Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/63a48773-fbcb-3312-8832-12e85284cc48.roa
File:                     63a48773-fbcb-3312-8832-12e85284cc48.roa (raw, json)
Hash identifier:          ZLTojoa/k2XfarDbtsuElCYkUxcWQV2FV8CouaydyCU=
Subject key identifier:   C9:0E:2D:78:C3:4E:72:CE:64:61:7A:D1:3B:3C:5A:63:97:21:9D:65
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584F3A17C3B4257CAB8D89124840
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/63a48773-fbcb-3312-8832-12e85284cc48.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     2734
IP address blocks:        208.77.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:c3:b4:25:7c:ab:8d:89:12:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=7ac7fdc7-6ca9-47db-a9d4-05a68d52af9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:7c:5f:78:5c:c5:3d:43:c8:32:5b:fb:fb:
                    52:28:0a:15:da:75:6e:4d:ab:dd:0f:a3:39:dd:a1:
                    64:30:da:93:21:ad:c2:48:65:2c:26:d5:3a:5e:e3:
                    14:a6:8c:2c:3c:a6:35:fd:0a:99:12:f2:96:51:ee:
                    83:7c:db:3c:2e:43:a0:09:6d:94:96:69:ac:ca:c8:
                    bd:ba:eb:2a:c9:4d:43:3b:7f:e9:16:c2:72:0b:13:
                    91:20:84:95:f2:5f:76:8b:b8:2f:1d:17:38:ac:1f:
                    1a:a1:df:fd:09:b3:27:ee:aa:81:b9:e9:e4:83:20:
                    69:30:9c:e8:52:42:84:6e:bf:b0:64:a0:27:00:d3:
                    81:5a:92:df:65:77:c5:f3:4c:d6:f9:c2:e1:e8:bd:
                    a8:b1:a3:c9:81:4b:b5:6d:b4:37:8d:b2:0c:9b:fa:
                    d1:3b:13:3c:60:d1:04:bb:7e:e7:3d:06:f5:4e:e7:
                    62:d0:9e:92:b9:47:7d:eb:d8:92:3d:a1:25:09:9a:
                    82:d7:26:53:cf:f9:72:79:16:a0:06:61:42:cc:76:
                    88:82:9d:57:23:76:f0:44:78:a4:dc:77:01:9c:be:
                    11:d1:31:53:12:94:54:68:db:d0:55:bc:b8:85:42:
                    eb:fa:9b:0f:c8:d7:44:4f:f7:ed:7c:27:b0:8a:ac:
                    79:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0E:2D:78:C3:4E:72:CE:64:61:7A:D1:3B:3C:5A:63:97:21:9D:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/63a48773-fbcb-3312-8832-12e85284cc48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.77.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:51:9a:32:22:1a:b4:ce:48:fd:5a:84:4d:5f:07:87:ec:de:
         be:a9:20:70:14:f0:5d:44:e3:d9:5c:8a:64:7a:20:83:7f:ec:
         09:94:24:1c:46:62:98:91:f8:0a:e8:27:ad:80:82:b8:75:a4:
         a8:89:a1:e9:5c:68:db:08:20:8b:f4:c3:96:40:d3:14:1e:da:
         be:50:07:24:d1:dc:47:fa:a4:1c:52:84:e0:04:f9:e1:af:40:
         28:e8:7d:5f:41:5d:ec:25:3f:8f:fc:11:8a:ee:83:80:e4:fc:
         1d:40:9f:d0:8f:69:0f:86:21:a6:ac:fd:91:7d:37:be:8c:a4:
         38:6c:1f:a8:96:68:9e:61:78:cc:42:4c:1d:cb:4a:c9:16:d8:
         58:3e:d1:4b:97:43:96:04:23:db:cd:43:96:89:f0:56:a7:31:
         c0:c4:81:f4:43:c4:f8:b3:10:65:7b:23:dc:2e:9e:6d:81:4b:
         ea:ff:9c:07:59:8e:30:9d:45:dc:7c:75:d4:90:93:01:95:5f:
         49:6b:31:03:8e:66:f2:6a:a3:02:ee:5b:5b:76:ef:2e:1e:37:
         b8:98:2c:4b:5f:3d:d8:d0:56:00:3c:ed:17:93:77:75:2a:f4:
         1a:88:ef:65:26:c6:c5:be:59:db:d0:e2:c5:55:43:49:83:7d:
         f3:d8:fd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:06:51 2026 by rpki-client