Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa
File:                     fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa (raw, json)
Hash identifier:          w43kcLg2AsTBT1Ch5unbNZ9rwiNzA2ZPP6uO9hTAZRs=
Subject key identifier:   7F:1D:C1:16:4A:29:32:AA:42:D9:56:CA:25:DD:01:CD:C0:03:67:F7
Certificate issuer:       /CN=7da3df33-ad97-4a08-81e8-054f28d035ed
Certificate serial:       010D0C9F4328584EA788243FC16DBB73B7722E80
Authority key identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     209
IP address blocks:        199.253.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:24:3f:c1:6d:bb:73:b7:72:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da3df33-ad97-4a08-81e8-054f28d035ed
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f4bec5c8-880c-42f0-83cf-813ecc4f283e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:6d:24:1d:fa:eb:67:6f:f4:15:34:53:10:
                    b5:f5:6f:a1:40:94:11:49:08:11:7c:10:58:ac:60:
                    0a:02:ce:d9:78:e8:c1:1d:48:aa:13:43:8a:f2:31:
                    f0:36:7a:7d:c2:9b:d9:30:bd:48:ea:ee:0f:35:55:
                    66:44:1b:06:a6:cf:93:37:fc:cc:65:75:9d:9d:c7:
                    d1:08:bb:5d:e0:1a:e8:29:e5:4f:8a:39:f6:7e:89:
                    9b:46:4b:77:2f:18:75:50:31:ed:5a:9c:7d:1d:19:
                    34:09:57:88:cc:87:1b:72:15:f7:73:57:cd:a7:f3:
                    02:79:df:cc:5b:fa:10:5a:80:7c:f9:12:8a:b8:b5:
                    47:0d:61:53:cb:aa:59:1d:3e:82:6f:89:5d:23:8e:
                    ae:01:5c:3e:fd:27:e0:11:cd:68:52:93:57:42:a3:
                    27:ae:c6:dd:0c:b6:38:19:cc:43:16:eb:65:68:67:
                    6d:fa:88:a3:a2:a7:0a:6f:40:a3:a4:0d:e7:40:5e:
                    da:31:3f:db:1e:6e:63:34:f2:e1:b7:2a:89:18:11:
                    97:a4:9d:3b:37:c9:8e:e6:57:08:44:58:74:32:47:
                    7c:d3:dd:16:fc:f2:31:ec:7d:a1:dc:5d:b9:84:b1:
                    2f:30:4f:c7:18:39:de:78:46:14:41:8b:3a:e5:c6:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1D:C1:16:4A:29:32:AA:42:D9:56:CA:25:DD:01:CD:C0:03:67:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/fbba0a7f-b8ef-3af4-b960-13f710cc58e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl

            X509v3 Authority Key Identifier:
                keyid:9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.253.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a8:a5:f5:e1:31:1a:ea:3d:db:86:41:fd:8f:cf:9c:8b:9b:
         ef:95:98:db:d2:9d:d0:e5:c8:e5:ba:3a:5a:36:9d:fd:4b:02:
         64:a8:f7:d2:79:7c:5b:7c:74:e9:f1:c4:b1:e6:d2:03:f7:ea:
         d1:c8:3d:c3:a3:d2:a6:b0:0d:cd:df:73:da:d1:b0:49:34:3c:
         cd:c6:d9:68:d6:f6:ea:6c:14:01:a0:88:2d:86:36:cd:40:5b:
         02:bc:50:95:5d:6f:e7:fb:20:58:47:7c:2c:e8:0d:af:89:1f:
         ae:4e:19:5b:a0:4e:12:87:a2:e1:5a:87:46:1f:44:67:4b:7c:
         62:20:fc:d0:9e:0c:45:cd:cb:2a:a8:94:83:2a:0f:79:37:6c:
         bb:d1:0c:2d:c7:5c:a4:c0:b1:a3:56:a8:fd:71:2a:b5:79:56:
         e7:c1:09:d4:50:58:40:89:d3:37:d7:a4:e6:45:e3:96:36:57:
         c2:47:0a:40:45:70:13:bd:3f:91:e7:61:3f:c5:23:b6:89:49:
         3f:4b:a9:d6:ca:5d:83:bf:77:95:98:08:4e:7d:27:5b:f0:5d:
         32:52:d1:54:a4:ff:f8:aa:7a:50:cc:a8:b8:6c:f6:ba:09:52:
         10:7f:18:7c:9a:99:dc:84:8a:79:03:22:94:72:49:f2:68:60:
         9e:2a:0f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 04:32:56 2026 by rpki-client