Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/201f29d9-ab02-3513-8d42-c93a46d0e75e.roa
File:                     201f29d9-ab02-3513-8d42-c93a46d0e75e.roa (raw, json)
Hash identifier:          bsH2tCtp+AWPMdt90QgoC71Ea3XN4zzzgDP4qvjoawA=
Subject key identifier:   79:9A:F4:B9:52:7D:92:5B:14:DD:5D:82:10:0D:0C:56:D0:A8:50:CD
Certificate issuer:       /CN=fbe3f91d-911a-4397-956a-9925c68f0a94
Certificate serial:       010D0C9F4328584EDC91EF95BC07ADB5A180A5E0
Authority key identifier: BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/201f29d9-ab02-3513-8d42-c93a46d0e75e.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     19353
IP address blocks:        66.175.240.0/20 maxlen: 24
                          198.47.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:ef:95:bc:07:ad:b5:a1:80:a5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbe3f91d-911a-4397-956a-9925c68f0a94
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=43e95c9a-ee17-4ac1-9c6c-5669d1b463bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:1b:6a:46:8f:76:ae:39:37:4f:49:03:6a:
                    ed:6c:aa:cb:40:ba:c6:95:9a:a3:18:fc:91:d2:98:
                    ff:cc:6b:d7:7f:9f:f1:38:ae:01:69:9b:b6:8f:cb:
                    34:32:1a:8b:0f:2c:13:3a:e5:91:2f:ff:26:23:9b:
                    26:61:c9:34:9d:d4:94:53:34:71:b3:15:01:f6:f8:
                    ce:0f:0f:cf:15:64:26:ec:95:23:7c:f5:3f:ec:e3:
                    7e:e8:48:b4:0c:60:fe:7e:5b:a9:04:96:f8:89:e4:
                    0e:e3:0b:8a:3a:b8:ba:e1:3f:34:a7:84:4e:75:8d:
                    c2:26:9d:36:7c:54:10:bc:fa:8c:36:fe:39:ed:3b:
                    84:a7:a8:5a:55:d5:cb:38:2b:02:b1:ad:ad:a7:fb:
                    e1:01:bc:f2:7a:2c:14:7c:66:05:c0:fd:03:5b:c6:
                    23:d1:d5:df:1c:26:3d:f3:fe:36:47:f6:b6:fd:6e:
                    5c:de:32:11:60:d9:19:f1:96:60:1a:d6:2f:13:c9:
                    72:93:dc:0e:14:f7:ca:f6:22:f4:25:57:79:20:9a:
                    68:96:8e:51:d1:3a:03:a3:11:de:a6:22:01:12:aa:
                    13:5f:bb:ae:c6:66:c6:7f:0a:25:55:ea:72:15:fb:
                    08:3f:f1:e5:60:7b:6e:ed:a0:4d:90:86:1d:ed:c4:
                    9c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9A:F4:B9:52:7D:92:5B:14:DD:5D:82:10:0D:0C:56:D0:A8:50:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/201f29d9-ab02-3513-8d42-c93a46d0e75e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.crl

            X509v3 Authority Key Identifier:
                keyid:BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.175.240.0/20
                  198.47.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:02:6e:8c:31:42:18:61:0f:15:e4:b4:12:9c:a3:f1:68:01:
         b5:51:8c:c8:bb:35:16:fe:70:40:eb:e8:5e:cc:5d:36:fc:51:
         6b:f3:21:db:b5:bf:65:14:b8:6e:91:ac:75:bd:d5:79:24:35:
         4f:3a:af:30:e8:be:c8:32:5b:46:3a:31:02:6a:bf:b2:a1:03:
         92:1a:ac:41:7a:9a:77:09:0e:99:8c:1d:e8:e8:c8:dd:6a:13:
         a4:a8:a4:8f:ad:30:60:07:92:a8:3f:48:41:6c:b6:31:59:c6:
         34:34:27:ff:60:db:cb:1f:77:d5:a4:22:56:db:a2:32:b0:15:
         f6:37:cb:21:85:90:21:f5:be:fe:58:2c:c0:09:28:67:ce:0d:
         03:98:eb:27:33:08:e9:21:fe:b2:c7:da:0f:ed:d8:5f:ac:b8:
         08:51:45:48:a6:a6:65:66:bf:8f:42:40:28:f4:1c:53:6c:f0:
         42:ff:d8:61:02:bd:18:db:50:a8:ee:2d:71:6a:da:b1:ec:f6:
         97:cd:e3:a7:c5:7c:81:6b:fc:3a:81:3a:52:a5:85:58:c1:2b:
         da:07:b3:4f:ec:d0:50:be:44:8f:1d:3b:4f:36:31:98:a4:1d:
         f3:ac:a7:a0:41:64:12:d2:e2:91:c1:ae:63:c8:d0:a8:68:6a:
         1d:76:60:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:37:50 2026 by rpki-client