Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/63f7698f-dd8a-3fe9-9ff0-754eb263bbdf.roa
File:                     63f7698f-dd8a-3fe9-9ff0-754eb263bbdf.roa (raw, json)
Hash identifier:          iH+jeOKoc5GpXGYL4NHUBmnYzfkF91yfp+i/N6j+eW0=
Subject key identifier:   7A:13:48:8A:80:10:5A:B0:88:59:7F:AB:96:2A:93:5C:40:29:F8:B4
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584EB57C5F80E99E5DFFF18894E0
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/63f7698f-dd8a-3fe9-9ff0-754eb263bbdf.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     20055
IP address blocks:        104.225.135.0/24 maxlen: 24
                          192.112.27.0/24 maxlen: 24
                          198.186.143.0/24 maxlen: 24
                          208.123.176.0/21 maxlen: 21
                          209.46.4.0/22 maxlen: 22
                          209.92.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:5f:80:e9:9e:5d:ff:f1:88:94:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=d7018d0a-586a-453f-bd95-e8195c8f511a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:9a:bc:e8:64:ad:f1:21:52:e7:a2:dd:9c:
                    ce:f1:03:33:1a:b5:5a:08:c6:1d:dc:e8:6a:21:4a:
                    45:a7:5d:be:aa:95:53:0e:15:b2:8d:fa:c2:67:98:
                    b9:f6:78:eb:dc:1e:d2:ca:68:06:6e:14:c4:83:52:
                    c3:e2:a3:ec:d0:5f:50:48:5b:a3:78:87:13:17:f5:
                    cc:bf:1c:62:ac:c7:eb:84:b0:b4:80:a0:cc:b0:65:
                    86:b2:c2:5e:aa:b6:2a:75:0f:15:eb:17:d1:2a:94:
                    47:2e:ca:24:d9:9c:93:93:f6:51:3b:1b:66:6b:51:
                    a0:19:20:bf:f6:9c:d8:77:5a:be:d7:e9:fd:92:e9:
                    f9:de:87:fe:a3:2d:b8:91:13:67:50:fa:43:42:86:
                    cc:b9:bf:4f:6d:78:fb:2b:47:5d:44:b7:5c:8b:d4:
                    3a:f0:f2:bb:4c:81:52:60:70:9e:ae:6c:0e:13:d5:
                    c5:9d:c9:c1:72:6d:3a:32:a3:29:ae:b3:30:83:b2:
                    70:fb:9a:ea:29:72:6b:9a:7e:27:97:30:ef:e3:83:
                    57:44:42:0d:c6:80:5f:d9:1b:5a:cb:d8:f6:dd:5b:
                    c2:01:d0:18:de:70:9d:ca:4f:a2:c5:ab:a4:bb:fc:
                    c4:c0:ec:be:7a:00:ef:c7:2d:49:83:ac:e3:e5:4f:
                    18:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:13:48:8A:80:10:5A:B0:88:59:7F:AB:96:2A:93:5C:40:29:F8:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/63f7698f-dd8a-3fe9-9ff0-754eb263bbdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.135.0/24
                  192.112.27.0/24
                  198.186.143.0/24
                  208.123.176.0/21
                  209.46.4.0/22
                  209.92.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2e:8a:68:5c:0b:14:25:5b:fb:44:4b:40:8a:00:49:9c:73:
         3a:dd:f0:4f:49:35:8a:7f:e3:1f:47:7b:07:13:27:77:60:60:
         91:fb:30:f8:19:1e:ca:e4:05:db:ad:49:c8:48:41:f2:5f:ef:
         31:3d:a4:d4:a2:99:6b:7c:04:fa:4c:07:70:30:b3:95:09:93:
         04:fe:57:85:74:a0:6e:e0:39:9c:be:7e:29:bd:f6:8a:a6:8a:
         c4:b6:a2:7a:a3:81:77:fe:b8:2d:6a:5f:dc:05:0e:63:60:dd:
         ef:8e:d8:4e:80:5d:ab:45:84:c0:b3:6b:eb:a7:a2:e9:54:ba:
         3c:57:cc:23:99:da:6f:e5:fd:c4:d9:2d:40:1d:a8:bc:a8:0d:
         be:11:38:40:f4:6c:b8:86:e7:08:be:13:68:60:fb:39:af:45:
         97:88:2a:83:36:f6:fe:94:a9:64:56:34:26:11:ff:8e:e5:42:
         c2:0c:c1:4a:b6:0c:27:16:82:4d:48:5b:8d:b3:5e:9d:72:aa:
         de:22:ae:79:7e:a5:69:9b:18:0a:93:06:cd:a9:20:c1:7a:61:
         68:70:e3:c2:e8:17:7d:75:e0:55:c5:d6:42:75:f0:48:73:f6:
         ae:a6:bc:d7:f9:7b:75:5d:e6:fb:a6:53:12:54:c2:01:0f:fe:
         d7:aa:83:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:46:50 2026 by rpki-client