Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04fcb3f4-e547-492a-88ea-d3794b274a03/7e6a97fc-dd74-32d7-81bf-c8308b40d2f7.roa
File:                     7e6a97fc-dd74-32d7-81bf-c8308b40d2f7.roa (raw, json)
Hash identifier:          pTDgSBa3zAlWwINk40EbB3gZOEjovBNq7tZ0ou+6fYU=
Subject key identifier:   43:0C:76:A2:73:A4:FD:40:C7:F6:42:BD:78:D3:BF:79:76:EF:E2:9D
Certificate issuer:       /CN=04fcb3f4-e547-492a-88ea-d3794b274a03
Certificate serial:       010D0C9F4328584F217DF89E47390EBDE076ABC0
Authority key identifier: 3C:23:36:46:37:89:7C:61:81:F4:E8:8B:67:D6:F2:23:DC:AB:88:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04fcb3f4-e547-492a-88ea-d3794b274a03.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04fcb3f4-e547-492a-88ea-d3794b274a03/7e6a97fc-dd74-32d7-81bf-c8308b40d2f7.roa
Signing time:             Thu 10 Sep 2026 17:30:56 +0000
ROA not before:           Thu 10 Sep 2026 17:30:56 +0000
ROA not after:            Wed 09 Dec 2026 18:06:50 +0000
asID:                     393892
IP address blocks:        65.111.32.0/20 maxlen: 24
                          69.161.36.0/23 maxlen: 24
                          69.161.38.0/24 maxlen: 24
                          69.161.48.0/20 maxlen: 24
                          74.206.32.0/21 maxlen: 24
                          161.13.176.0/20 maxlen: 24
                          192.119.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04fcb3f4-e547-492a-88ea-d3794b274a03/04fcb3f4-e547-492a-88ea-d3794b274a03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04fcb3f4-e547-492a-88ea-d3794b274a03/04fcb3f4-e547-492a-88ea-d3794b274a03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04fcb3f4-e547-492a-88ea-d3794b274a03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:21:7d:f8:9e:47:39:0e:bd:e0:76:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04fcb3f4-e547-492a-88ea-d3794b274a03
        Validity
            Not Before: Sep 10 17:30:56 2026 GMT
            Not After : Dec  9 18:06:50 2026 GMT
        Subject: CN=eb02c7f8-df14-4439-8805-a667de6c1fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:47:79:b8:6d:4f:bd:97:90:e3:b2:ae:7a:db:
                    0d:7c:cb:6b:02:b8:2f:0f:63:0f:44:c3:17:a3:07:
                    5e:64:b8:05:ac:fd:e4:92:dc:4c:cb:41:b7:db:78:
                    7f:0f:9f:d2:be:5e:ab:9b:f2:db:27:dc:1e:7b:20:
                    e0:c6:02:52:a0:ad:04:eb:81:86:40:00:ef:44:9a:
                    d2:1d:5c:1f:92:62:93:c5:a6:c3:e2:21:ac:7b:76:
                    d4:bb:23:ce:99:88:d5:fa:7e:a9:a5:fd:cb:63:9e:
                    ac:0f:16:04:11:a0:fd:a1:81:b6:d8:fc:ff:46:94:
                    d2:18:b5:81:8c:e0:24:d5:fa:0e:ce:74:70:b7:38:
                    30:b3:62:cd:19:d6:d9:71:38:18:d7:79:24:97:fb:
                    74:bb:b8:d6:da:b2:46:01:e7:3d:b8:f9:96:a3:2a:
                    47:d0:39:8a:6f:96:6c:90:f4:e5:50:27:86:62:f9:
                    8f:3d:d2:ac:56:26:63:7f:72:b1:14:4e:d1:e9:92:
                    f1:0b:f6:5e:56:ba:8f:5c:7d:27:bb:66:f6:8e:47:
                    14:f2:65:43:c1:62:f5:86:a3:75:0b:a9:be:8b:50:
                    c2:71:8b:ce:dd:1a:72:6e:de:82:70:66:f5:b3:4c:
                    f9:59:3b:09:0a:a4:ac:bb:75:cb:d5:7c:0c:47:11:
                    cc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0C:76:A2:73:A4:FD:40:C7:F6:42:BD:78:D3:BF:79:76:EF:E2:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04fcb3f4-e547-492a-88ea-d3794b274a03/7e6a97fc-dd74-32d7-81bf-c8308b40d2f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04fcb3f4-e547-492a-88ea-d3794b274a03/04fcb3f4-e547-492a-88ea-d3794b274a03.crl

            X509v3 Authority Key Identifier:
                keyid:3C:23:36:46:37:89:7C:61:81:F4:E8:8B:67:D6:F2:23:DC:AB:88:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/04fcb3f4-e547-492a-88ea-d3794b274a03.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.111.32.0/20
                  69.161.36.0-69.161.38.255
                  69.161.48.0/20
                  74.206.32.0/21
                  161.13.176.0/20
                  192.119.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:94:53:55:8e:0e:37:17:6b:7c:3a:49:b2:57:09:c7:16:e6:
         ac:d4:b7:65:3e:7d:a6:67:c7:ff:58:6a:22:1f:ea:39:85:d1:
         63:eb:3b:6c:83:a5:7e:43:95:01:f2:d7:cb:d0:c0:8b:86:1f:
         ef:47:be:4c:83:51:8e:fb:ff:42:32:09:37:42:ee:d0:55:c3:
         65:71:01:31:c8:76:3d:8b:6b:2b:8f:29:f9:4c:13:9c:d1:c2:
         5b:09:71:82:cb:08:37:30:21:ec:8c:29:78:a7:b3:30:56:6b:
         a1:42:66:24:07:2e:fd:05:5f:21:b4:d9:0f:74:40:3a:44:c9:
         fa:b3:8e:ba:4f:9a:90:18:5c:87:bc:85:ac:5b:6f:be:c9:a8:
         93:b0:e5:84:a4:61:1c:ea:c9:f0:9e:6d:2e:d3:3a:6b:cd:28:
         f1:be:6f:8c:fb:bd:9d:cf:14:1b:92:ef:81:a4:aa:0f:42:28:
         dd:1d:64:cd:0e:4c:de:e6:bf:ae:09:21:f3:4d:bd:80:31:97:
         67:cb:7a:58:45:c2:42:d0:4f:98:41:8d:9e:31:67:a6:e8:7d:
         9c:d2:95:f5:97:fe:de:4c:56:52:3b:c6:09:9a:66:bd:b0:1c:
         0e:23:92:71:a4:21:67:4c:a3:f4:77:30:62:9a:f0:90:58:7a:
         b5:62:b8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:35:21 2026 by rpki-client