Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/fcbf0cbf-1e0a-30d2-a697-9b3e110c0f02.roa
File:                     fcbf0cbf-1e0a-30d2-a697-9b3e110c0f02.roa (raw, json)
Hash identifier:          zGMamlpeTXxPsqDjW7HXUwkETiRwaqDYMdMtvZFHnCA=
Subject key identifier:   6A:EA:CA:52:F1:6E:B6:FD:D8:CB:11:1F:5A:52:48:BD:B8:29:5C:81
Certificate issuer:       /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Certificate serial:       010D0C9F4328584DE41B6223B080CD3B5FD1FB80
Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/fcbf0cbf-1e0a-30d2-a697-9b3e110c0f02.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     10794
IP address blocks:        199.43.72.0/21 maxlen: 21
                          199.43.72.0/24 maxlen: 24
                          199.43.73.0/24 maxlen: 24
                          199.43.74.0/24 maxlen: 24
                          199.43.75.0/24 maxlen: 24
                          199.43.76.0/24 maxlen: 24
                          199.43.77.0/24 maxlen: 24
                          199.43.78.0/24 maxlen: 24
                          199.43.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:62:23:b0:80:cd:3b:5f:d1:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=75ce230f-d62b-491f-a7d9-ca7fef7bd3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:51:21:17:03:da:64:a5:01:8d:6d:63:38:73:
                    5c:41:ed:b0:73:c4:14:42:ae:e6:eb:78:56:2e:08:
                    6f:3d:90:0f:0a:2d:ea:12:c6:76:05:e1:cd:fa:ca:
                    1e:4b:8a:c4:38:e2:a5:b3:05:5a:8e:ef:3e:8d:9f:
                    d5:e2:9b:bd:ed:f8:5a:2c:31:47:85:75:7d:88:f5:
                    fd:19:45:b2:73:17:03:8b:81:96:70:b6:8a:89:fa:
                    47:29:33:c1:04:7a:d8:ea:33:ec:16:75:19:0c:da:
                    69:04:39:fe:33:9f:62:4b:f2:0c:c6:45:fc:70:7f:
                    66:4e:d7:69:5b:c5:41:8e:db:ec:0a:42:26:e7:61:
                    ec:b0:7a:c3:a3:65:bf:d5:1d:97:aa:67:65:d7:b8:
                    3e:4c:e2:0d:05:08:96:a2:32:cf:dc:ec:f8:9b:95:
                    30:f9:21:5d:14:1f:4e:06:e0:d6:84:02:ca:54:2d:
                    68:8f:30:78:d5:60:ad:04:6a:22:4d:3b:8c:58:0e:
                    7e:97:ec:66:cb:a5:e2:91:1c:8c:8c:0d:d2:8f:92:
                    67:e5:b5:20:1e:83:3b:93:75:28:e6:50:6f:d1:7d:
                    be:89:93:ac:1a:24:5b:2b:a2:67:66:47:76:35:4a:
                    76:45:fa:8c:48:36:11:0d:e9:91:9d:8c:e7:03:7a:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EA:CA:52:F1:6E:B6:FD:D8:CB:11:1F:5A:52:48:BD:B8:29:5C:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/fcbf0cbf-1e0a-30d2-a697-9b3e110c0f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.43.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:35:7e:70:03:b0:58:54:af:60:e9:05:cf:f3:37:8e:34:3a:
         ef:52:a8:ba:77:85:de:85:08:86:ae:ff:08:82:7a:6c:5c:4e:
         1b:98:cc:1c:93:38:1a:e0:70:37:0d:19:48:b7:0c:f7:58:a9:
         73:7d:48:f1:02:81:d0:ce:10:73:65:02:e5:cb:09:fd:3a:24:
         d7:7b:50:d6:1a:71:92:a5:e1:db:7d:27:14:d7:f9:f1:b1:f1:
         f0:4d:5c:51:57:41:74:47:ac:28:ef:2f:ab:aa:55:97:f8:bf:
         0e:0f:86:49:61:be:f6:08:48:e6:da:0b:77:9b:81:39:f4:a0:
         66:0a:6a:cd:37:ce:42:9d:bf:47:65:3b:ad:03:2f:f1:f9:c2:
         0c:d0:75:f3:3e:b2:fc:b4:be:49:20:d5:76:3a:08:2f:67:83:
         06:8c:f1:fa:1b:9d:e1:27:96:22:6b:ce:2f:f9:70:d4:e0:76:
         35:e1:46:39:02:0a:cd:b6:d9:4f:c2:6d:51:26:f3:5f:8a:9b:
         80:b6:a8:0e:b7:96:41:b8:45:d3:fc:e6:d7:c8:80:4d:74:a0:
         54:43:d7:e5:4f:e5:e0:b9:2d:59:d6:df:ab:c2:72:48:a9:df:
         33:fb:53:b1:fb:65:fe:c0:96:08:7c:42:c6:53:62:c5:ad:c6:
         3d:c3:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 20:03:03 2026 by rpki-client