Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/d89f7ac0-6a03-33bb-b0bf-fc600c70d87b.roa
File:                     d89f7ac0-6a03-33bb-b0bf-fc600c70d87b.roa (raw, json)
Hash identifier:          wGc7eyrio12RbRWRCb44tVYES504k4EvkZEYDQi5cFs=
Subject key identifier:   D6:41:2A:06:3A:AC:94:4C:71:A2:16:83:65:48:E4:94:19:0B:BE:F8
Certificate issuer:       /CN=fbeece25-87eb-4619-9af7-e2d6df16e5ca
Certificate serial:       010D0C9F4328584AF95147DF9B67D2FB9AB01980
Authority key identifier: 6B:D0:A0:DE:1C:96:06:80:A2:37:CA:49:47:A4:79:FF:07:FC:9A:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/d89f7ac0-6a03-33bb-b0bf-fc600c70d87b.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     8075
IP address blocks:        170.22.154.0/23 maxlen: 23
                          170.22.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/fbeece25-87eb-4619-9af7-e2d6df16e5ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/fbeece25-87eb-4619-9af7-e2d6df16e5ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:47:df:9b:67:d2:fb:9a:b0:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbeece25-87eb-4619-9af7-e2d6df16e5ca
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=071bc005-a504-486e-be3e-ef5554c1d412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:38:72:32:6a:dd:37:d1:aa:01:1a:ce:7d:3b:
                    92:6a:16:fa:93:6a:dc:01:07:0b:b6:e5:0c:48:f5:
                    06:cd:b0:4f:45:33:04:ea:49:1a:65:e9:e3:82:e9:
                    19:83:5b:d3:ba:b9:6a:ea:76:e1:57:30:3d:4a:42:
                    12:41:be:80:32:5d:15:4d:89:18:f4:c7:89:84:d3:
                    2d:84:53:5e:63:be:75:92:df:17:71:16:fd:f2:2b:
                    88:03:77:32:b3:09:d2:7c:c2:94:54:8c:37:b6:91:
                    c5:30:12:8b:08:fb:1e:65:77:18:9c:e5:cf:b8:87:
                    17:db:48:c3:02:12:57:94:14:9f:c2:c8:f8:8c:d2:
                    87:c7:71:e8:cf:35:64:43:8a:66:4c:5e:83:f8:25:
                    6b:ec:e1:4c:f5:0a:54:14:52:cd:31:e3:38:bb:01:
                    10:29:36:f1:5a:e8:3d:c8:69:04:79:17:61:9f:cd:
                    37:d0:ff:e0:5e:8d:33:dd:94:b7:e6:90:ca:70:05:
                    d5:d2:bc:d1:5e:23:55:fa:e9:11:f7:43:a1:66:da:
                    c2:8c:8b:9c:5d:57:4a:6a:d4:c7:17:4e:f4:70:5b:
                    11:28:d8:79:31:8a:f5:f1:62:a0:37:ad:ca:38:47:
                    a4:40:08:8f:e3:e7:ae:f8:1f:3b:d7:3e:cd:22:57:
                    ff:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:41:2A:06:3A:AC:94:4C:71:A2:16:83:65:48:E4:94:19:0B:BE:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/d89f7ac0-6a03-33bb-b0bf-fc600c70d87b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/fbeece25-87eb-4619-9af7-e2d6df16e5ca.crl

            X509v3 Authority Key Identifier:
                keyid:6B:D0:A0:DE:1C:96:06:80:A2:37:CA:49:47:A4:79:FF:07:FC:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.22.154.0-170.22.157.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f0:45:62:e0:16:20:13:33:96:97:c6:bd:3a:2e:f2:ff:3d:
         5d:14:6f:b5:06:f5:be:55:24:1e:ef:9c:00:fe:21:a5:7a:8e:
         43:71:03:19:d8:19:d4:e0:da:67:42:8f:43:89:2b:bc:67:82:
         18:ad:f6:a9:5b:42:f9:6f:cc:3b:63:18:57:db:f4:5a:f6:1b:
         3a:51:e5:1e:59:08:1e:a1:43:44:fc:8b:5b:0d:be:d6:8b:c4:
         77:f8:f4:f7:b9:4d:88:14:c8:de:ca:0d:71:8a:6a:86:04:e3:
         fc:bb:85:39:10:37:5b:02:d2:14:92:6a:8f:68:91:31:90:d4:
         e0:ef:99:d0:3a:93:03:b3:3d:75:cc:a2:c0:2b:7d:1e:29:db:
         9b:e2:ef:71:cf:89:b7:9c:41:f4:40:75:eb:08:15:59:26:8e:
         ee:cd:b3:77:31:24:ff:8b:ab:20:b7:f8:40:f9:9b:ed:e2:e8:
         fe:d0:fe:05:51:1d:37:af:fd:25:de:32:f9:b9:96:d8:d8:f4:
         90:a3:06:36:3b:1f:9c:55:23:01:87:98:f2:ed:ff:f9:95:0a:
         84:86:93:15:e1:ea:52:ff:35:3b:17:31:a0:ac:15:09:7c:20:
         a5:4e:6e:42:d4:af:47:d9:47:2c:52:5f:7a:5a:86:fe:e6:57:
         5c:66:cf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 23:59:17 2025 by rpki-client