Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/201f29d9-ab02-3513-8d42-c93a46d0e75e.roa
File:                     201f29d9-ab02-3513-8d42-c93a46d0e75e.roa (raw, json)
Hash identifier:          1CHysKzaNJSOmDiWSt22FDTWcJ18jw5AonheatyCepk=
Subject key identifier:   CC:6D:25:2F:36:84:5A:6F:C1:A9:8E:4F:DB:BA:58:26:8C:A9:ED:3E
Certificate issuer:       /CN=fbe3f91d-911a-4397-956a-9925c68f0a94
Certificate serial:       010D0C9F4328584E3A2F1ECF8F4FE7BA63B13780
Authority key identifier: BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/201f29d9-ab02-3513-8d42-c93a46d0e75e.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     19353
IP address blocks:        66.175.240.0/20 maxlen: 24
                          198.47.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:1e:cf:8f:4f:e7:ba:63:b1:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbe3f91d-911a-4397-956a-9925c68f0a94
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=1cbdcf42-da45-4930-b773-d7cdb76db4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:9d:0a:83:c9:d4:7c:03:a9:f2:7d:cf:8a:
                    3b:c3:34:82:aa:ba:34:11:ab:12:0f:12:fd:82:a9:
                    87:cc:56:2b:b7:96:bc:80:9c:4d:41:b9:50:65:9e:
                    18:c2:47:ea:09:e2:9f:89:65:9c:ac:32:37:a9:b8:
                    b0:7b:2b:ff:f6:18:92:e4:c7:19:7c:c0:26:24:0f:
                    78:a6:f2:c0:4e:20:49:b6:dd:22:c0:08:21:ca:d6:
                    d2:b6:c4:03:9d:91:b4:4c:51:74:e0:5e:81:38:49:
                    62:bc:7e:46:a0:8f:c2:12:ee:22:1d:d3:8b:87:c2:
                    19:44:0e:c9:82:9e:c5:5b:7d:3a:d1:ab:c4:cb:2e:
                    3a:50:49:d9:e5:ee:0d:a6:10:76:31:bf:f3:a9:6d:
                    5e:69:b6:91:48:e1:7c:cf:5e:72:0d:02:f9:2b:2a:
                    5f:28:66:d3:f8:ec:c6:20:a3:04:be:9b:b5:26:bf:
                    a2:9f:01:d9:d8:41:4a:d3:56:15:d1:fd:bd:ad:1e:
                    6c:23:97:2c:15:d4:11:ed:a0:41:85:db:78:b3:7c:
                    75:2a:7c:b2:11:65:ac:df:aa:1c:c8:2e:56:86:15:
                    e1:6c:23:f3:d9:17:05:1e:11:01:bf:de:b9:10:da:
                    3a:90:15:16:f8:2e:78:49:a5:e2:b5:70:70:87:a8:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6D:25:2F:36:84:5A:6F:C1:A9:8E:4F:DB:BA:58:26:8C:A9:ED:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/201f29d9-ab02-3513-8d42-c93a46d0e75e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.crl

            X509v3 Authority Key Identifier:
                keyid:BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.175.240.0/20
                  198.47.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:87:e5:77:5a:d1:bf:22:39:2f:77:7b:a9:79:a7:44:c8:00:
         93:81:4c:ca:cc:5f:8b:20:49:d0:aa:e1:c5:59:e2:aa:64:1d:
         fd:a2:8c:39:6a:47:55:56:07:8a:e2:8b:99:bd:cc:59:64:7c:
         2c:a3:53:1e:99:c9:12:8b:60:f6:e3:b5:61:bb:59:a5:85:eb:
         d8:51:2c:64:ff:30:1e:b7:b4:94:53:fa:5c:b3:da:bf:fc:ac:
         b7:45:fc:16:8c:ad:48:33:8a:0c:1a:fd:a7:60:0b:bd:47:b4:
         57:56:d2:e5:b4:22:bd:44:f3:58:bb:d4:04:36:b6:f7:20:a4:
         5b:87:59:20:68:97:61:8c:c5:96:18:87:48:ac:24:8d:cd:69:
         e7:a4:a4:b3:47:d5:9e:5e:36:15:58:10:27:35:9c:69:84:09:
         80:d6:e5:48:c6:ac:e0:90:55:b0:7c:c0:b3:e7:64:ab:22:3e:
         7b:fa:63:0b:d7:ba:e3:cf:a9:c3:f3:e5:a0:e5:48:d2:75:87:
         ff:82:79:9c:3c:58:a3:1d:25:37:50:df:9d:a3:61:03:7e:4e:
         c6:c2:a3:f5:52:c3:25:50:49:92:a3:c5:1f:b4:45:b1:a5:58:
         8b:e0:fe:75:59:ac:6d:78:5c:02:a0:24:17:4e:87:1f:85:de:
         b9:f5:66:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:27:16 2026 by rpki-client