55651fc6-0e55-441d-b7a4-89e8800340c4
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=cb435eca-640a-4d16-8512-6d454da49f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:7c:ac:d7:f8:fb:dd:e1:c8:4c:a2:4a:de:
                    bb:2c:78:b1:9c:7e:32:9d:39:39:dd:da:77:dc:30:
                    fa:f0:80:d7:61:37:ba:0d:fc:3a:a6:99:b9:4b:1f:
                    bd:b7:94:1c:06:a1:f6:42:d1:1b:52:08:52:e5:f2:
                    af:b7:f7:c5:12:43:28:7a:9d:54:4d:ce:41:ce:9a:
                    2d:c3:eb:72:7b:68:86:4b:dc:49:1a:bd:e0:c2:9a:
                    94:79:6b:01:ad:a6:08:a6:45:bd:bd:31:58:b6:a8:
                    49:1d:72:43:6f:1f:40:42:44:f5:33:6c:25:c5:5d:
                    ad:7e:1d:f0:26:f7:85:8a:0a:ae:a4:17:f2:0a:08:
                    77:e5:9a:09:cd:2a:81:02:af:71:21:79:42:f1:f0:
                    5a:11:5e:88:fc:46:40:92:2c:11:f4:7c:8c:a8:b3:
                    bd:f1:8a:89:43:27:5b:76:6b:ea:4e:9a:1e:ca:49:
                    7d:25:53:b3:06:60:8e:a4:61:f0:17:78:d5:d9:f9:
                    0f:2a:80:da:c8:a3:8e:60:74:92:36:7a:66:77:02:
                    7a:21:c8:0e:8b:e9:c1:85:5d:67:c3:52:b1:4c:03:
                    64:99:a1:b9:4c:0f:91:0a:de:70:94:79:02:f4:b5:
                    95:df:5b:48:f9:71:58:b4:af:69:c4:c1:e0:07:25:
                    f8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C3:0B:1E:12:2C:DF:B3:4F:51:C8:D8:14:8D:F0:36:48:32:DD:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/29ab2031-b53f-3843-bee4-c9cdb11143e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4/55651fc6-0e55-441d-b7a4-89e8800340c4.crl

            X509v3 Authority Key Identifier:
                keyid:37:92:8E:37:F8:9B:8E:3D:B6:C3:A2:60:E7:31:D6:CA:7A:99:CE:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55651fc6-0e55-441d-b7a4-89e8800340c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a800::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:90:7c:ec:3a:ff:07:c7:e4:80:3e:99:32:2c:e7:fb:f2:51:
         80:44:6f:56:1c:e1:ab:7a:b4:b2:40:c9:04:a7:3f:1f:ee:75:
         ee:8c:1c:1f:34:b9:17:62:d9:2b:c0:47:3c:91:e5:4a:53:6f:
         c4:10:bb:32:48:a5:e0:a7:f6:fa:71:9a:55:07:94:19:bf:47:
         c5:16:d7:6b:70:59:42:d5:05:1b:17:2b:13:af:1d:28:b0:b0:
         9f:5d:c4:43:dd:4e:47:51:52:69:29:12:15:6f:7c:8d:08:5f:
         10:06:20:ff:62:b5:f4:c7:ae:b7:75:d3:9f:80:fb:14:90:14:
         31:27:d8:27:94:a0:1e:35:56:35:d3:6e:77:dc:bd:e6:6b:b0:
         d9:25:64:c9:a2:82:2e:bf:f7:7b:45:4f:5d:65:62:c6:1e:5f:
         ce:bb:87:08:3c:ee:f7:62:79:82:23:ab:59:85:9f:ee:33:5a:
         e1:19:d3:0e:60:03:1a:31:dc:82:f6:c6:ad:b0:b6:e8:48:21:
         33:77:ad:c3:1c:e3:a4:84:43:fa:0e:8e:10:8d:40:0e:34:c1:
         cf:9b:20:a6:24:14:98:ee:e2:1e:d3:76:45:ad:a9:4c:01:2b:
         d2:d8:5e:33:df:4e:5c:52:37:6c:1f:63:99:f3:b4:af:8e:32:
         d6:6a:43:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:53:07 2026 by rpki-client