Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef473667-3cd0-3295-b46a-c05b9c18294c.roa
File:                     ef473667-3cd0-3295-b46a-c05b9c18294c.roa (raw, json)
Hash identifier:          GcWWALoSnZgTzHZqb2CNeGBllUcwaxDLb5khctPdFOA=
Subject key identifier:   4C:AD:16:AC:C8:A8:B4:A3:09:E7:EA:51:EB:72:40:76:55:E3:C3:89
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F0672622512886AFA6D6F6880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef473667-3cd0-3295-b46a-c05b9c18294c.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        184.29.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:62:25:12:88:6a:fa:6d:6f:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=ed9ba671-7e55-4f1e-8964-158c9a1e28d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0a:17:f3:48:71:3a:bf:5b:7b:da:3a:6e:70:
                    29:88:8f:f9:92:35:b5:65:92:20:a4:e3:02:02:29:
                    a3:c6:74:d7:a3:a5:3e:2f:cb:5c:4f:15:b5:38:b6:
                    1f:f7:b2:85:a5:66:d4:c6:a1:34:e9:9a:d6:63:f7:
                    08:8d:5b:3c:51:de:99:02:4c:98:64:2e:bb:5e:a9:
                    b8:81:ef:dc:85:ce:e8:fc:c0:f7:bd:20:1a:a6:ab:
                    f6:a7:6d:34:a5:0e:ff:1a:50:fc:69:d6:57:e3:0a:
                    f3:39:96:91:21:ff:23:2c:0a:a8:81:40:95:01:0e:
                    95:21:d4:1b:49:7b:2e:67:e8:b6:b3:21:c5:53:f0:
                    a5:cb:c2:f3:8b:e6:f0:b8:94:46:e8:86:3b:49:74:
                    31:23:91:23:26:27:e3:47:d4:53:b1:c5:d1:06:34:
                    f0:9d:22:61:d5:1c:1b:db:b3:9f:4a:2f:3b:f3:c2:
                    82:d0:1a:d8:a5:e1:02:dc:2f:71:0a:29:e0:73:f2:
                    4b:16:b2:b7:ce:ab:e2:3e:2a:e3:52:4a:72:9a:d5:
                    47:1c:fe:96:71:26:82:9c:e9:06:cf:93:d7:17:63:
                    42:f1:cc:6c:57:4d:ab:87:82:89:74:9a:87:09:ae:
                    2e:b8:75:2b:a7:4c:1c:4f:51:99:ec:f8:cb:ec:4a:
                    3f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AD:16:AC:C8:A8:B4:A3:09:E7:EA:51:EB:72:40:76:55:E3:C3:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef473667-3cd0-3295-b46a-c05b9c18294c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.29.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:80:19:8a:28:67:99:df:79:37:38:5a:7d:a0:1e:e3:ce:d3:
         ca:d0:55:b1:4e:7d:0b:90:44:39:46:c1:e2:b7:ad:85:f4:2f:
         5d:53:9c:c9:e7:e7:39:ef:bb:7c:dd:0b:82:2f:96:ed:56:b4:
         10:26:e0:ff:3a:db:6e:c6:4b:fe:76:8b:ae:72:fc:b3:7f:23:
         6b:b9:73:47:6b:e9:40:a5:23:d4:43:31:da:22:db:95:aa:1a:
         c4:00:50:3f:df:fe:b8:b3:29:a4:63:82:f6:c9:f6:be:22:30:
         4f:f8:f6:48:40:1b:cc:e1:73:50:0e:00:86:ad:2a:d7:80:0e:
         6b:44:52:08:d0:e9:dd:ee:d2:6d:91:4f:19:ea:73:fc:6d:fd:
         c4:9b:58:1d:1c:6e:62:9e:ad:76:e7:e1:62:e3:13:ba:f3:55:
         85:c3:6b:86:45:2e:cf:b6:f9:08:6d:ee:c2:cd:ba:6a:35:a9:
         48:fd:11:db:c5:77:59:82:9f:5e:9e:51:91:d2:d8:af:94:b2:
         9d:be:4e:1b:08:57:e1:24:ca:65:26:92:c3:f3:be:91:1e:82:
         8c:39:ae:91:da:f1:87:b9:4d:93:3b:e0:1b:2a:52:76:e8:9f:
         0b:a4:3a:f2:30:fb:7d:dc:7e:cb:6c:15:df:99:a2:57:20:86:
         8d:04:c5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:46:58 2026 by rpki-client