Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/afb27b49-e22f-37b8-a146-df1b0204fa33.roa
File:                     afb27b49-e22f-37b8-a146-df1b0204fa33.roa (raw, json)
Hash identifier:          liEHTRUT/AbGU0VxlRK0mbkjvT48V32xsvprAdAstYk=
Subject key identifier:   1D:EB:4E:47:AA:FB:38:BD:D5:4F:7A:04:A7:8C:E4:98:F8:39:11:44
Certificate issuer:       /CN=0eb0be5e-7cff-4077-992b-f867365a59c5
Certificate serial:       010D0C9F4328584F0ED230910334A6D1ED042EC0
Authority key identifier: 29:22:5A:D1:E9:EA:64:4E:31:84:59:5F:A4:A1:9F:38:B2:51:07:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/afb27b49-e22f-37b8-a146-df1b0204fa33.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     15753
IP address blocks:        129.230.184.0/23 maxlen: 24
                          129.230.186.0/23 maxlen: 24
                          129.230.188.0/23 maxlen: 24
                          129.230.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:30:91:03:34:a6:d1:ed:04:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb0be5e-7cff-4077-992b-f867365a59c5
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=72bf2b39-729a-4052-9347-16b51bd29cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:87:5d:3e:83:c7:43:30:23:eb:29:0f:bb:
                    e4:bb:04:07:75:50:84:49:bb:95:22:fd:e8:b9:03:
                    1e:fd:c9:8e:27:b5:6c:cb:fa:89:5c:30:15:1e:b7:
                    8c:9f:23:bf:a8:a1:68:2d:4c:23:b1:25:ca:69:a8:
                    48:0a:2f:84:26:9e:0a:16:26:40:34:6d:61:1b:b1:
                    89:a9:8b:d7:b2:70:8f:1f:f1:6a:99:84:c0:d7:e9:
                    14:85:07:84:15:ea:2b:43:4b:1a:8d:cb:19:0d:64:
                    3a:74:72:b3:2f:29:2b:00:4d:c4:cc:b6:84:62:7f:
                    88:d6:e5:1b:fc:b5:83:76:3e:b8:52:9c:44:d9:9f:
                    36:bd:04:8d:58:4a:7d:83:3a:06:88:33:e9:36:59:
                    a7:13:5a:7b:ef:4a:c1:3e:27:e7:f1:17:4a:3e:ad:
                    f4:bb:62:02:76:ff:9e:0f:c6:4f:19:cb:92:d6:f3:
                    17:ca:d0:4b:91:5e:98:71:6e:5f:df:30:2e:80:a9:
                    1e:81:80:3c:3a:d0:28:0a:83:8e:9e:46:a3:cd:c2:
                    b6:d1:d5:8a:44:27:78:7f:81:dd:3b:1d:71:7a:e2:
                    e9:2a:e0:c7:ce:05:c1:c3:98:d9:db:f9:2c:27:8e:
                    d6:f9:4b:60:5b:79:8f:87:50:57:b9:4b:2b:ce:eb:
                    d4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EB:4E:47:AA:FB:38:BD:D5:4F:7A:04:A7:8C:E4:98:F8:39:11:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/afb27b49-e22f-37b8-a146-df1b0204fa33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:5A:D1:E9:EA:64:4E:31:84:59:5F:A4:A1:9F:38:B2:51:07:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.230.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ad:03:cf:21:bc:db:8d:d5:d2:c0:67:84:1b:ef:64:09:52:
         ee:3d:2a:aa:34:b1:30:9e:39:6e:6e:ae:5e:e8:b4:9d:da:3e:
         63:af:4d:c2:dc:73:a2:38:3b:83:2d:47:5e:33:45:ee:3b:86:
         2e:4c:09:44:68:f1:b9:f6:c7:3c:d0:84:f3:55:84:c7:31:ce:
         d1:4c:bc:5b:e1:60:04:18:7a:fd:53:b5:f1:d6:79:0c:16:88:
         7d:8c:e2:b3:2b:6c:9f:ef:57:44:bb:61:1e:77:15:0b:dd:32:
         3f:25:b6:4d:b1:2e:cd:58:de:a0:a0:5a:79:66:7f:aa:be:22:
         e5:36:17:31:24:0b:22:56:42:76:b1:eb:3f:2a:17:32:3d:55:
         30:3d:4d:cb:e7:db:f2:79:9c:15:c4:06:8c:4d:8c:97:35:30:
         e6:5d:73:4a:7a:cb:25:dd:b9:75:89:96:19:09:ff:d2:75:f3:
         2f:b6:7c:f6:d1:bf:a4:8b:9d:c2:fe:ab:4b:b8:1c:2c:29:5d:
         1e:cd:44:10:c8:9d:11:fd:0e:15:32:14:b2:d5:8f:55:f7:93:
         8f:0e:73:3e:ef:05:94:7c:b6:8e:9e:c7:89:ae:19:dc:2f:e8:
         0d:85:6c:88:e0:58:a9:9f:3e:39:7e:21:8b:39:34:97:83:be:
         c0:b0:fa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:55:56 2026 by rpki-client