Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/7e71bebf-e17b-358c-ae88-c6b13a0c61ff.roa
File:                     7e71bebf-e17b-358c-ae88-c6b13a0c61ff.roa (raw, json)
Hash identifier:          mfoyNsEXwkGf8Wg5NXNxJMW2Krpfootzn13rYbNVzzc=
Subject key identifier:   2F:82:65:32:45:AC:11:7C:B5:D0:C4:7E:85:65:BD:0C:8E:8D:B7:92
Certificate issuer:       /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Certificate serial:       010D0C9F4328584EE4235DEE7BC859D8221B8B00
Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/7e71bebf-e17b-358c-ae88-c6b13a0c61ff.roa
Signing time:             Wed 19 Aug 2026 18:04:05 +0000
ROA not before:           Wed 19 Aug 2026 18:04:05 +0000
ROA not after:            Thu 16 May 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        168.62.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:5d:ee:7b:c8:59:d8:22:1b:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
        Validity
            Not Before: Aug 19 18:04:05 2026 GMT
            Not After : May 16 04:00:00 2030 GMT
        Subject: CN=5a28ac24-7b4f-4f36-9ae5-53711c3f2401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:de:34:ec:ea:3a:1d:25:d2:5a:07:78:66:09:
                    ca:32:0b:a5:b0:d9:97:f2:b1:1c:0a:35:f9:a6:5e:
                    41:f9:ac:c9:8a:b6:55:4e:75:22:60:5e:09:6e:b3:
                    11:b9:f8:3f:6a:4e:71:60:0d:45:5d:3a:61:4c:c7:
                    61:48:b9:41:b4:1c:3e:ea:51:67:c4:2f:93:ec:e8:
                    11:a6:59:13:a1:8f:11:4c:4c:39:e2:19:d2:1b:5b:
                    82:c9:95:fd:0d:3a:fa:79:a1:58:ed:1a:ed:37:a2:
                    21:fe:af:1b:ff:cd:2c:14:aa:74:90:e2:a9:34:76:
                    82:00:f5:61:7d:6f:0d:44:72:45:e2:a2:d8:d3:b6:
                    93:33:bb:dc:a1:53:93:f7:6c:3e:c0:b6:41:64:da:
                    c7:8a:45:4c:28:76:1a:4b:5f:e4:38:a5:8c:f4:a7:
                    84:9d:48:09:15:0b:38:ca:ef:be:67:29:fb:c4:ba:
                    c8:71:f7:39:5d:dd:6c:e5:d8:ae:d1:4f:41:40:79:
                    8b:42:2b:76:f8:53:cd:c3:ed:0e:7b:df:b9:97:6c:
                    ce:6c:ab:de:4d:77:c2:68:37:2b:12:48:b6:a6:59:
                    9c:a2:6c:55:3e:54:09:0b:ac:54:2e:3d:dc:3c:54:
                    61:27:80:b1:b2:bd:e0:cb:88:7d:96:40:f4:95:57:
                    78:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:82:65:32:45:AC:11:7C:B5:D0:C4:7E:85:65:BD:0C:8E:8D:B7:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/7e71bebf-e17b-358c-ae88-c6b13a0c61ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.62.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:dd:68:86:3e:e6:24:7f:04:91:dd:42:10:2f:a3:32:43:be:
         6f:6a:bf:27:28:07:ba:45:50:25:14:88:c6:a8:62:7a:1f:4d:
         e5:24:26:cc:35:ca:46:e5:05:08:ed:77:1c:4e:69:36:80:8b:
         3a:a4:8e:2b:a3:1b:ab:3a:61:f1:87:0d:d4:94:e8:b4:f0:68:
         65:d0:63:07:5e:f9:fd:21:c5:e2:4f:46:76:b4:d6:1e:f0:64:
         c6:8a:37:16:2b:b6:cc:53:9c:16:a8:75:a3:ce:89:cf:f8:36:
         dd:2a:4d:88:77:6a:8c:91:82:e2:a9:98:57:2f:ce:ad:35:64:
         e3:30:4c:77:f4:45:4b:4a:ab:06:ba:03:26:a0:dc:24:5b:1f:
         a0:0b:6b:51:98:34:9a:f1:b6:9c:fb:a1:a0:40:ca:27:ff:38:
         5a:3d:c7:f9:30:de:85:36:58:31:8c:cd:43:fa:ac:68:db:13:
         fe:39:46:dd:4c:2f:a5:4d:34:af:3a:6d:11:37:94:16:3b:ea:
         4b:e2:3d:79:fb:bc:80:db:54:c8:5b:e6:7a:89:7d:43:30:8b:
         33:8b:2a:a5:1d:3d:f4:08:ed:fb:83:1b:82:65:10:d1:92:64:
         46:91:ba:fa:dc:9e:43:04:a7:0e:d5:e2:67:95:9d:88:35:b9:
         ad:c6:58:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:47:20 2026 by rpki-client