Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa
File:                     29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa (raw, json)
Hash identifier:          4CcxTW0jC9MlCcPNV80tgpGksPrWfx9CAk4PBHOF76I=
Subject key identifier:   52:D0:51:B0:F2:A0:E3:6C:D1:BA:12:B6:F7:53:E2:21:34:D6:66:E6
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F4328584E1FA997934E938E388E31D380
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     27321
IP address blocks:        149.20.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:97:93:4e:93:8e:38:8e:31:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=c95f5069-2b0a-401e-8a21-8d6e31ea602a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e8:8e:e5:41:4f:29:4a:1b:2c:33:d3:7a:a3:
                    0d:58:7e:fe:c2:fa:2a:16:dc:f6:0c:0f:9a:e2:51:
                    e7:4d:37:a7:5d:e2:85:4b:60:ab:57:16:19:c7:c9:
                    88:b2:a2:47:99:97:09:18:fe:16:0f:11:3e:06:bf:
                    b6:e8:f9:91:1b:f2:e2:3f:82:98:c5:ef:7e:92:0a:
                    35:81:43:be:91:49:13:a9:93:e3:71:7d:7f:1a:09:
                    a1:ab:ae:0e:17:4a:fd:74:8e:97:ac:47:7e:ff:86:
                    22:63:4f:f7:a9:92:6c:4e:27:b1:36:43:61:69:b3:
                    33:f6:05:8d:be:1a:61:62:73:1b:63:9a:04:23:25:
                    1a:87:3e:29:0f:02:4a:4a:15:c2:45:36:19:dc:a9:
                    1f:81:aa:c3:cc:b5:f4:a2:dd:1f:60:48:66:6b:29:
                    ee:cb:00:c2:8d:89:4c:1b:a7:e3:90:fb:3c:23:60:
                    f6:60:4f:7e:b2:3d:34:49:b4:76:b8:5f:54:54:e1:
                    45:0f:01:3c:0f:af:3b:4e:2b:80:97:a0:cd:c4:10:
                    72:36:a6:c9:bb:58:b7:d4:72:67:3b:71:6f:2c:ef:
                    2f:2d:30:cf:12:9b:95:f6:63:14:4e:3e:c3:05:b9:
                    3d:74:1e:88:1f:a6:8f:64:b3:1a:e6:4b:c2:29:4a:
                    e5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D0:51:B0:F2:A0:E3:6C:D1:BA:12:B6:F7:53:E2:21:34:D6:66:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:fa:4a:ee:cb:44:09:f1:18:40:c6:d0:50:e2:b2:fd:43:c2:
         bb:01:1f:b9:59:b6:99:aa:18:17:f1:1e:04:7b:31:01:be:98:
         83:98:4a:1b:31:a4:db:e6:65:3c:be:2e:bb:62:b3:a3:18:b4:
         b8:24:80:c4:58:b6:84:58:c3:7f:07:24:bc:9a:04:89:bb:94:
         93:ab:1e:87:82:d7:8c:78:49:29:77:61:48:79:0e:7f:1d:16:
         0b:aa:15:f2:18:01:38:2e:a4:a1:30:ec:85:af:69:8c:e1:e4:
         6d:dd:40:9a:70:d0:78:ea:aa:4e:fa:41:6a:fc:07:7c:01:96:
         ae:a4:f5:df:d2:2c:6c:f7:4c:9a:c0:e8:4e:f0:f3:1b:52:f3:
         8e:bf:63:32:99:12:51:30:b9:49:54:2f:8b:24:77:e8:d2:e2:
         18:7c:1c:df:10:3c:c1:4b:a4:5e:1e:10:f6:1f:4b:7e:d1:d6:
         c8:16:47:e8:b3:b5:97:52:68:54:b2:cf:50:44:be:d9:fb:8c:
         4b:b2:4f:e2:f1:ba:9f:6c:ef:ae:df:06:c3:31:a3:2d:94:5b:
         58:ca:2f:67:cd:bd:6b:c5:fa:8c:17:f4:c1:7b:1e:80:43:3a:
         7c:a6:67:bd:56:a1:66:f7:fc:0f:f7:3a:6f:a7:f5:ff:08:d6:
         8b:b8:8c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:30:09 2026 by rpki-client