Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/9f63994d-c0aa-3c6e-bc88-577f76d76a60.roa
File:                     9f63994d-c0aa-3c6e-bc88-577f76d76a60.roa (raw, json)
Hash identifier:          cWsZCMM3M5Ex+PFPhqQo8aG9NwdCIZIjGaBxcPgJyaI=
Subject key identifier:   1C:A1:84:50:0A:12:9E:D6:2A:E9:6C:83:E1:B0:D4:2C:E7:A8:AF:45
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F4328584F63F80F4AA336306893A98BE0
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/9f63994d-c0aa-3c6e-bc88-577f76d76a60.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     6315
IP address blocks:        68.69.160.0/20 maxlen: 20
                          166.70.0.0/16 maxlen: 16
                          198.60.22.0/24 maxlen: 24
                          198.60.80.0/22 maxlen: 22
                          198.60.84.0/24 maxlen: 24
                          198.60.104.0/22 maxlen: 22
                          198.60.108.0/23 maxlen: 23
                          198.60.110.0/24 maxlen: 24
                          198.60.113.0/24 maxlen: 24
                          198.60.114.0/24 maxlen: 24
                          198.207.196.0/24 maxlen: 24
                          199.104.120.0/21 maxlen: 21
                          204.107.178.0/24 maxlen: 24
                          204.228.128.0/19 maxlen: 19
                          207.135.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:0f:4a:a3:36:30:68:93:a9:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=fdb008c6-e678-423f-93d2-d4972bb44669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:57:dc:7e:54:ed:cf:43:8c:c5:29:51:a0:27:
                    63:d8:ab:f4:74:5b:9c:23:45:e8:f8:8f:6d:55:93:
                    a2:a6:a5:ab:66:e0:43:39:50:e5:ae:75:bf:c6:e3:
                    ca:e3:6c:29:3e:76:bc:c8:38:64:5e:29:79:ad:df:
                    74:6e:de:09:7e:f0:87:86:8d:2d:a3:a2:aa:51:dd:
                    09:9c:7c:00:c4:d3:47:d2:8a:47:fc:6d:1f:61:8a:
                    2a:18:8c:ad:33:1b:fa:bd:87:a7:7a:22:21:82:1b:
                    09:ac:66:d0:49:dc:d1:b7:85:80:4e:b9:a4:5d:28:
                    f0:c3:51:ef:ce:07:53:2e:f0:e5:fb:6a:e4:21:65:
                    4c:5c:91:e1:3e:cb:03:ca:22:25:52:84:49:68:ea:
                    a9:77:1a:ac:50:00:f9:63:3b:aa:8a:62:ff:51:19:
                    20:0f:74:db:57:2a:bf:b8:25:31:63:a5:3e:81:70:
                    bd:d9:2e:24:b4:d8:d7:dd:51:c5:db:f4:e7:2d:dd:
                    8f:23:2f:8d:33:b3:f8:7d:18:26:a0:bf:77:1a:5e:
                    3f:e4:30:c3:48:2b:1e:c5:ab:3c:61:23:3f:17:d2:
                    f8:1d:5e:31:21:21:ef:ce:72:46:09:4b:e9:fd:f5:
                    52:e1:f2:58:58:a4:46:31:31:8a:75:36:ab:7e:44:
                    a6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A1:84:50:0A:12:9E:D6:2A:E9:6C:83:E1:B0:D4:2C:E7:A8:AF:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/9f63994d-c0aa-3c6e-bc88-577f76d76a60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.160.0/20
                  166.70.0.0/16
                  198.60.22.0/24
                  198.60.80.0-198.60.84.255
                  198.60.104.0-198.60.110.255
                  198.60.113.0-198.60.114.255
                  198.207.196.0/24
                  199.104.120.0/21
                  204.107.178.0/24
                  204.228.128.0/19
                  207.135.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:7a:a5:59:6c:50:d2:35:7b:43:86:11:4b:34:08:5e:50:e7:
         ef:5e:f8:90:3f:67:4c:82:4f:4e:10:57:e1:04:15:b2:54:7a:
         5d:d4:5b:c9:89:91:2a:29:9c:3a:eb:89:e0:54:f7:a5:fe:62:
         dd:07:7e:0d:68:da:1f:c5:0d:84:a5:44:04:a7:e0:9a:e7:92:
         2f:06:ed:69:26:8b:32:7c:42:20:a1:3a:db:4a:78:2e:3a:b2:
         c4:65:7b:8d:0b:a2:8a:ad:4d:38:63:2d:44:43:13:ad:b6:d8:
         09:ac:ca:4d:24:72:3e:64:29:44:3f:f8:13:ce:73:01:ef:b6:
         21:a6:9e:58:0d:bf:13:22:a7:b1:24:de:55:d9:b7:54:28:15:
         4b:ef:88:04:bd:8c:e9:33:09:7d:77:54:81:4c:cb:79:11:60:
         2c:47:d4:21:14:e1:d1:58:3b:34:c2:52:6b:bf:aa:04:78:1a:
         3c:bd:cf:47:9f:90:68:31:d9:cf:e7:19:fc:7f:bc:ca:1e:68:
         73:fe:f5:02:d3:9f:c3:32:c2:8b:08:1a:04:17:45:90:c7:89:
         64:e9:9b:68:5e:e3:e6:35:f2:35:e3:f2:19:ed:9e:af:1c:ce:
         3e:55:67:a3:38:8f:49:ff:ff:b9:a2:54:3a:9b:1b:5b:06:bc:
         97:15:09:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:17:01 2026 by rpki-client