Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fdb3bebb-194e-31d2-952b-231efd51bd25.roa
File:                     fdb3bebb-194e-31d2-952b-231efd51bd25.roa (raw, json)
Hash identifier:          SgyMeE6+FHkrf78O0BOLFMzuLaK12g/YazAz5VPPdjk=
Subject key identifier:   F3:D9:5D:92:D6:23:23:B0:1E:A0:AB:E5:AC:32:C4:2A:6F:72:C3:E0
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584CCBA762C2CA2CA7AF1F37C6C0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fdb3bebb-194e-31d2-952b-231efd51bd25.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     393417
IP address blocks:        66.115.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:62:c2:ca:2c:a7:af:1f:37:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=8899435b-168a-4e46-ac60-c13b2b35a090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bc:aa:c6:14:55:c8:7d:a3:d0:b7:ab:2e:fe:
                    5f:89:1a:e6:82:fe:3e:f6:53:67:89:a2:db:91:9a:
                    77:09:09:d0:85:78:e7:f4:25:9b:ee:86:4a:f7:be:
                    39:90:23:d7:f2:89:3f:78:f5:f7:7b:91:42:09:92:
                    8e:8e:50:b3:4e:a9:09:53:48:5a:8f:71:6d:6e:8f:
                    ee:c0:0e:8e:d5:15:f9:31:b4:df:3d:0c:e8:19:13:
                    26:62:e0:2b:b6:24:ea:2b:90:27:79:b8:06:60:6a:
                    09:ad:b5:2d:9f:52:7d:5e:92:8d:98:a5:3d:6c:fd:
                    22:bc:5e:76:67:7f:23:b7:59:91:9d:29:e5:82:ae:
                    8f:02:04:bc:0f:d3:c7:0b:c0:6c:0d:32:00:0a:b1:
                    0c:d4:09:76:66:09:60:e5:ef:02:75:a3:c7:5d:30:
                    a5:1a:04:dc:5e:83:0e:eb:e1:ee:38:41:02:54:c8:
                    62:74:19:d4:39:2d:1c:c1:89:ba:81:2e:8b:35:d5:
                    cc:3f:44:9d:e1:0b:1f:d4:54:45:eb:49:9c:31:f5:
                    e9:a2:93:0a:10:40:70:5c:7a:e5:26:a1:4f:d3:d3:
                    6e:e2:2b:ea:94:b2:66:c5:1c:c4:b0:6d:8c:35:4b:
                    93:3f:f7:71:2e:1f:ae:32:b3:00:22:45:e3:b5:23:
                    9a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D9:5D:92:D6:23:23:B0:1E:A0:AB:E5:AC:32:C4:2A:6F:72:C3:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fdb3bebb-194e-31d2-952b-231efd51bd25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.115.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:b9:62:13:d7:46:4f:88:ce:fd:2d:c0:55:c4:33:26:b9:12:
         fd:c7:72:0c:0a:2d:08:79:69:05:9b:dd:f7:8e:5b:68:4b:ab:
         23:1b:33:1a:b1:24:58:0a:51:53:88:d0:83:4d:87:d2:f7:27:
         e4:31:e4:06:43:31:a0:1b:0b:03:b8:33:7f:6d:70:d6:37:b5:
         93:ff:62:3f:45:62:d1:20:74:c7:34:da:8f:d7:66:d1:78:32:
         fc:fb:e3:89:1c:77:27:47:e1:4a:6c:8f:32:fe:be:b4:24:a6:
         bb:0a:89:90:31:d1:52:ed:86:ff:e0:5e:39:7c:65:a2:64:78:
         4d:3b:1c:62:3f:0d:34:bd:0b:dc:fd:91:37:97:5f:d6:51:65:
         00:27:ef:ae:a9:47:d3:e3:6b:2d:63:b8:7a:63:44:81:c7:78:
         ce:bf:16:a3:0d:59:db:02:bf:91:f5:ef:c3:ff:79:70:f4:1a:
         b3:6f:81:c1:a2:6b:7f:67:17:63:41:aa:0d:62:f6:40:e5:f8:
         ad:3d:7d:1e:04:22:e4:53:68:1a:e3:81:fe:a7:56:d8:3d:5b:
         83:ac:da:d4:de:c5:18:13:aa:0f:54:76:98:6a:68:31:cb:d6:
         0e:bf:c2:47:fe:13:81:61:91:7c:14:bd:33:5c:21:1c:31:4a:
         ed:3d:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:55 2026 by rpki-client