Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/fbed4876-7519-30f0-92ed-4f017527a1f1.roa
File:                     fbed4876-7519-30f0-92ed-4f017527a1f1.roa (raw, json)
Hash identifier:          1eAq1hO30sLxE4mLcBxJDi1znkf8sJkYCiXfo0JWypw=
Subject key identifier:   44:42:C5:27:66:87:C0:58:7C:BD:A7:92:08:2F:5D:73:74:4A:DA:64
Certificate issuer:       /CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e
Certificate serial:       010D0C9F4328584DD4C0717DC2C517CA8BCF2240
Authority key identifier: 83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/fbed4876-7519-30f0-92ed-4f017527a1f1.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     399480
IP address blocks:        192.228.64.0/23 maxlen: 23
                          192.228.64.0/24 maxlen: 24
                          192.228.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:71:7d:c2:c5:17:ca:8b:cf:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b22117-c3b1-4f74-ad2a-0fcd10a2d78e
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=f0d8635a-a305-4b3b-bf8f-287fb4a028f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a0:3f:dd:d0:05:47:c7:32:ee:ab:f4:d2:fe:
                    cd:08:13:3a:8d:e8:03:ee:1a:85:fa:18:d2:45:2e:
                    22:f5:ba:71:b0:15:42:d7:94:62:18:fe:88:df:39:
                    b0:03:57:48:d0:2f:85:2c:87:f0:74:a7:82:78:4b:
                    ae:6b:fa:d1:0a:0c:07:25:7d:09:a5:84:cf:66:b8:
                    89:fe:87:9d:a6:c5:e1:a9:d1:39:4c:b3:9a:0f:83:
                    79:39:cd:16:59:83:7e:b3:d9:4c:d7:c5:e6:47:f8:
                    ef:54:89:c8:df:50:71:c6:66:58:f4:66:19:00:15:
                    61:e0:4c:c8:3a:95:b1:c6:89:e6:fe:2d:f8:67:30:
                    4e:b1:52:ac:98:c5:e2:e2:68:72:6a:02:88:7c:68:
                    e7:f9:03:31:d0:24:29:48:11:c9:c7:52:b8:75:b9:
                    ae:a7:26:38:52:cf:c1:f0:45:70:8d:cd:59:c9:7f:
                    fa:e2:98:e9:03:76:ec:33:5d:81:57:dd:ac:aa:1e:
                    eb:6a:31:36:56:dd:d6:13:7f:90:48:ab:10:5c:0c:
                    bf:5c:1a:89:4e:30:f5:fe:91:24:08:ed:39:10:61:
                    f9:30:89:36:0d:0e:f4:11:d1:ea:7d:18:5f:45:50:
                    21:f3:01:3b:45:e7:9f:82:ef:50:04:fc:1d:40:46:
                    4e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:42:C5:27:66:87:C0:58:7C:BD:A7:92:08:2F:5D:73:74:4A:DA:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/fbed4876-7519-30f0-92ed-4f017527a1f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.crl

            X509v3 Authority Key Identifier:
                keyid:83:5D:0C:12:AF:9E:28:EB:C1:EB:A0:71:82:EC:F4:3E:49:56:AF:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34b22117-c3b1-4f74-ad2a-0fcd10a2d78e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:dd:ed:2c:fc:54:27:fa:7d:e5:43:eb:05:e0:13:47:05:87:
         95:9c:64:6f:21:5a:98:f8:96:b2:36:8e:a8:f8:99:3d:de:32:
         0d:af:50:18:b4:39:39:5e:b5:10:f9:50:c6:5e:fc:76:1c:85:
         6d:79:7a:3f:f1:d3:9c:8e:21:31:b7:dd:c4:ec:63:48:79:9c:
         35:32:cb:92:70:f3:eb:ae:bc:52:38:15:71:19:d1:9e:1e:33:
         64:42:85:bd:bd:9c:00:41:73:12:a4:e5:25:ef:49:cc:1d:68:
         17:52:f4:0c:8c:fb:22:a0:e8:66:63:c7:16:f3:73:84:6d:d8:
         80:d2:61:56:88:d1:aa:ce:2e:a7:6d:f7:f5:4e:35:62:a4:18:
         19:58:80:3b:72:61:02:c7:8e:f6:ec:71:b2:da:ff:04:10:f6:
         5c:4a:c2:ed:2c:8a:d3:ae:05:92:8d:ee:31:e7:60:99:83:d5:
         e3:fc:e1:1e:22:2f:23:92:97:c0:2d:8a:d3:9b:e4:68:27:0b:
         d5:6c:00:af:c9:75:73:40:41:9c:0e:e2:c1:3f:c4:3d:d2:a0:
         0f:2a:d1:76:ed:44:65:e9:5d:ad:27:0d:2e:d8:db:43:4a:b6:
         92:46:76:63:ea:a3:0e:e9:f4:da:70:6a:b4:87:c6:17:17:70:
         50:50:78:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:23:06 2026 by rpki-client