Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/63f7698f-dd8a-3fe9-9ff0-754eb263bbdf.roa
File:                     63f7698f-dd8a-3fe9-9ff0-754eb263bbdf.roa (raw, json)
Hash identifier:          GoMhx/G3XGqPA8kUjzhCMWmnAfP3nDo4mr+GKp6EIRQ=
Subject key identifier:   38:00:BE:8D:FF:38:64:0A:6B:92:69:F3:DA:6A:98:82:30:8A:F3:65
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584F57682C13C472FF2E06750580
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/63f7698f-dd8a-3fe9-9ff0-754eb263bbdf.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     20055
IP address blocks:        104.225.135.0/24 maxlen: 24
                          192.112.27.0/24 maxlen: 24
                          198.186.143.0/24 maxlen: 24
                          208.123.176.0/21 maxlen: 21
                          209.46.4.0/22 maxlen: 22
                          209.92.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:2c:13:c4:72:ff:2e:06:75:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=0f34a81a-fd7e-4d26-8d3d-97f4abb84f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:53:27:b8:f6:c1:22:2d:8c:b0:6c:bb:2b:9f:
                    3d:b1:b0:72:70:fc:46:15:8e:50:3b:de:d0:1d:d7:
                    4e:bd:64:55:61:d1:3f:2c:fc:6e:7f:50:c5:58:cd:
                    d0:a8:fb:db:a8:20:a0:7d:c8:c6:5a:bc:ab:fc:8e:
                    cc:c9:6f:80:8f:c5:89:d8:2d:7e:af:01:1a:76:c0:
                    ba:39:67:c6:30:58:83:ca:4d:35:39:65:be:f6:02:
                    cc:a1:bd:5c:39:74:15:9a:61:7c:b6:73:4a:75:9d:
                    37:e3:69:7c:7b:47:fd:02:bd:30:f6:f6:dc:18:28:
                    ab:eb:6e:a4:60:0d:bc:00:ce:62:4f:3a:68:6c:b6:
                    ef:d1:e0:bd:30:0c:42:52:c3:03:53:98:b9:15:9f:
                    11:5d:87:5d:c9:b3:15:d1:41:20:49:89:23:02:4a:
                    f1:bf:8f:2c:fb:ca:0d:b0:6a:9f:09:60:92:ae:bf:
                    13:f6:e1:d1:b3:00:1f:98:d3:1b:c7:f5:d8:13:08:
                    b2:c7:2c:ef:7c:1c:00:93:ba:8a:8d:56:eb:03:85:
                    d6:bc:01:c8:ca:68:8a:ed:c5:cf:64:f7:ce:7d:75:
                    91:f0:a2:38:1d:02:db:03:5a:10:84:64:76:90:55:
                    e3:31:55:2f:99:da:25:17:3b:e2:1d:c6:f5:ba:38:
                    7e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:00:BE:8D:FF:38:64:0A:6B:92:69:F3:DA:6A:98:82:30:8A:F3:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/63f7698f-dd8a-3fe9-9ff0-754eb263bbdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.135.0/24
                  192.112.27.0/24
                  198.186.143.0/24
                  208.123.176.0/21
                  209.46.4.0/22
                  209.92.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:59:f5:21:9d:54:b2:fd:5d:02:a4:f1:49:02:00:34:40:2f:
         24:35:a5:d0:0a:43:11:21:6d:21:98:07:d9:ce:ee:02:f2:e5:
         c8:02:57:f7:4d:11:15:30:34:97:af:ee:1c:63:f3:f0:fa:26:
         85:98:ee:40:3f:a2:2f:4e:26:55:c6:cd:4c:38:bd:fb:79:ec:
         4e:69:b7:93:29:73:32:8a:e7:9b:36:7c:ed:51:12:f0:7e:80:
         fa:3d:0a:ad:7b:ea:16:b6:cf:c6:f8:39:18:11:ea:b2:ac:f8:
         81:0f:66:ef:e3:6a:f0:11:09:bd:d2:f3:c5:c6:cf:d4:f9:de:
         2a:e6:69:8b:88:a2:55:84:03:27:d1:80:30:ce:ab:c2:f3:2b:
         73:fa:f0:8a:c7:99:39:8b:02:c5:f2:e0:8b:d4:53:d9:1e:7b:
         97:81:da:a0:d6:1e:0b:d4:a2:cc:df:59:40:e5:d3:50:29:28:
         4e:f5:47:ad:04:1f:b8:62:2d:59:7e:53:54:23:d7:c0:07:27:
         3b:52:63:be:ec:b3:f0:17:b2:9c:72:d1:6b:8d:14:4c:45:cc:
         86:45:d6:5a:86:32:60:03:0a:8a:ce:fe:c4:c3:d2:90:76:4f:
         1c:8f:e8:c7:91:2f:b6:53:c6:24:2b:d4:ac:a9:19:da:d7:0e:
         dd:42:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:50:34 2026 by rpki-client