Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/d89f7ac0-6a03-33bb-b0bf-fc600c70d87b.roa
File:                     d89f7ac0-6a03-33bb-b0bf-fc600c70d87b.roa (raw, json)
Hash identifier:          8H9uh7bTlVOaJvl/cCJBXNX+vjhtJgntOAP2xSKlxUo=
Subject key identifier:   DE:E7:FE:86:87:6B:51:51:2A:5B:1B:CF:70:ED:4B:B3:7D:46:F4:5B
Certificate issuer:       /CN=fbeece25-87eb-4619-9af7-e2d6df16e5ca
Certificate serial:       010D0C9F4328584F1CC7AADC44B30DAF07022C80
Authority key identifier: 6B:D0:A0:DE:1C:96:06:80:A2:37:CA:49:47:A4:79:FF:07:FC:9A:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/d89f7ac0-6a03-33bb-b0bf-fc600c70d87b.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     8075
IP address blocks:        170.22.154.0/23 maxlen: 23
                          170.22.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/fbeece25-87eb-4619-9af7-e2d6df16e5ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/fbeece25-87eb-4619-9af7-e2d6df16e5ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:aa:dc:44:b3:0d:af:07:02:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbeece25-87eb-4619-9af7-e2d6df16e5ca
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=e5ac8cad-7eb4-4671-b553-19c896cafe78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:98:be:7e:7a:ee:93:e8:0d:ff:d7:ea:11:b1:
                    be:d9:67:a7:68:92:7d:d5:20:70:b1:ee:09:68:0f:
                    40:16:91:61:e8:5c:ac:ba:a5:3c:b9:d5:cb:c0:4c:
                    1d:14:d1:a9:2c:af:5a:50:41:d4:92:b2:a0:a3:83:
                    65:2d:23:43:6f:70:e3:78:e3:d9:4a:c9:39:32:b5:
                    3e:cf:d0:8e:43:40:3e:57:95:fd:a4:f7:22:a2:7a:
                    f2:94:74:f7:21:92:c4:11:18:33:be:a8:a9:bf:03:
                    0f:0b:8c:fd:e7:b1:8a:6e:df:04:87:db:05:fa:f0:
                    56:b6:9c:be:8a:a5:18:72:29:c4:35:c6:2c:90:67:
                    bd:c2:43:d9:e7:d2:40:af:e5:c6:62:dc:62:57:84:
                    e3:d2:7a:c2:8e:ab:08:a2:1e:ed:92:b3:5e:d8:7b:
                    23:f1:b3:de:16:bf:9e:ba:67:a9:4b:3d:7e:2b:94:
                    d6:31:af:ec:7a:c4:e4:59:cd:87:c4:c7:a4:32:d7:
                    f4:32:bb:f2:6b:b4:a0:bc:68:2e:dd:85:50:1a:4d:
                    86:dc:5e:f2:95:0f:22:b8:de:3f:79:b2:07:69:c3:
                    a1:63:29:99:e9:07:f4:ff:a2:31:00:39:64:79:d6:
                    fd:1d:03:57:72:1f:ba:10:0a:82:41:95:09:19:a2:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E7:FE:86:87:6B:51:51:2A:5B:1B:CF:70:ED:4B:B3:7D:46:F4:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/d89f7ac0-6a03-33bb-b0bf-fc600c70d87b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca/fbeece25-87eb-4619-9af7-e2d6df16e5ca.crl

            X509v3 Authority Key Identifier:
