Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/7f8810bc-9def-3533-a080-430f3a692f64.roa
File:                     7f8810bc-9def-3533-a080-430f3a692f64.roa (raw, json)
Hash identifier:          aV7JKA6ypeSL2eHSFfUTFOgfUuTfcfrtbiQBK/Uz5lo=
Subject key identifier:   F2:EB:70:F5:63:6E:04:8D:DB:93:E9:1D:7E:89:21:2F:D8:D0:50:70
Certificate issuer:       /CN=fbe3f91d-911a-4397-956a-9925c68f0a94
Certificate serial:       010D0C9F4328584F7E7DB020DFA471B210DE8200
Authority key identifier: BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/7f8810bc-9def-3533-a080-430f3a692f64.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     397151
IP address blocks:        66.175.240.0/20 maxlen: 24
                          198.47.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:b0:20:df:a4:71:b2:10:de:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbe3f91d-911a-4397-956a-9925c68f0a94
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=37b705f1-0c5f-4dab-b507-2f6db800eea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:d5:ab:06:a6:3d:d5:cf:26:64:d3:05:78:
                    fa:af:5f:51:0f:da:8e:a4:42:ce:7e:ad:e0:96:7e:
                    ae:e8:13:65:64:ab:f2:1d:44:f2:f0:a2:23:fb:ad:
                    d0:66:ff:23:93:ad:29:83:40:81:c3:3d:10:e4:c1:
                    8b:7f:34:ce:c3:01:56:e3:d6:8f:5e:43:9d:0f:a9:
                    78:cc:43:68:88:47:1f:ea:22:ee:92:9b:d8:95:a6:
                    40:08:02:ae:6d:cc:d2:f4:f0:ca:b9:5e:80:0d:5d:
                    23:60:7c:72:91:8a:98:31:b8:53:31:a4:9c:92:1b:
                    69:81:ae:2e:3d:42:fe:14:19:29:48:cc:a4:60:ed:
                    52:aa:c2:a4:f8:ff:66:4f:d4:3d:f6:3b:69:a1:e4:
                    8b:ef:97:04:3b:d1:60:c3:a0:64:8b:f8:a0:30:0d:
                    6a:90:10:8e:fb:a8:fc:56:9c:0f:72:65:0d:6c:82:
                    04:29:a5:9c:c6:a5:b4:15:f4:d0:2e:e5:13:9f:5c:
                    3d:86:d0:b3:fd:1e:ca:ae:38:fe:a3:d6:9b:93:cd:
                    91:a8:0d:41:fc:57:ae:e1:26:e6:bb:c4:1b:f4:3c:
                    3f:c3:56:f6:b9:d0:00:5b:a5:fe:db:01:ff:40:63:
                    cf:2e:60:3b:aa:57:7c:ec:9f:ba:f2:0f:d8:27:37:
                    1f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EB:70:F5:63:6E:04:8D:DB:93:E9:1D:7E:89:21:2F:D8:D0:50:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/7f8810bc-9def-3533-a080-430f3a692f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94/fbe3f91d-911a-4397-956a-9925c68f0a94.crl

            X509v3 Authority Key Identifier:
                keyid:BF:95:AD:3B:A8:B6:DE:7B:6C:D5:C1:FE:F5:02:A7:24:EF:C6:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fbe3f91d-911a-4397-956a-9925c68f0a94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.175.240.0/20
                  198.47.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:f9:6f:cc:03:b8:79:0b:05:8e:e9:91:97:d6:56:b4:1c:6e:
         99:b3:67:e6:4f:99:96:a6:89:a7:d6:de:04:97:48:44:f6:9b:
         bb:16:07:fe:b8:6d:ea:25:0c:86:f1:6b:56:ea:1d:a6:82:d1:
         4b:25:ba:84:12:d2:f8:ac:46:b3:16:af:4c:db:3d:f6:b2:25:
         26:ec:6c:c4:9b:74:c3:e2:58:4e:fc:35:4e:6f:ae:c3:8d:21:
         12:ba:40:33:d1:42:f7:f5:f6:88:7d:36:61:8a:72:c3:cc:ed:
         f8:b6:0f:69:96:00:4e:06:0e:40:1a:6d:65:fa:9f:87:4b:75:
         fc:3c:3e:56:53:75:f6:3e:ca:35:2d:b8:e1:ec:da:a5:90:9c:
         c9:3a:05:22:73:8a:0e:fa:a4:f7:07:96:4e:e2:6f:d6:53:64:
         d6:a8:b8:71:f7:5e:f4:f4:87:10:d9:2c:e1:21:3d:d5:37:e5:
         ba:9b:a2:06:ec:1f:7a:25:11:51:a7:8a:00:f6:e5:28:ba:d3:
         7d:38:e5:42:10:14:cf:de:ad:72:a3:84:87:29:e7:e2:c3:76:
         83:02:36:93:77:8f:78:13:04:e8:49:ba:21:9e:77:f6:08:6d:
         47:e4:7c:5b:6e:88:67:22:3a:2e:3a:73:6c:5d:99:73:96:b5:
         7f:af:45:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 11:55:50 2026 by rpki-client