Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa
File:                     ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa (raw, json)
Hash identifier:          funpXWaz6SPFASYl/4jDAAllKiUf5Hyiw9IJ6KFfBsU=
Subject key identifier:   F8:F6:7B:87:95:9A:A1:83:3B:83:BE:AA:E6:B5:D7:6A:C1:3A:C5:3A
Certificate issuer:       /CN=fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff
Certificate serial:       010D0C9F4328584F86DDA7ED7FC9907A924DF780
Authority key identifier: 35:65:B2:69:5E:FF:A6:97:15:1F:58:7B:B3:A5:0A:DE:04:BC:7F:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa
Signing time:             Sat 17 Oct 2026 01:00:13 +0000
ROA not before:           Sat 17 Oct 2026 01:00:13 +0000
ROA not after:            Fri 15 Jan 2027 02:00:13 +0000
asID:                     54381
IP address blocks:        66.180.72.0/21 maxlen: 24
                          199.122.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:dd:a7:ed:7f:c9:90:7a:92:4d:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff
        Validity
            Not Before: Oct 17 01:00:13 2026 GMT
            Not After : Jan 15 02:00:13 2027 GMT
        Subject: CN=eb0bc05d-90b9-4cde-8131-dafa5d0d342a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:72:5e:e8:52:cf:99:67:0c:68:24:47:ab:f7:
                    e5:77:da:50:0d:ec:b7:52:74:21:b6:35:79:e0:2c:
                    9a:f1:fc:4f:c9:fd:ed:27:d7:93:44:7c:ee:64:ac:
                    54:5e:6e:65:39:3a:fe:fa:ec:b5:83:cc:9a:e3:fe:
                    3c:32:3f:db:10:ac:90:f0:49:d5:3f:98:de:f9:87:
                    fa:f8:cc:8c:fa:76:d6:a0:00:9e:84:ed:99:fe:17:
                    cd:d9:3a:2e:1c:07:2a:f5:77:e2:a3:a1:65:ae:9c:
                    50:f8:31:cf:c9:68:59:5e:8a:fc:78:93:6e:d2:5e:
                    7c:46:01:bb:38:eb:d6:b7:af:0c:d8:d2:79:9c:f6:
                    66:46:c6:99:07:de:3e:31:77:f3:71:19:b4:b1:e1:
                    17:f6:40:90:92:9f:29:eb:ac:47:b0:73:2d:6b:6d:
                    ed:ad:43:e1:8b:81:da:e8:f2:13:f0:2c:8b:01:65:
                    c2:32:dc:64:cd:b2:b1:be:45:27:95:10:64:e9:4c:
                    a9:bf:f7:a5:f1:73:a5:f5:f0:9d:ad:41:c3:34:44:
                    36:f3:3b:f8:7b:87:e6:31:ae:db:b2:cd:1a:9e:80:
                    77:ba:2c:49:da:c5:42:c7:7a:bb:e7:20:39:e4:17:
                    a6:02:ee:a9:43:16:2a:72:b9:a4:e0:ae:c1:3d:f0:
                    02:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F6:7B:87:95:9A:A1:83:3B:83:BE:AA:E6:B5:D7:6A:C1:3A:C5:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ff45f6f9-8afa-3f21-a24f-2a68efd3bf57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.crl

            X509v3 Authority Key Identifier:
                keyid:35:65:B2:69:5E:FF:A6:97:15:1F:58:7B:B3:A5:0A:DE:04:BC:7F:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.72.0/21
                  199.122.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:47:27:9d:4c:80:c1:a5:1d:00:5c:83:da:41:80:23:29:e6:
         ad:74:e7:d8:d1:4c:b1:18:8e:be:22:10:07:cd:19:42:81:bd:
         f8:12:19:94:53:f6:66:38:ea:78:52:49:d4:81:ec:fc:69:6d:
         d0:6b:a0:d2:82:3b:e2:ac:d5:c1:22:a7:8c:3c:5c:8d:f5:9a:
         01:6b:7e:89:8c:d1:cd:13:c1:d0:ed:7d:26:d6:00:52:9a:c0:
         9f:08:5a:9a:75:28:9f:fb:0b:ba:13:d0:cc:54:2a:74:82:8c:
         83:bf:4f:c7:4b:9a:3d:b5:e2:ad:76:f1:ab:a6:d4:b1:b9:5c:
         cf:7c:61:03:59:62:2b:a3:fd:d3:44:78:fc:7e:60:24:90:68:
         1c:00:ae:d8:c7:9e:32:1f:82:b9:a5:34:37:22:72:0f:36:bc:
         97:cd:89:9b:31:40:44:d0:9b:d8:50:4e:47:32:50:0b:4b:28:
         96:4f:29:a5:25:e0:af:26:55:e9:1a:2c:5a:5f:ed:2c:3c:33:
         59:34:83:85:9d:77:f2:e6:36:06:92:75:8e:59:e0:e8:e4:33:
         98:95:f7:ba:69:66:46:e0:53:ac:b9:cf:7b:41:d4:34:99:30:
         f9:2c:47:56:8a:fd:23:75:84:a5:5f:b5:17:39:af:ec:e8:c0:
         5e:98:ac:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:38:01 2026 by rpki-client