Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbe8f637-0e63-3167-b35b-a05615dda846.roa
File:                     fbe8f637-0e63-3167-b35b-a05615dda846.roa (raw, json)
Hash identifier:          B0wAo9PQvNSMceYkGbSyq6sP+MtmxZ7VBGhvck5gIq4=
Subject key identifier:   F1:1C:18:DB:CE:07:A7:67:83:14:68:7D:B6:EA:C6:80:67:DD:47:BA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E0A6FF0056DDB0E0017309180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbe8f637-0e63-3167-b35b-a05615dda846.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     0
IP address blocks:        216.7.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:f0:05:6d:db:0e:00:17:30:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=309f55aa-9f0c-48a1-a006-2082f25834b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2d:ce:61:57:c5:77:1a:75:82:5a:cd:ab:17:
                    67:46:6a:23:20:4c:a7:9f:e4:7e:0a:83:9f:12:ee:
                    8a:c9:22:fc:52:97:83:c9:76:ef:03:83:77:8b:46:
                    19:ef:c8:c1:d1:aa:87:9e:40:58:b4:0b:7d:34:0e:
                    b6:f4:3d:30:8a:10:01:eb:03:58:2a:d5:0d:53:34:
                    3d:ab:35:2b:b9:d1:ff:a2:c2:ab:23:3a:d6:96:61:
                    1a:6c:a3:c9:c7:c2:98:c3:a6:d5:1c:04:95:21:ac:
                    4c:9e:3a:d2:ed:57:40:50:ba:27:3a:0c:7a:a5:3f:
                    e3:b8:6a:e7:46:7b:84:d0:92:07:f2:6f:cc:61:13:
                    f4:ba:e5:ab:b9:7a:0a:38:90:96:f6:21:2d:6b:95:
                    e6:cb:24:02:2a:35:df:0d:e4:65:90:d7:85:e2:8d:
                    d5:c3:e4:f8:c1:6d:06:fc:09:22:9f:9c:1c:94:60:
                    b8:77:41:63:a3:24:18:13:5e:1f:5c:fe:15:82:85:
                    6d:38:f6:56:b7:4e:09:d1:22:ae:c6:da:c4:6d:23:
                    be:2f:b0:bd:46:fe:d3:fc:da:9b:c6:b7:35:ae:a9:
                    69:41:c8:32:8f:22:43:77:5d:f8:07:c7:d5:01:94:
                    e2:9c:36:ed:bb:3d:6a:25:91:04:5b:73:61:ce:fd:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1C:18:DB:CE:07:A7:67:83:14:68:7D:B6:EA:C6:80:67:DD:47:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbe8f637-0e63-3167-b35b-a05615dda846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.7.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:44:05:c0:f6:c8:e4:aa:b9:92:fa:ca:84:ff:94:91:71:89:
         0a:ff:f0:70:ef:18:ef:e3:39:61:df:fe:25:49:05:a3:1b:9c:
         f1:cd:0f:69:bc:6e:0c:0b:e8:3b:db:78:2b:6b:a9:83:e2:ca:
         67:5c:48:b6:f9:e4:a5:1c:da:87:26:a9:85:e8:59:99:91:f3:
         67:f0:fb:60:07:60:a5:05:8c:84:2d:e7:66:28:33:f4:90:95:
         f9:23:ef:25:67:8b:fb:58:28:eb:f9:43:57:61:76:e0:37:30:
         9d:dd:28:c1:ca:ed:c5:cc:a6:1c:25:c0:53:6a:c2:05:34:db:
         88:46:47:c4:44:9a:b2:5c:17:28:e3:f9:51:86:8d:4a:0c:9c:
         be:ee:a9:93:a4:e2:3c:f3:ae:f1:59:c8:04:20:0a:36:f3:b3:
         aa:ae:b2:96:47:73:46:6b:ed:d5:2a:66:7c:d4:d6:05:39:71:
         b9:7e:0c:83:2c:79:83:0d:02:20:bd:04:c1:c4:89:03:15:55:
         cc:f3:79:20:ad:ef:66:49:16:70:1a:a8:8b:38:78:cc:ff:d8:
         6f:46:d8:a4:a6:74:0a:fd:a1:97:55:5c:d9:ed:47:4e:ba:3f:
         8f:4e:40:26:b3:40:bd:9a:d5:69:3a:1c:f5:80:85:c7:ea:7a:
         39:0f:08:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:41:27 2026 by rpki-client