Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2e8ea2b6-0611-36c1-bdaf-46f81b83aafe.roa
File:                     2e8ea2b6-0611-36c1-bdaf-46f81b83aafe.roa (raw, json)
Hash identifier:          wt6NhwuntyWuBljfebaqCh1j1vmjkj9pp8lcG/i29z8=
Subject key identifier:   BF:21:03:C2:2B:24:5A:3F:0B:3B:CA:00:D0:B0:14:6C:2B:29:67:37
Certificate issuer:       /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial:       010D0C9F4328584CB81C7E8F4828D37D27C33680
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2e8ea2b6-0611-36c1-bdaf-46f81b83aafe.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     63293
IP address blocks:        129.134.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:7e:8f:48:28:d3:7d:27:c3:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=1aeaad61-b5b6-4426-a265-06596a5c88e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9e:37:c1:fe:45:af:c3:2f:8a:78:e0:fe:57:
                    51:e0:b8:99:30:8f:5c:6f:a5:2c:97:e2:53:ff:d9:
                    24:44:b5:43:d9:20:73:c4:55:6e:a9:5d:b0:fe:36:
                    fb:50:3b:b1:f5:7d:fb:70:ca:48:2c:98:37:dd:6a:
                    4e:60:bf:f9:b2:1d:81:4f:af:8c:a6:f7:c7:dc:d2:
                    8a:09:b1:ce:bc:7c:91:69:f1:8d:c0:73:8e:ff:87:
                    31:93:26:d8:fd:fa:b9:09:00:7d:14:5d:ce:fe:1e:
                    1d:db:d4:69:e0:a2:e6:e2:d4:e3:d8:db:44:15:66:
                    c9:c2:eb:71:7c:d9:97:22:91:c0:81:c6:9c:cb:24:
                    4f:fc:ac:24:c8:b3:59:c6:cb:f5:25:d5:09:6d:84:
                    ae:f0:0f:a8:4a:d8:73:a4:91:d6:e1:75:62:58:c7:
                    85:72:e4:0f:df:85:4d:46:99:d1:3d:8e:05:06:67:
                    10:2e:9c:d0:ea:a8:8d:86:a6:70:25:02:70:6d:d6:
                    81:dc:60:2c:1a:d4:ac:e1:ff:b5:76:e9:96:11:28:
                    8c:a6:5c:80:2a:d1:64:33:99:89:a1:47:c2:c0:43:
                    09:c6:0f:df:f5:94:07:84:3f:01:ac:0a:56:d0:3b:
                    4e:a5:5f:7a:c5:15:73:78:36:8e:3d:02:b0:9b:b9:
                    14:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:21:03:C2:2B:24:5A:3F:0B:3B:CA:00:D0:B0:14:6C:2B:29:67:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2e8ea2b6-0611-36c1-bdaf-46f81b83aafe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl

            X509v3 Authority Key Identifier:
                keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.134.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:86:9f:92:4c:1e:aa:ff:a1:18:1c:fd:12:7f:14:35:99:ab:
         d3:32:83:82:30:08:99:be:c5:a7:88:c6:77:a5:ef:4b:46:5d:
         05:b3:9d:33:a9:79:b8:ea:6a:a5:a5:cd:cd:23:c3:e7:3d:49:
         eb:76:2b:e2:c1:e5:fe:27:58:25:23:e8:e8:41:a6:2c:01:78:
         3a:10:47:bc:5d:59:3b:d4:db:59:88:da:19:80:6a:b5:2b:c7:
         b4:b8:a6:ef:af:80:62:d1:b5:33:ae:d1:9b:e5:68:26:83:a8:
         90:ec:5c:a7:38:ec:1e:af:61:9f:2d:b4:ce:70:2a:db:a2:61:
         1c:73:40:44:ff:18:73:0a:02:49:f2:15:bc:ac:a0:2d:12:f9:
         2c:66:74:5d:9b:e4:de:b4:eb:79:f3:2a:dc:c3:32:cd:9e:5a:
         b3:23:5a:31:c8:df:7c:6f:60:62:dd:8d:ec:4a:d2:de:04:a6:
         4a:6b:da:cd:8a:88:41:4f:c5:66:fb:3e:7f:35:86:a9:10:b5:
         78:c9:3f:5e:58:b9:b8:b7:74:f3:f9:0a:1c:9b:c5:77:0f:46:
         9f:09:2a:d1:66:8a:6d:3d:d5:5e:88:b1:9e:48:17:a2:5d:ef:
         03:70:a5:91:87:5c:80:25:04:c2:5a:78:6b:ee:5c:03:a3:67:
         c0:ca:57:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:57 2026 by rpki-client