Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/fbfe8bb0-534c-3c74-b4c6-de2db235fe3c.roa
File:                     fbfe8bb0-534c-3c74-b4c6-de2db235fe3c.roa (raw, json)
Hash identifier:          gpGIlste8ZYXd00qWLm8ETwB5dJp/ifV5Ot7/vNofhY=
Subject key identifier:   94:EA:86:91:F1:56:29:D7:6E:13:1A:33:06:08:48:E1:9D:C8:D9:13
Certificate issuer:       /CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
Certificate serial:       010D0C9F4328584D3DFF99A0853A9FAC10C0008E
Authority key identifier: 4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/fbfe8bb0-534c-3c74-b4c6-de2db235fe3c.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     47869
IP address blocks:        96.47.5.0/24 maxlen: 24
                          96.47.6.0/24 maxlen: 24
                          96.47.8.0/24 maxlen: 24
                          96.47.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:99:a0:85:3a:9f:ac:10:c0:00:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=c404fd9a-71e9-463d-bc53-df3e23b13686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5c:dd:d8:1c:19:85:23:1d:e5:83:64:b3:5d:
                    d2:b2:9c:26:0e:bd:31:78:5a:f0:14:be:e8:0a:eb:
                    04:83:34:0a:2b:6d:0a:46:7a:b0:d4:aa:12:90:d5:
                    b8:13:28:e1:3c:88:4c:87:a8:ce:e8:b2:ef:af:1c:
                    ec:b9:0d:c8:e1:1a:dd:60:a1:68:92:8a:33:72:46:
                    15:0c:42:32:8f:0f:e0:88:c2:bd:60:7b:b9:c6:d2:
                    23:66:d2:f2:5f:97:2d:9f:ff:74:7b:76:b6:66:9b:
                    e3:75:82:57:a8:0a:85:cc:be:5d:db:b9:c6:83:4a:
                    34:a5:9e:dc:a4:88:48:9b:2b:f5:be:36:a8:18:e1:
                    21:c0:60:43:2b:5e:7e:66:3f:d9:5a:50:e1:31:17:
                    48:26:51:eb:d3:56:de:33:21:b0:45:8d:9e:8f:3a:
                    1f:3c:8c:12:d2:f1:fd:9b:30:01:33:d0:4a:b1:af:
                    03:76:37:13:b9:1a:29:22:1b:dd:d9:0c:58:21:7e:
                    f5:9d:c8:d4:04:5a:57:b7:9e:8d:62:0c:65:16:13:
                    2a:7e:41:17:d9:f8:05:90:17:bf:22:a6:36:a7:17:
                    34:ba:6f:97:b6:5a:24:d6:6f:5e:ec:62:91:32:de:
                    de:91:9c:ac:d2:9d:0d:ad:e6:d3:ae:e2:bf:9c:a4:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EA:86:91:F1:56:29:D7:6E:13:1A:33:06:08:48:E1:9D:C8:D9:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/fbfe8bb0-534c-3c74-b4c6-de2db235fe3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl

            X509v3 Authority Key Identifier:
                keyid:4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.5.0-96.47.6.255
                  96.47.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:92:c8:53:02:cb:0b:a6:de:a5:a2:a4:24:67:e8:e9:c7:82:
         c1:44:b4:a1:c0:b0:ed:ac:db:22:c4:67:02:b7:ed:0c:f2:3e:
         85:6f:f5:6e:4c:bf:cb:67:53:24:65:08:82:63:68:8c:b8:48:
         72:9f:4f:46:d7:29:f6:44:f8:38:c6:18:f1:8f:e5:6d:9f:69:
         89:e4:66:ee:f7:91:73:d3:67:03:6f:df:f1:33:60:5d:ff:fc:
         e0:5d:02:87:3d:b4:25:6d:b5:d1:eb:0a:61:1c:45:c3:0e:95:
         1d:3d:93:49:9a:63:2b:6c:39:52:8a:6a:27:e0:f1:55:22:fe:
         6e:90:07:67:e6:57:11:5b:98:1e:dd:b8:29:3f:32:5a:e8:36:
         ce:3c:7e:40:a4:4b:63:7a:76:87:91:20:00:f2:38:01:3e:51:
         94:82:1c:be:be:33:f9:bf:47:cb:f4:b6:19:c8:83:98:35:cd:
         4c:16:42:6c:5c:90:c2:5e:79:cb:77:c4:f3:7e:86:15:5f:2c:
         f8:e5:e8:c8:ac:c2:29:05:5d:cd:73:cc:53:80:b5:35:38:71:
         96:b5:8b:03:0e:f1:15:24:4d:6b:4b:d3:08:02:bf:aa:fb:44:
         ef:62:54:0f:b8:e0:df:f3:25:26:6e:3a:a9:36:f9:26:62:bd:
         48:d1:df:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:44:46 2026 by rpki-client