Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa
File:                     fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa (raw, json)
Hash identifier:          rvA/vUg/LlDo1JSzCYj13FLvhyB3+M8ou0huJRG2B2I=
Subject key identifier:   75:E1:4B:66:2E:BE:9B:CF:4B:F7:7B:B0:98:0D:0A:78:82:7A:12:F9
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F4328584E78FF7CE491ADD7E95D0D68C0
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     36511
IP address blocks:        199.101.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7c:e4:91:ad:d7:e9:5d:0d:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=0f692d0e-4891-4d77-8f17-6cf3f68a2b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:e5:b1:4c:ec:f7:e5:d2:1f:e1:c7:c3:8d:
                    40:60:88:7f:0e:15:36:3b:df:93:3b:ba:3c:51:eb:
                    f2:71:b0:a1:2b:97:31:03:e9:73:16:a1:0f:fe:14:
                    d7:41:5c:a2:05:41:f2:70:53:f7:4c:66:07:8d:df:
                    8a:fb:59:b4:ac:71:69:73:d0:9e:79:90:e0:2e:89:
                    8e:dc:96:60:b0:2d:23:7c:b5:50:d1:76:f0:7c:8d:
                    67:db:e3:75:37:d0:6d:e3:c0:60:01:e7:12:fd:58:
                    2a:3b:52:ce:b5:e9:98:15:63:cb:1e:03:c9:75:c5:
                    db:54:f7:bf:74:66:b3:74:62:0f:6e:59:6e:8b:6e:
                    71:b1:7a:e8:2a:f8:1d:bf:97:db:02:a5:2f:db:8f:
                    9c:86:3c:a4:90:1d:66:5a:7c:db:2c:3e:00:4e:c7:
                    cc:0b:cd:fa:b2:97:0f:95:0f:f1:13:19:39:a3:e6:
                    ff:6e:e8:76:06:3e:6f:53:16:fb:2a:1f:70:3f:ee:
                    80:f8:ca:1a:68:20:93:3e:31:e8:51:14:ea:20:87:
                    53:b4:af:af:cc:c0:2e:49:51:3e:50:af:da:7e:15:
                    ff:84:0f:b2:0a:2a:27:91:ce:1d:f8:ac:2d:c7:16:
                    44:dc:b4:6d:3a:3b:71:94:07:0c:6b:46:13:bc:2d:
                    e5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E1:4B:66:2E:BE:9B:CF:4B:F7:7B:B0:98:0D:0A:78:82:7A:12:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:aa:96:53:b0:da:9e:75:39:5a:59:de:b1:c5:4f:2d:37:48:
         66:b2:9d:ff:ed:53:2f:84:e0:0f:8e:27:99:c0:f8:e6:8b:f8:
         8c:d1:d5:90:c1:ef:f8:90:92:3e:f6:2a:3c:9b:d3:ee:88:ab:
         e4:2f:4f:f0:c9:59:8c:95:14:46:97:e2:29:b0:7f:35:f1:47:
         b4:2a:ca:27:86:22:94:49:31:3e:78:27:ec:f6:af:d2:de:50:
         60:67:d8:65:c1:5b:30:ab:f8:03:75:f7:98:a3:84:88:25:41:
         87:7b:10:b7:5d:9d:b7:aa:d3:b0:32:54:86:ba:f7:07:7b:ad:
         94:3e:c2:65:36:7b:ea:50:20:7c:e4:52:46:ce:b1:2a:af:b5:
         44:e6:a7:18:c4:78:26:2d:53:a8:0c:ed:ab:df:fa:58:2e:1f:
         88:43:6b:3f:70:70:4c:93:14:6c:8d:56:f0:d3:0f:cd:a3:b5:
         ee:9e:96:c7:b9:b5:2b:e0:a7:ab:6e:f0:a3:b3:f0:a9:fa:6c:
         e4:a3:69:df:2f:92:d7:f9:a0:77:3d:8c:96:52:c1:eb:18:bb:
         2f:60:ca:7e:18:d9:bf:1f:aa:89:d9:2f:7a:98:3f:a1:67:c0:
         f9:e8:f8:e8:74:7f:03:bd:32:ce:32:31:00:ea:d6:70:55:8e:
         28:df:68:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:59:54 2026 by rpki-client