Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/da3393ae-5314-32d5-9f93-6336f62a4e00.roa
File:                     da3393ae-5314-32d5-9f93-6336f62a4e00.roa (raw, json)
Hash identifier:          EGFQoHZOO0rhA9kLMUH4OIZyBHEe5oBmKY6rkl5q1tI=
Subject key identifier:   B0:A6:1E:6F:8C:3D:5A:1D:59:50:16:F0:8B:F6:BE:FE:84:89:6E:3A
Certificate issuer:       /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
Certificate serial:       010D0C9F4328584F576824517CBDDB78AB0BC480
Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/da3393ae-5314-32d5-9f93-6336f62a4e00.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     6079
IP address blocks:        146.88.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:24:51:7c:bd:db:78:ab:0b:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=2de4bf69-0eae-4f42-a22a-5177ff75a5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:50:59:9c:7a:18:18:80:42:67:c1:6d:d2:57:
                    13:2f:67:9f:c4:e1:dc:2c:c0:a5:7f:1a:7b:07:41:
                    1f:b0:88:90:db:7e:e6:cc:c9:84:c8:4d:f3:86:1e:
                    0a:74:2e:d9:9d:a3:b6:96:0c:16:f1:06:49:c5:4a:
                    ec:b5:38:70:8a:ee:68:e9:1a:c0:5c:de:3b:27:a1:
                    a6:04:f0:02:b9:37:58:cb:08:e1:0e:ce:24:c3:35:
                    20:e4:aa:df:2d:9a:d8:5e:59:99:ee:d6:e8:e3:ec:
                    c8:ba:28:82:c5:5c:4c:cc:cc:4a:2c:20:a3:ef:b6:
                    8e:8f:01:cf:52:c4:1b:f1:33:c3:e1:3e:de:d7:c9:
                    34:ee:ac:92:4f:27:31:db:b6:eb:34:8e:a6:cb:89:
                    d8:d7:24:8b:4e:4a:5e:c9:55:4d:78:aa:dd:7e:b8:
                    71:4b:be:a8:bd:18:b1:cb:30:58:7a:5f:b3:91:79:
                    bd:fb:9a:ea:a7:23:ba:2f:5b:eb:57:88:84:db:39:
                    69:e8:5b:26:ed:80:f1:26:40:53:36:1a:3e:a2:25:
                    72:31:ed:b4:28:f1:ad:be:bf:dd:01:0e:bf:06:c0:
                    77:bb:01:9e:eb:dd:74:8f:57:37:fe:e6:3d:61:5d:
                    4e:8d:30:57:1b:3e:5c:a4:be:cb:30:0c:b9:09:23:
                    f8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A6:1E:6F:8C:3D:5A:1D:59:50:16:F0:8B:F6:BE:FE:84:89:6E:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/da3393ae-5314-32d5-9f93-6336f62a4e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl

            X509v3 Authority Key Identifier:
                keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.88.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8d:ba:e3:df:6a:6f:b6:5a:fb:e0:c3:a7:bc:e8:6f:9e:b8:
         ed:83:9a:b8:49:ee:dc:67:b2:f0:14:63:46:fa:2c:c3:d0:a6:
         5a:bf:b2:b8:42:1b:b1:4a:39:1b:31:62:49:61:02:20:ed:fe:
         ee:59:f8:51:e1:78:7b:56:48:0d:4d:50:cc:ee:5a:62:b5:ba:
         9e:de:6d:47:9a:eb:1c:eb:2e:8e:0e:f3:43:12:6a:f2:04:b9:
         72:62:a6:15:2b:e1:fc:ff:af:5a:9d:d5:22:14:25:8e:c8:eb:
         82:9b:07:eb:dd:ff:f3:e1:2d:f5:69:1c:eb:8a:43:3f:09:39:
         7b:7a:5f:5e:e7:d6:ea:29:f8:36:f4:a2:30:38:bb:e6:24:7d:
         5f:ea:32:2e:9d:f3:cc:5d:bc:79:3c:a7:fe:9a:7f:59:d0:f4:
         96:96:fe:79:7d:92:0b:38:ac:76:fc:40:31:19:21:0a:4e:96:
         ec:a6:6f:e3:27:ff:1d:b5:07:49:66:3c:f4:94:52:f7:a2:01:
         3a:0f:cc:ab:e2:f8:f5:c4:0c:6c:dd:22:39:64:0a:89:1b:59:
         7f:fb:2c:ae:a3:1b:f6:6a:13:51:9a:de:0c:6f:cf:d9:86:49:
         99:78:e6:54:db:5c:38:b3:cc:ea:c3:87:7b:0a:3d:e1:e0:48:
         6e:1c:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 06:26:17 2026 by rpki-client