Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/20d1212e-4550-3264-be13-ddc23d320d75.roa
File:                     20d1212e-4550-3264-be13-ddc23d320d75.roa (raw, json)
Hash identifier:          fUbBrxnCM2UtQdnAc3FtrkV9NBgHuSjvZk6cS1R3er0=
Subject key identifier:   DD:47:29:A9:3D:AE:90:D8:D6:67:41:93:C9:57:82:C5:FE:78:20:C2
Certificate issuer:       /CN=fab93855-2977-4ee8-a66b-a46aa3059782
Certificate serial:       010D0C9F4328584D0D42601360B15E7D67AA3A60
Authority key identifier: 30:F9:55:E2:F9:76:AE:70:1A:88:E1:00:7B:67:BB:5E:E4:46:D1:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/20d1212e-4550-3264-be13-ddc23d320d75.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     63355
IP address blocks:        74.120.111.0/24 maxlen: 24
                          142.202.44.0/24 maxlen: 24
                          208.79.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/fab93855-2977-4ee8-a66b-a46aa3059782.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/fab93855-2977-4ee8-a66b-a46aa3059782.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:60:13:60:b1:5e:7d:67:aa:3a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab93855-2977-4ee8-a66b-a46aa3059782
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=45dd8d82-fba2-44de-a638-e1085303a2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:2e:29:27:b9:c8:41:dc:63:5a:5e:ba:4c:
                    b3:83:07:ce:fd:a1:44:3c:2c:71:29:5b:19:fb:7b:
                    1b:fb:3b:35:45:a2:92:b7:df:d9:11:b6:13:f9:5d:
                    5b:24:1a:2b:6e:38:79:21:88:dd:f1:7d:4c:af:5b:
                    ab:ed:f6:15:92:6f:35:2f:12:97:66:e5:5c:60:b1:
                    d7:27:f4:20:3c:6f:14:fe:b7:2c:3f:54:34:53:02:
                    b4:53:c4:4a:d9:4b:1e:9b:34:1f:22:54:ae:67:46:
                    2e:14:cf:f5:9e:98:ee:30:69:27:76:9d:5e:9f:bc:
                    b9:ee:21:2c:bf:92:ab:c4:c1:c1:69:29:9d:80:6b:
                    f2:86:a6:7a:30:40:e2:31:4b:7d:b8:e9:c4:6e:64:
                    34:29:75:5c:1b:c2:e6:6f:c7:83:bd:cb:9a:98:4f:
                    d5:f8:48:43:52:04:61:ce:ba:57:6b:c2:04:23:a7:
                    85:a2:b6:1a:ba:55:16:14:34:f2:2a:4c:17:f9:3e:
                    54:57:65:7e:fb:57:76:db:d3:b9:d2:a9:14:ac:d3:
                    94:1d:0c:79:44:db:c1:1b:a7:4d:66:80:bd:62:a8:
                    88:dd:8e:8f:4d:1d:78:a2:ab:4d:48:13:ae:cf:52:
                    e9:87:c8:f7:a9:8d:e0:19:2c:2d:bb:b0:b6:db:c8:
                    25:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:47:29:A9:3D:AE:90:D8:D6:67:41:93:C9:57:82:C5:FE:78:20:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/20d1212e-4550-3264-be13-ddc23d320d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/fab93855-2977-4ee8-a66b-a46aa3059782.crl

            X509v3 Authority Key Identifier:
                keyid:30:F9:55:E2:F9:76:AE:70:1A:88:E1:00:7B:67:BB:5E:E4:46:D1:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.111.0/24
                  142.202.44.0/24
                  208.79.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:70:d0:28:2d:22:1f:79:3b:5d:fb:73:4f:d1:3a:08:3b:ad:
         77:c3:d0:9c:89:da:aa:c4:c3:8c:fc:d7:81:e6:1d:9b:b1:bf:
         b0:9b:95:23:ef:a2:00:2c:76:4c:af:80:06:b0:49:fb:d0:01:
         fb:fe:9a:73:6f:c8:48:48:dd:57:02:0e:b4:ed:7c:63:1d:20:
         73:3a:09:68:a0:9c:d7:ea:75:b0:bb:22:2a:e3:4c:be:c7:bb:
         15:bd:97:f0:c1:b0:29:ec:24:28:55:0c:56:3a:8d:45:4f:87:
         c9:86:d8:d2:cc:99:fd:ac:15:f9:a4:90:2a:13:a8:e0:ac:b1:
         2b:1e:e4:ff:ef:07:1a:05:fe:59:a8:82:58:eb:73:2b:21:9c:
         5b:01:0f:d5:0d:cd:a2:6a:03:8c:6f:a8:d9:f4:fc:d1:2e:f6:
         52:04:34:34:ad:05:fb:88:e1:c9:90:60:d4:b2:55:ff:e7:23:
         18:6f:bc:cd:50:05:33:54:6f:c1:ea:dc:19:f7:08:55:43:17:
         60:90:46:e8:b0:fa:9f:4a:0f:89:23:7c:c2:38:2f:85:c2:86:
         66:86:87:37:11:2b:a5:8e:1e:a7:85:3f:54:d8:07:1b:fe:15:
         17:56:4c:46:e9:6f:f6:1d:b0:ee:62:18:08:e7:50:bc:b6:c5:
         ad:b3:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 00:58:54 2026 by rpki-client