Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/f3b94909-4a1a-378f-8207-e0c0e8315af3.roa
File:                     f3b94909-4a1a-378f-8207-e0c0e8315af3.roa (raw, json)
Hash identifier:          pY/Og1HH/GfBsjLIJkDIE4eq1DTpDk81zE2I6ZQsZdE=
Subject key identifier:   08:E4:04:15:C6:78:C0:69:38:F2:05:5C:3A:EF:AD:9E:8B:16:46:37
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584ED9C749644FD07098D8097440
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/f3b94909-4a1a-378f-8207-e0c0e8315af3.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     40033
IP address blocks:        66.35.8.0/24 maxlen: 24
                          66.35.15.0/24 maxlen: 24
                          207.32.193.0/24 maxlen: 24
                          207.32.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:49:64:4f:d0:70:98:d8:09:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=70472ac1-dbb7-4125-86ad-d16c85d811cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2b:ce:6a:15:8b:2f:41:b6:46:20:89:b7:34:
                    c1:ac:9c:51:c2:6b:51:b3:1b:31:e0:7c:9c:68:b2:
                    c0:55:3e:c6:ae:b1:b3:40:dc:b3:2f:e5:c9:d0:3e:
                    68:12:65:31:cf:14:8c:06:1d:46:dc:38:06:9d:6b:
                    88:2e:14:67:cb:63:99:24:05:00:6e:ed:15:27:e1:
                    37:b8:3d:9d:4c:15:37:71:82:1c:80:45:ff:b5:00:
                    b2:eb:be:46:21:17:54:ea:b4:a0:ce:cf:2d:93:ea:
                    09:51:5e:47:a2:52:7a:f1:16:42:a7:24:ce:e6:fe:
                    7a:97:ff:22:c7:6f:ea:9f:1a:b1:65:91:59:00:23:
                    67:d6:dd:55:2a:13:fb:6a:fa:b0:a4:2d:2a:1a:15:
                    1c:dc:17:da:f4:0a:8b:1e:44:db:33:f5:2b:18:ed:
                    74:39:61:6c:89:2a:4c:75:70:3e:3f:ee:94:9b:d5:
                    49:5a:14:83:d0:83:0d:44:35:06:bf:18:b0:c1:d7:
                    b1:92:9d:78:01:a7:31:a3:d2:1d:ff:ed:96:08:5a:
                    b3:b8:47:26:12:b3:5e:71:0f:78:2b:55:4f:74:65:
                    10:13:6a:0d:60:18:1a:40:0d:4c:f2:83:5a:35:84:
                    ae:19:81:58:49:56:00:f0:ba:a4:23:56:6a:35:45:
                    b1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E4:04:15:C6:78:C0:69:38:F2:05:5C:3A:EF:AD:9E:8B:16:46:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/f3b94909-4a1a-378f-8207-e0c0e8315af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.8.0/24
                  66.35.15.0/24
                  207.32.193.0-207.32.195.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:39:51:7b:ef:d1:a6:77:36:06:18:c6:be:bc:37:65:7b:64:
         61:fb:df:27:7d:47:ce:0f:b8:60:63:ae:de:17:25:0e:49:46:
         1c:1c:ca:76:c1:15:a2:8c:2b:b9:5b:b8:70:a9:84:fc:95:d7:
         c8:6a:0b:c1:2c:11:46:4c:c5:ea:5c:b0:6e:c8:92:32:4e:4a:
         0f:fe:8a:cd:e0:be:7b:9f:b8:d8:fb:13:27:5c:5b:01:d2:5f:
         88:8a:f8:09:58:91:e7:56:36:ea:26:a8:2a:b2:5a:42:71:6b:
         74:5e:03:2d:cf:35:a0:9d:cd:15:5d:13:76:24:36:85:af:48:
         8f:84:84:ed:23:79:b0:55:c4:13:34:ef:dc:2b:49:dd:f8:58:
         eb:f1:29:eb:1e:11:67:bc:60:6e:3f:4b:59:a7:e6:97:1e:54:
         54:33:81:1e:53:e6:8b:57:6d:6c:82:b8:c5:f7:30:82:d4:a3:
         00:f5:7c:c3:f3:cb:de:15:5f:70:90:5e:6e:c3:94:5c:d8:9c:
         b6:e4:0c:5f:26:97:69:95:9f:b7:64:7b:7f:89:87:5d:09:79:
         da:c2:42:3d:f6:31:ca:36:2e:dc:45:6c:8a:a1:8d:d3:36:c2:
         17:81:fa:d1:7e:8d:02:32:c6:64:44:cf:5d:ab:d2:3d:24:50:
         90:2b:e4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:11:49 2026 by rpki-client