Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/323c2fc7-9009-33ce-aa09-64b232426f68.roa
File:                     323c2fc7-9009-33ce-aa09-64b232426f68.roa (raw, json)
Hash identifier:          yOY6L10M8GM0/56to4xXk4CyXIl31PNa1qjb2XqGcgA=
Subject key identifier:   B6:CD:55:C7:8E:A8:40:B0:B9:1C:C2:75:EF:CE:C5:90:69:95:5E:72
Certificate issuer:       /CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778
Certificate serial:       010D0C9F4328584E0C1ED0A6DB76DCF8F05E5A00
Authority key identifier: E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/323c2fc7-9009-33ce-aa09-64b232426f68.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     398999
IP address blocks:        172.98.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:d0:a6:db:76:dc:f8:f0:5e:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=6ffad69b-44cd-408d-9d97-963086e67673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ad:4b:50:d7:cf:7b:c4:39:f6:1e:a3:9d:59:
                    d8:59:c9:70:0b:4e:db:8a:0a:55:f5:fe:e3:38:70:
                    40:cc:24:60:4e:aa:4b:a4:be:02:bd:71:a5:50:a9:
                    2d:d2:d4:38:7c:b7:e1:2c:83:bc:8f:81:e9:99:95:
                    43:93:0b:c1:17:e8:01:76:3d:6c:92:41:b4:11:78:
                    36:39:2b:90:67:f0:40:ab:37:8a:a8:21:28:4a:92:
                    02:8b:5f:de:23:42:ed:ab:f6:67:48:ba:16:a8:4e:
                    bb:29:5e:39:ab:2c:c1:71:06:10:51:65:ce:5b:ef:
                    b1:45:1f:a6:69:eb:a5:e5:e9:3c:0b:2c:ec:20:37:
                    17:5a:12:7d:0c:14:8d:bf:23:9a:8d:6b:18:f8:db:
                    b2:17:36:f0:82:9e:eb:15:13:94:a6:be:47:88:8e:
                    02:f7:6e:72:96:cd:5a:df:6a:f0:0d:51:37:01:b9:
                    1d:48:f2:28:87:4d:0e:86:e8:0f:c7:f0:71:66:02:
                    65:52:56:34:ed:82:d4:9e:56:40:a9:86:15:18:95:
                    f5:64:f1:66:bc:93:de:a9:b4:99:1f:83:a2:9e:ba:
                    7e:13:5a:83:a6:44:9a:16:19:1f:50:e2:d7:95:56:
                    cc:f0:1c:ff:75:55:6c:58:56:04:28:12:cc:52:ab:
                    df:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CD:55:C7:8E:A8:40:B0:B9:1C:C2:75:EF:CE:C5:90:69:95:5E:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/323c2fc7-9009-33ce-aa09-64b232426f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:55:7f:61:f2:ee:88:b6:f7:09:d3:56:b7:58:7b:bc:98:83:
         83:3b:dc:88:24:e4:0b:4c:fa:f0:f8:9d:98:d8:e1:b6:38:b5:
         82:53:b3:dc:57:3f:8f:22:7e:b2:5f:76:b1:01:70:c0:96:bc:
         51:ed:a5:df:7c:61:ee:f9:3e:c0:51:c4:98:a8:48:90:44:29:
         96:5e:9a:5c:7c:56:9a:03:58:2e:22:30:59:2b:78:05:c5:0c:
         7e:33:86:34:39:42:22:b1:a3:d8:55:68:8a:9e:24:b7:a1:1c:
         fe:95:d6:d6:72:a8:3e:0d:fd:b9:a3:1e:2a:d3:c9:38:ef:f2:
         85:f5:02:b9:d0:62:a5:a1:0b:85:1b:76:2d:67:4a:69:9b:a8:
         9f:45:8a:a3:34:79:64:4a:b5:65:f1:fe:e8:da:05:2d:65:f0:
         11:c4:67:0f:41:2d:84:55:36:b2:ea:b7:43:b6:d9:db:d2:b1:
         b4:a5:e2:f0:2c:50:d4:1b:cd:72:a6:79:c0:92:03:24:41:d4:
         26:6f:83:19:36:53:75:d4:36:ed:df:47:93:e1:92:e6:2c:1d:
         4e:b0:a4:90:7f:e1:e3:00:de:1a:b7:a3:48:9a:40:34:c0:45:
         08:ff:ca:77:69:3b:2f:32:9a:18:62:15:19:d4:d5:d5:96:7c:
         cd:c5:43:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:49:40 2026 by rpki-client