Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/20d1212e-4550-3264-be13-ddc23d320d75.roa
File:                     20d1212e-4550-3264-be13-ddc23d320d75.roa (raw, json)
Hash identifier:          5CFoSIMrzLTHY6B3XDVzdBPkf/bTfkE85dlMhL6/C00=
Subject key identifier:   D4:E8:4D:04:A1:0C:49:D8:88:2A:25:A2:17:44:EC:F8:0A:0E:A9:E9
Certificate issuer:       /CN=fab93855-2977-4ee8-a66b-a46aa3059782
Certificate serial:       010D0C9F4328584F497536D6CF5A68A6634E1EC0
Authority key identifier: 30:F9:55:E2:F9:76:AE:70:1A:88:E1:00:7B:67:BB:5E:E4:46:D1:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/20d1212e-4550-3264-be13-ddc23d320d75.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     63355
IP address blocks:        74.120.111.0/24 maxlen: 24
                          142.202.44.0/24 maxlen: 24
                          208.79.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/fab93855-2977-4ee8-a66b-a46aa3059782.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/fab93855-2977-4ee8-a66b-a46aa3059782.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:36:d6:cf:5a:68:a6:63:4e:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab93855-2977-4ee8-a66b-a46aa3059782
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=18d29f1d-33a6-4134-9354-d2de1f271295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:37:a8:c5:7f:a3:f9:aa:40:f7:e1:c4:35:6e:
                    d2:ee:9b:c9:74:cd:d1:83:e9:5b:59:15:1a:06:33:
                    cd:df:6f:5a:96:f7:1a:c5:32:39:fa:f7:d4:0b:17:
                    64:df:cb:c1:5d:d1:da:d8:7a:86:2e:03:e7:47:ef:
                    81:48:0b:85:21:4d:1e:20:fc:e0:18:a1:08:42:85:
                    41:1f:79:60:74:4f:49:8b:90:7a:54:03:bb:a8:8f:
                    5c:07:ac:b9:e8:22:e8:f5:48:f2:e9:f9:23:11:3e:
                    1c:f3:56:d4:81:bb:23:e0:3b:55:bd:fe:61:8b:38:
                    87:88:63:5c:da:73:2a:9a:cd:52:a3:b1:56:a5:e0:
                    02:f6:2d:c2:d8:c4:62:bb:d0:50:33:18:d7:1f:40:
                    f0:65:e7:48:b7:97:81:ab:15:6e:2a:ec:4f:e5:37:
                    3c:7c:70:6d:a7:4d:34:23:7f:6d:7d:06:11:cf:2d:
                    b4:4d:9d:de:1d:40:ad:59:07:68:10:fa:35:d2:45:
                    72:7f:44:b0:45:77:3b:28:a5:dc:6d:c0:bd:a6:49:
                    1d:1d:38:c4:dd:11:a3:26:d5:b0:75:9b:05:9c:40:
                    8b:9b:32:6f:16:90:d1:6f:ff:df:fd:77:44:ec:93:
                    da:68:08:ce:fe:1a:af:b9:12:35:a8:cf:0d:6e:7b:
                    0a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E8:4D:04:A1:0C:49:D8:88:2A:25:A2:17:44:EC:F8:0A:0E:A9:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/20d1212e-4550-3264-be13-ddc23d320d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/fab93855-2977-4ee8-a66b-a46aa3059782.crl

            X509v3 Authority Key Identifier:
                keyid:30:F9:55:E2:F9:76:AE:70:1A:88:E1:00:7B:67:BB:5E:E4:46:D1:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.111.0/24
                  142.202.44.0/24
                  208.79.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:48:50:8f:5f:b0:a8:cc:2e:26:a4:0d:cb:d5:8e:4c:f0:
         e5:da:5a:80:10:60:6e:15:b1:48:e8:88:b3:2d:70:c0:85:cd:
         1f:5e:7d:3a:c7:7d:bd:2c:5b:94:fb:1e:17:ae:85:f5:72:b7:
         bd:f9:33:61:a4:ed:ea:c6:57:58:b6:6c:d9:39:c6:43:82:67:
         d4:66:54:13:7a:50:71:b9:3a:5c:d0:cf:f0:28:20:7b:37:ae:
         e5:2f:72:ef:83:09:49:b1:bd:4e:c8:4e:17:16:4f:70:21:80:
         a8:da:cc:e5:e8:d3:ad:79:82:8c:67:44:41:d1:3a:94:27:f3:
         31:0e:76:45:ec:97:54:f4:ae:40:39:6d:a0:9c:5f:74:35:3f:
         7c:06:e7:7f:cb:c0:dd:f0:93:af:2a:24:d8:e5:6a:83:d0:77:
         3e:20:67:67:93:da:b6:36:ec:64:fa:35:a5:41:80:85:75:58:
         e7:4f:af:e5:67:8f:7f:eb:00:fb:98:b8:4c:04:29:53:35:82:
         71:e4:c9:39:a4:14:6a:da:d5:53:2e:d5:c0:40:43:e4:b8:c8:
         8a:72:f1:2c:73:b1:58:2c:db:dd:c7:71:d1:0a:a2:08:77:d6:
         82:d7:61:36:c1:64:67:ff:f7:d0:bb:6b:72:ec:7c:a3:59:7a:
         b1:c9:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:04:37 2026 by rpki-client