Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1459d416-bd0a-35d6-9377-b98f7be741ee.roa
File:                     1459d416-bd0a-35d6-9377-b98f7be741ee.roa (raw, json)
Hash identifier:          FnMRWnTmx7bxq2inAEebj17RT7b9rpX0unyncwP2q2A=
Subject key identifier:   91:81:E6:E2:5E:A1:8A:E4:EF:15:40:57:F2:9C:CC:E4:EB:49:9A:09
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584F3B7D22BFF60E8A2957F2EF00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1459d416-bd0a-35d6-9377-b98f7be741ee.roa
Signing time:             Sun 20 Sep 2026 01:00:11 +0000
ROA not before:           Sun 20 Sep 2026 01:00:11 +0000
ROA not after:            Sat 19 Dec 2026 02:00:11 +0000
asID:                     394760
IP address blocks:        200.229.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3b:7d:22:bf:f6:0e:8a:29:57:f2:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 20 01:00:11 2026 GMT
            Not After : Dec 19 02:00:11 2026 GMT
        Subject: CN=4c623fc2-9e0c-4403-a8dc-370226fc8121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ba:0a:0d:40:c8:59:60:45:7d:2d:5c:db:9c:
                    eb:b2:0f:d2:bf:9f:05:6f:9c:de:d8:72:21:d7:1c:
                    13:48:fa:01:a4:1b:2e:01:db:12:2b:43:75:3f:b4:
                    a7:3b:dd:ff:68:e0:62:2d:2e:7b:7d:71:1f:29:76:
                    94:3a:95:42:1e:83:ca:17:1b:57:87:58:1a:ea:ca:
                    26:76:71:35:47:21:41:9b:13:61:f3:d6:98:fa:4f:
                    8f:fc:5b:e5:2c:94:c3:a0:eb:87:9c:0b:87:6f:51:
                    93:76:45:c8:02:fd:03:04:1c:f4:fc:32:2a:2a:63:
                    04:08:7e:47:da:fa:6b:ff:af:8f:de:09:ae:61:13:
                    56:53:85:5e:41:5a:4c:48:8c:ff:84:b1:ad:b1:3a:
                    ad:b2:0b:81:67:3d:55:36:ac:59:bf:49:7b:03:99:
                    38:ba:9c:12:42:6d:f4:b1:12:d2:08:35:8f:d7:da:
                    5f:7e:c5:4a:8c:29:00:94:8f:d8:66:71:08:89:40:
                    b3:8c:bf:9e:27:85:5f:48:45:c5:16:86:b4:a1:27:
                    c6:23:c5:b7:7e:76:c7:71:cd:ba:07:9e:eb:e6:42:
                    2b:24:02:9d:9b:85:a8:ef:c1:71:08:4b:7d:50:08:
                    b7:36:79:11:77:bb:4b:be:43:09:ef:78:ee:bc:64:
                    80:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:81:E6:E2:5E:A1:8A:E4:EF:15:40:57:F2:9C:CC:E4:EB:49:9A:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/1459d416-bd0a-35d6-9377-b98f7be741ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:28:70:37:8a:c4:3f:c9:6c:63:68:f3:c7:57:f9:0d:21:be:
         f7:67:9f:87:1b:15:29:eb:0e:e0:9f:71:53:b9:80:c5:3e:cd:
         69:2b:21:a9:cb:7d:17:1c:1a:96:f3:5a:b8:60:1f:3c:23:13:
         93:dd:41:25:1a:dc:dd:15:55:c7:1d:46:1b:ab:13:67:45:44:
         5c:55:ff:e2:81:1a:8e:75:31:85:d4:1e:4c:a6:e4:15:2d:d9:
         e7:df:d2:e8:12:d2:dc:2e:d4:0e:07:1c:4d:3d:d1:ce:cb:ba:
         2a:e7:b0:48:e3:94:a8:d1:2b:5c:da:7b:a8:1e:0d:6b:f3:d1:
         42:62:16:6f:32:cd:99:85:b6:1f:b1:da:d7:fd:14:69:38:90:
         a7:39:c5:28:db:84:72:01:bf:15:6f:c7:14:47:a4:35:e4:a2:
         99:a5:47:4a:1d:7a:08:31:19:68:68:79:87:70:d1:88:89:2d:
         86:7e:48:ec:a3:7c:ec:fe:86:97:67:11:8b:bd:83:be:97:ab:
         dc:69:9b:27:e4:5a:e5:0a:35:60:6a:7a:83:67:eb:a3:4d:a9:
         32:ef:2d:45:05:a5:73:55:c1:e2:1b:2f:e3:53:4e:3b:e6:7f:
         4c:ac:4a:33:28:04:00:af:bd:d5:b4:a8:1a:d5:48:36:ec:c8:
         83:f0:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:49:25 2026 by rpki-client