Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/fbfe8bb0-534c-3c74-b4c6-de2db235fe3c.roa
File:                     fbfe8bb0-534c-3c74-b4c6-de2db235fe3c.roa (raw, json)
Hash identifier:          ieLjRZACs7bs/kR09Rqet5AeDnWt0aJC6nDCtoAf1MM=
Subject key identifier:   A1:4E:CE:71:BB:22:96:E0:6C:26:18:8E:95:14:C0:5B:EC:12:81:11
Certificate issuer:       /CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
Certificate serial:       010D0C9F4328584B7DECA630DDF424B2F8270C80
Authority key identifier: 4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/fbfe8bb0-534c-3c74-b4c6-de2db235fe3c.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     47869
IP address blocks:        96.47.5.0/24 maxlen: 24
                          96.47.6.0/24 maxlen: 24
                          96.47.8.0/24 maxlen: 24
                          96.47.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a6:30:dd:f4:24:b2:f8:27:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=1f69a8c6-111d-4dba-8d92-9ae1a12d4a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:ab:a7:0f:d9:5f:fe:69:d7:ef:ab:0f:0d:
                    a3:13:e7:79:78:6d:f2:b5:b5:76:26:3d:3d:60:0c:
                    b7:05:e1:00:a5:03:ef:08:db:d9:81:35:83:9f:3c:
                    ef:3b:ee:a6:68:4e:1a:83:f3:69:84:a7:cf:30:84:
                    9e:38:43:ba:1a:ac:87:db:43:d6:78:46:7a:e3:42:
                    fa:d1:9e:fc:53:a6:1a:3c:07:ef:a7:4f:84:0e:cb:
                    ff:e9:1b:2c:7a:0b:23:f9:f5:5f:5a:b4:8d:b3:4b:
                    cd:99:8e:89:62:b2:09:b5:22:2a:6d:5c:71:42:5d:
                    66:d5:44:9e:fd:ca:7e:7b:d7:83:17:80:8d:84:93:
                    a0:8b:cf:0d:93:70:34:a3:ff:6a:c9:d2:a5:1c:3b:
                    e5:dc:b4:1f:ab:75:de:1f:7b:12:31:d9:c4:83:b4:
                    04:b0:17:36:3c:9b:a6:26:12:7f:ae:99:02:f1:c7:
                    a7:d2:cd:14:01:c2:7d:1d:7c:ea:7c:7e:5a:b2:7d:
                    40:bd:40:32:4c:95:7d:27:91:a1:2f:9f:b7:09:96:
                    61:75:74:06:5e:eb:04:3e:4a:40:c2:ad:9e:6e:ac:
                    54:3c:ab:8a:90:df:cf:aa:48:41:b3:a7:27:6f:d4:
                    d3:c7:7b:c8:2e:a5:27:81:a5:c9:be:b3:7b:9b:dd:
                    00:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:CE:71:BB:22:96:E0:6C:26:18:8E:95:14:C0:5B:EC:12:81:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/fbfe8bb0-534c-3c74-b4c6-de2db235fe3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.crl

            X509v3 Authority Key Identifier:
                keyid:4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.5.0-96.47.6.255
                  96.47.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:00:f3:ee:f9:74:18:cf:e1:a2:ba:95:ee:2a:d1:78:3d:55:
         f3:6c:ab:7c:f8:d5:4f:3f:b2:66:88:47:8f:fb:76:ca:c7:bc:
         92:04:9f:54:95:3d:2c:33:c0:15:6a:16:48:06:e4:b6:8b:ce:
         80:9f:01:59:fd:24:9c:23:75:1e:85:f2:5d:a0:bb:b0:a4:aa:
         a5:61:4f:0e:55:52:1a:e3:35:4c:b5:e5:29:25:bb:d8:a9:25:
         51:8b:62:a3:e3:46:56:60:a0:ca:d6:16:9e:7f:78:47:01:54:
         5c:26:8d:c9:0e:24:7c:a0:6e:fb:06:a3:db:5d:cf:7f:60:fa:
         a3:3a:41:7a:8f:02:08:60:2d:0b:20:11:0d:c3:10:5f:99:3e:
         4e:d6:c5:e1:90:d3:9e:8c:da:62:1c:3f:b8:24:ed:a5:00:7a:
         17:f2:98:3e:ea:6a:45:ca:85:eb:cc:ad:86:17:75:29:e5:5b:
         64:fb:f7:dc:79:ea:d5:8d:13:c2:f9:fa:dd:07:e3:4e:a2:5f:
         f8:aa:61:76:47:fc:3e:53:c8:0f:7f:e6:c1:a7:80:d8:a4:f3:
         27:13:ec:81:0a:b7:0b:99:69:b4:bc:a7:ca:31:d6:96:1b:a0:
         9b:ca:29:ea:e6:11:29:a6:b4:a8:b7:02:9f:38:51:fc:37:3b:
         43:d3:81:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:20:09 2025 by rpki-client