Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa
File:                     3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa (raw, json)
Hash identifier:          /TWR8vZVP2bzNZhFKLfE5m52OYYGYlRn4CsOoeWYsjg=
Subject key identifier:   07:4C:AB:7D:5E:88:84:D2:FC:30:50:AF:E5:7B:35:CD:C6:2D:7F:35
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584F4973EE60F6079C6248357C40
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     26935
IP address blocks:        66.35.0.0/20 maxlen: 20
                          69.55.208.0/20 maxlen: 20
                          207.32.192.0/20 maxlen: 20
                          2607:f688::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ee:60:f6:07:9c:62:48:35:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=052e713b-131e-40b3-9cc4-a4b87415da76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:52:05:d1:a6:f4:cd:e8:7a:04:25:d4:b2:25:
                    a0:a1:6c:d0:99:6b:d2:fe:89:44:10:54:5c:a6:e5:
                    6c:26:58:42:f0:53:62:0e:a9:1e:0a:dc:5b:57:3d:
                    ee:09:30:b6:b1:9d:5c:7f:71:64:c1:87:45:e5:10:
                    3d:cc:d3:c6:43:5c:fe:88:8a:c2:4b:21:56:9d:38:
                    89:6b:04:d6:32:89:0d:f8:0d:8e:f6:2e:9b:dd:6d:
                    23:bf:2e:3d:e2:e3:93:a6:02:ff:4e:08:ba:25:f0:
                    22:01:c3:3e:b8:f7:0a:8c:a2:f9:6d:32:33:1e:dc:
                    a8:03:51:57:e3:25:15:6a:9f:a8:65:df:eb:b3:7a:
                    ec:5e:d7:1e:68:a8:75:7a:cc:8f:65:1c:96:ff:ea:
                    39:b2:52:e9:c7:88:67:58:8b:ba:f0:6d:70:3d:60:
                    ac:39:5c:96:6b:8f:17:13:51:29:1c:20:dd:22:1a:
                    fb:3c:04:5d:6d:ab:a6:4e:6b:02:b8:17:47:d7:55:
                    5d:9a:d5:a4:8c:db:40:4a:89:30:22:68:19:b4:11:
                    27:1c:4e:30:6b:6b:32:44:06:1a:92:a6:e6:79:c8:
                    5b:1a:34:35:f3:cc:eb:01:f5:be:32:39:f8:d5:15:
                    67:00:de:05:25:4d:87:18:1a:c6:1f:e4:d9:ea:6d:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4C:AB:7D:5E:88:84:D2:FC:30:50:AF:E5:7B:35:CD:C6:2D:7F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/3b8e841f-0a1e-356b-9390-bc2d61f1c40a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.0.0/20
                  69.55.208.0/20
                  207.32.192.0/20
                IPv6:
                  2607:f688::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:29:3e:24:d3:1f:28:4c:47:77:da:32:44:51:ed:06:3e:e9:
         34:c2:7f:c1:f7:6a:06:9c:f7:e5:c9:cf:c1:e8:51:d8:95:c8:
         8e:f7:79:34:93:e0:f5:cf:ad:64:f4:d0:76:9b:2b:3c:6e:6e:
         3a:fc:f3:c7:45:f0:a7:1a:c2:48:e9:e7:c8:f0:b4:c4:a8:da:
         d3:57:ca:09:64:43:d3:45:d8:91:2b:a4:7c:14:b1:41:59:31:
         cc:29:ee:22:6e:96:27:0b:81:5b:19:e2:0a:a7:37:c8:d1:b7:
         b3:1a:df:56:c8:17:b0:85:8e:ae:ad:7e:6a:3a:9b:4a:6e:6c:
         56:00:5b:e4:9b:6c:59:0a:07:15:c5:dd:c5:16:69:76:50:e7:
         35:c4:7d:5d:47:86:09:22:bb:1e:83:2f:cb:14:6a:0e:25:a7:
         56:c7:8d:3c:3a:50:c5:3c:c8:b1:27:1a:d5:3c:be:81:2f:17:
         1d:18:8b:d5:a6:a6:9f:f1:5f:5e:6f:fc:b7:b0:b2:0a:3e:9d:
         b5:27:72:29:1e:b6:f6:6d:eb:b0:ad:33:20:43:2f:68:25:82:
         fc:ba:68:02:36:0d:db:a8:87:52:b8:ce:62:75:06:42:35:67:
         38:e7:79:4e:b1:58:27:25:b4:c2:4b:07:74:93:7f:e3:f1:fc:
         f3:f1:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:11:34 2026 by rpki-client