Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/201f29d9-ab02-3513-8d42-c93a46d0e75e.roa
File:                     201f29d9-ab02-3513-8d42-c93a46d0e75e.roa (raw, json)
Hash identifier:          qaskJlPol5r6zgb8LslSqcixTdw7ZCdcp1FRajTRtXs=
Subject key identifier:   52:53:83:53:B2:30:D7:21:70:35:D1:10:46:58:1E:73:18:0A:63:AC
Certificate issuer:       /CN=fbe3f91d-911a-4397-956a-9925c68f0a94
Certificate serial:       010D0C9F4328584B99D78850BC0611B76CC3D460
Authority key identifier: BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/201f29d9-ab02-3513-8d42-c93a46d0e75e.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     19353
IP address blocks:        66.175.240.0/20 maxlen: 24
                          198.47.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:88:50:bc:06:11:b7:6c:c3:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbe3f91d-911a-4397-956a-9925c68f0a94
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=92430a04-2471-4234-8eb2-2be100f94240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0e:30:cf:98:a4:8d:30:97:ee:cc:ad:e4:e6:
                    08:56:ad:db:15:65:82:3a:c0:78:a4:9e:bc:d2:29:
                    71:b7:ef:e3:a0:52:2a:4e:e5:76:7f:b4:d7:e1:b9:
                    f1:9b:01:3c:8e:65:fa:19:13:8e:30:57:82:fb:ca:
                    83:f2:ee:ae:cb:1a:ea:a8:dc:79:9b:a3:7f:24:b0:
                    09:f2:b5:6c:c0:4b:aa:4b:7f:4c:63:46:db:c0:0e:
                    50:0d:b6:07:d5:a7:aa:e9:aa:c5:4d:f1:32:19:22:
                    44:0e:02:db:b1:1f:2c:80:1c:0e:d1:ac:b3:06:f1:
                    b7:48:ea:43:5c:bf:f0:8a:b0:e3:85:e7:ae:cb:6d:
                    e3:81:e0:76:1e:3c:44:aa:5a:b0:aa:e0:c7:72:4e:
                    77:32:ce:ac:1c:48:93:b4:b0:48:49:37:87:62:f4:
                    6c:51:4b:1f:c3:3f:1f:c4:bc:f4:b9:1f:df:28:9c:
                    24:77:f8:0b:d9:6e:54:1d:d9:59:93:aa:19:cf:29:
                    85:42:4b:6b:7c:a6:2c:0c:78:48:01:29:79:14:00:
                    f0:08:fa:95:4a:91:a2:42:27:74:8d:5e:65:55:4b:
                    0e:72:0e:4b:c6:0d:72:35:0a:1d:12:f0:86:91:70:
                    8c:0c:98:45:14:b4:6e:7e:96:89:c5:08:31:3c:16:
                    ba:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:53:83:53:B2:30:D7:21:70:35:D1:10:46:58:1E:73:18:0A:63:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/201f29d9-ab02-3513-8d42-c93a46d0e75e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.crl

            X509v3 Authority Key Identifier:
                keyid:BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.175.240.0/20
                  198.47.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c2:d0:9b:83:b3:62:e0:1e:5a:64:bd:b9:fe:cd:8b:88:22:
         b7:ee:26:3a:8d:82:8b:ff:54:b0:d6:fb:db:31:bd:3a:eb:80:
         81:21:9e:a5:29:5c:2b:01:9f:a5:cb:34:44:74:8d:ac:ef:66:
         a1:5f:a0:80:52:0a:49:31:2d:dc:5f:39:e8:88:33:14:1e:44:
         0e:e1:1b:9b:18:50:18:fa:0e:d2:61:aa:b8:00:30:6b:bd:da:
         65:de:ca:39:fd:55:d6:bd:87:96:af:80:86:81:ce:3d:cb:44:
         91:fd:32:0d:5f:c4:6c:3b:97:86:d4:29:52:51:95:08:35:36:
         9c:3f:e1:fe:16:78:9a:fd:a5:f3:64:77:22:f7:36:7a:18:41:
         d6:80:ec:e8:f6:fb:96:8a:3e:4f:c3:37:61:49:db:60:f1:1f:
         f5:8c:dc:39:e9:2e:86:bd:35:41:06:73:bd:c8:a0:86:9f:e3:
         9c:b7:a8:58:0d:4a:96:fc:4b:d1:67:3f:e4:5b:e5:61:e9:96:
         2c:5a:80:0a:3d:8a:49:7b:37:7a:ff:9a:23:22:66:8d:3a:7f:
         17:c3:96:8c:65:bf:76:92:ba:45:be:2e:4a:59:cc:c3:f5:c0:
         b2:9d:f8:2d:c8:6b:67:90:d2:78:05:51:1a:d7:bc:02:6c:f9:
         50:ab:da:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:03:37 2025 by rpki-client