Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/fc0409f3-adef-3ec3-9987-c23073f68536.roa
File:                     fc0409f3-adef-3ec3-9987-c23073f68536.roa (raw, json)
Hash identifier:          JfbhrZc7NRKoojQg/3dwmV0OKR5k8nH56hn0Ex49/qY=
Subject key identifier:   D6:39:4E:B0:0C:F7:2E:37:23:4B:32:9A:EF:16:EF:0E:A2:52:E7:65
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584DD78B271E90E2FCBB11D2D040
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/fc0409f3-adef-3ec3-9987-c23073f68536.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     205111
IP address blocks:        169.148.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:27:1e:90:e2:fc:bb:11:d2:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=fa29778a-94d7-4199-aa8c-9101bfe7a297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ef:48:a7:69:d0:ae:1d:69:fb:8c:66:37:a7:
                    75:4e:92:1b:ba:ba:4b:2b:e3:e3:4c:09:99:8c:2b:
                    c1:e7:80:41:5c:22:da:9a:fe:e6:90:2a:f6:da:e0:
                    0e:fd:99:76:8e:1a:78:b7:c2:37:e0:92:9f:5b:c2:
                    04:74:fd:ab:a0:c2:ff:59:c4:78:12:03:c1:64:69:
                    35:b1:74:7e:a6:7d:3d:7c:db:c9:04:7d:09:87:70:
                    28:e7:e6:04:72:fc:2d:7b:39:bd:8a:2f:e8:5f:3a:
                    f1:1e:ef:ee:d5:14:f4:07:d6:dc:f5:36:88:12:f6:
                    9a:e7:8f:c3:50:9e:a1:0c:e9:5a:59:28:11:8c:a8:
                    55:70:ff:0d:2a:a8:57:78:f2:d5:2d:d0:e1:4a:64:
                    81:f4:be:b2:fd:e3:cb:9f:74:7b:97:2d:10:16:f9:
                    74:79:c6:85:fe:29:96:7c:a8:54:31:8b:e7:36:c5:
                    df:29:17:0d:b1:66:6e:95:9d:e2:ab:c3:e2:98:6c:
                    7c:9e:85:db:be:dd:a6:6c:7c:95:20:1d:79:74:16:
                    4e:af:76:67:ae:07:86:40:3e:67:7e:9b:07:56:6f:
                    84:3a:57:55:a0:73:68:37:7f:00:3d:ae:e5:5a:78:
                    f7:02:43:14:97:85:66:91:19:69:b0:83:f4:9d:7d:
                    b0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:39:4E:B0:0C:F7:2E:37:23:4B:32:9A:EF:16:EF:0E:A2:52:E7:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/fc0409f3-adef-3ec3-9987-c23073f68536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.148.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:fd:e5:b4:1a:bc:fd:10:72:d5:be:f6:d3:a4:81:da:d2:11:
         58:04:9b:e8:22:42:bf:69:14:c2:c4:eb:2c:1e:7c:0f:78:7f:
         f1:86:1c:78:29:e9:65:b7:12:33:ed:c8:9d:c3:af:96:92:52:
         30:3f:95:e6:07:0e:43:f6:93:72:08:7c:45:e2:1c:ce:08:a2:
         65:37:e4:ff:8c:2c:a4:a7:8d:93:9a:40:e9:3b:a8:9f:4b:d3:
         92:d0:f3:89:6d:88:8d:9a:e9:c8:ea:5e:32:29:f1:04:c3:e5:
         e7:ff:d5:7f:10:0d:ae:b4:d8:87:21:65:bf:b5:77:5d:08:e0:
         55:2e:14:f5:3c:30:9b:1e:9e:bf:75:2a:c2:fa:1b:aa:c1:1e:
         17:23:43:09:b9:9f:28:4c:a0:3e:17:60:03:41:25:4d:5c:81:
         1d:8c:b5:2f:82:c6:4a:58:f7:bd:67:1e:65:78:83:48:a7:37:
         8f:c6:9c:f6:15:a2:a3:8b:51:3a:bf:b3:4c:8c:02:ba:30:0b:
         29:1d:8f:7b:ad:e3:5b:13:ae:5f:c6:c7:74:ce:28:72:2f:cf:
         53:f3:88:bc:6c:b2:33:56:f2:b4:84:11:88:d3:22:ad:4e:5e:
         fb:91:85:85:58:eb:d5:13:66:36:7c:01:b7:9c:1b:9f:3e:db:
         a1:98:0a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:15:10 2026 by rpki-client