Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/7f8810bc-9def-3533-a080-430f3a692f64.roa
File:                     7f8810bc-9def-3533-a080-430f3a692f64.roa (raw, json)
Hash identifier:          cD/SYZPUg1xNwuJx7fwPSoMDka94XIl4xXaRJHn6zuE=
Subject key identifier:   CD:76:25:C5:B2:75:F0:86:3D:15:56:3E:64:0E:A9:03:87:13:85:C7
Certificate issuer:       /CN=fbe3f91d-911a-4397-956a-9925c68f0a94
Certificate serial:       010D0C9F4328584AB91B8DBD4FE424927009C400
Authority key identifier: BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/7f8810bc-9def-3533-a080-430f3a692f64.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     397151
IP address blocks:        66.175.240.0/20 maxlen: 24
                          198.47.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:8d:bd:4f:e4:24:92:70:09:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbe3f91d-911a-4397-956a-9925c68f0a94
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=ef7c96ce-0aee-480f-9d47-892aa4092ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:66:04:03:8c:de:ba:2e:0b:04:2e:2b:d2:
                    fc:ad:7c:a6:30:4b:39:b1:ae:77:3c:79:87:49:bc:
                    3e:b8:da:b4:b1:95:89:d8:b1:ec:13:97:df:b4:35:
                    92:ab:08:d8:a6:aa:fe:86:81:b1:17:23:32:82:85:
                    f1:42:c5:5c:2a:6a:a1:7b:4a:6f:d1:b5:8d:89:bc:
                    92:dd:d0:31:54:c1:77:aa:26:fc:d3:0f:2c:b4:e2:
                    00:c0:f0:f6:f7:9c:54:b6:09:3b:0a:25:b9:cb:5b:
                    d5:ab:49:b0:c2:ba:b0:5e:f5:67:42:b9:ea:51:78:
                    90:f6:b8:eb:6e:13:b2:43:b0:21:ff:96:07:af:97:
                    43:c8:7e:a3:b2:e3:3a:7e:75:2a:23:c0:7e:a2:ad:
                    bd:4e:f3:6e:45:26:4e:85:91:bf:00:9a:1d:85:41:
                    59:08:1b:c8:cc:5a:03:e6:97:51:ba:50:7a:31:15:
                    b5:79:31:e4:21:f0:4f:f5:4b:43:e5:a4:a3:47:b7:
                    42:56:c7:67:be:8c:52:11:79:d8:f6:95:1b:85:c4:
                    ab:da:7c:22:0d:1f:e2:21:eb:a4:f2:91:26:43:9c:
                    f4:69:a1:a4:77:1b:5d:27:85:40:82:3f:df:46:66:
                    ec:c2:4d:ea:db:9a:b4:eb:92:3f:5a:8f:6d:9e:b8:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:76:25:C5:B2:75:F0:86:3D:15:56:3E:64:0E:A9:03:87:13:85:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/7f8810bc-9def-3533-a080-430f3a692f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.crl

            X509v3 Authority Key Identifier:
                keyid:BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.175.240.0/20
                  198.47.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:11:e7:11:fc:e8:06:80:5c:27:9d:77:30:23:f2:4f:39:cc:
         a2:55:61:cd:82:49:19:47:c6:0e:b8:ea:f1:00:d2:85:71:ee:
         05:68:68:05:dd:45:ca:1c:2e:40:95:d1:d2:d8:a8:2b:30:83:
         1a:27:0c:e6:c4:06:3b:0f:d6:f9:65:a5:79:b7:6f:8b:01:0e:
         11:e5:72:c7:3d:17:4d:13:b4:cf:28:69:7a:54:c2:83:6b:a1:
         16:76:0a:56:4a:06:21:de:57:1b:20:cf:4c:73:9a:bc:fd:f2:
         19:a7:51:9e:6b:3e:6a:7b:f4:29:ac:89:6a:9f:29:6e:54:d1:
         e7:04:b0:b4:17:9d:13:fa:30:c6:00:0b:d4:72:19:af:ee:18:
         65:4f:84:f4:cb:ad:c7:41:ae:d7:62:99:d4:d4:63:ae:03:88:
         ac:56:12:c1:44:18:96:e6:61:f4:a3:38:98:76:8a:29:88:29:
         eb:4f:43:49:7f:3a:b4:3f:24:a9:36:00:b5:b8:e3:92:8d:92:
         38:fe:cf:58:28:5f:46:23:b2:3a:37:cf:53:b6:1b:4c:cd:62:
         f6:ee:71:cc:ed:bb:b0:6d:40:d4:55:17:05:f7:5a:70:d4:a9:
         72:45:f2:6f:5a:0b:43:da:3d:d1:e5:f3:c2:ab:3b:84:fb:d4:
         22:05:06:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:18:21 2025 by rpki-client