                keyid:6B:D0:A0:DE:1C:96:06:80:A2:37:CA:49:47:A4:79:FF:07:FC:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fbeece25-87eb-4619-9af7-e2d6df16e5ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.22.154.0-170.22.157.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:69:75:65:b0:1e:39:90:2f:15:6d:27:76:40:dd:08:ff:8d:
         71:65:3c:1e:6e:fa:ad:db:d7:a0:00:f5:29:17:3b:8e:30:1e:
         39:82:02:e7:b4:09:f5:13:75:30:57:95:10:75:40:34:74:15:
         3f:15:7f:f1:02:9c:70:d7:6e:99:2b:ec:08:90:34:ac:fd:84:
         51:f8:aa:7f:ce:58:49:6a:45:eb:f1:6a:23:fd:2e:a9:0a:80:
         21:aa:74:1d:e8:54:55:6f:a4:a8:85:dd:6b:eb:33:7a:91:ab:
         cd:01:02:eb:4f:a3:a0:9e:eb:32:27:51:05:a4:f8:15:82:f4:
         15:0c:4e:e8:62:62:07:e5:b9:8e:98:ee:3d:88:48:04:86:82:
         ea:d2:89:77:16:ea:4b:50:10:88:69:2e:09:30:7f:51:8b:13:
         d4:00:c4:e3:21:03:ea:32:60:73:7d:5d:f4:f3:32:02:c3:05:
         7e:5b:e1:69:a2:ae:ec:1f:39:a7:17:f9:40:62:d3:07:92:f9:
         24:dd:7c:56:9e:af:c4:2b:db:a7:a0:9e:e0:ed:87:f3:f0:97:
         66:7c:3e:68:00:02:01:d1:4a:26:5b:12:b6:16:cb:05:40:51:
         00:6e:c7:c5:0e:3a:02:f3:a7:3c:e4:5a:b4:a6:a8:a4:01:7a:
         63:2f:a0:c8
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE8cx6rcRLMNrwcCLIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmJlZWNlMjUtODdlYi00NjE5LTlhZjctZTJkNmRmMTZl
NWNhMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk
ZTVhYzhjYWQtN2ViNC00NjcxLWI1NTMtMTljODk2Y2FmZTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5i+fnruk+gN/9fqEbG+2WenaJJ91SBwse4J
aA9AFpFh6FysuqU8udXLwEwdFNGpLK9aUEHUkrKgo4NlLSNDb3DjeOPZSsk5MrU+
z9COQ0A+V5X9pPcionrylHT3IZLEERgzvqipvwMPC4z957GKbt8Eh9sF+vBWtpy+
iqUYcinENcYskGe9wkPZ59JAr+XGYtxiV4Tj0nrCjqsIoh7tkrNe2Hsj8bPeFr+e
umepSz1+K5TWMa/sesTkWc2HxMekMtf0Mrvya7SgvGgu3YVQGk2G3F7ylQ8iuN4/
ebIHacOhYymZ6Qf0/6IxADlkedb9HQNXch+6EAqCQZUJGaLPQQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFN7n/oaHa1FRKlsbz3DtS7N9RvRbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mYmVl
Y2UyNS04N2ViLTQ2MTktOWFmNy1lMmQ2ZGYxNmU1Y2EvZDg5ZjdhYzAtNmEwMy0z
M2JiLWIwYmYtZmM2MDBjNzBkODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZmJlZWNlMjUtODdlYi00NjE5LTlh
ZjctZTJkNmRmMTZlNWNhL2ZiZWVjZTI1LTg3ZWItNDYxOS05YWY3LWUyZDZkZjE2
ZTVjYS5jcmwwHwYDVR0jBBgwFoAUa9Cg3hyWBoCiN8pJR6R5/wf8msYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mYmVlY2UyNS04N2ViLTQ2MTktOWFmNy1lMmQ2
ZGYxNmU1Y2EuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGqFpoD
BAGqFpwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEATWl1ZbAeOZAvFW0ndkDdCP+NcWU8Hm76rdvXoAD1KRc7
jjAeOYIC57QJ9RN1MFeVEHVANHQVPxV/8QKccNdumSvsCJA0rP2EUfiqf85YSWpF
6/FqI/0uqQqAIap0HehUVW+kqIXda+szepGrzQEC60+joJ7rMidRBaT4FYL0FQxO
6GJiB+W5jpjuPYhIBIaC6tKJdxbqS1AQiGkuCTB/UYsT1ADE4yED6jJgc31d9PMy
AsMFflvhaaKu7B85pxf5QGLTB5L5JN18Vp6vxCvbp6Ce4O2H8/CXZnw+aAACAdFK
JlsSthbLBUBRAG7HxQ46AvOnPORatKaopAF6Yy+gyA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:52:30 2026 by rpki-client