Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/c1fd30ee-4c6f-3231-9b86-679ee5b3d71d.roa
File:                     c1fd30ee-4c6f-3231-9b86-679ee5b3d71d.roa (raw, json)
Hash identifier:          I3Q7s4gjcYXb26CxCtlz3gv9b5HHRpkHFtFw7h+/H7c=
Subject key identifier:   2F:05:34:90:C3:97:3B:96:36:BD:E2:20:C7:8C:9C:9C:62:6B:C6:D8
Certificate issuer:       /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
Certificate serial:       010D0C9F4328584D3337C1573CD4A17E1C494F00
Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/c1fd30ee-4c6f-3231-9b86-679ee5b3d71d.roa
Signing time:             Tue 17 Mar 2026 16:20:08 +0000
ROA not before:           Tue 17 Mar 2026 16:20:08 +0000
ROA not after:            Mon 15 Jun 2026 16:20:08 +0000
asID:                     6079
IP address blocks:        192.64.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:33:37:c1:57:3c:d4:a1:7e:1c:49:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23
        Validity
            Not Before: Mar 17 16:20:08 2026 GMT
            Not After : Jun 15 16:20:08 2026 GMT
        Subject: CN=41e0e29e-4b96-41c9-8ea2-e6d74c0e0e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d0:51:d6:44:7c:73:e1:56:51:91:d5:d8:be:
                    35:2e:b9:14:e6:9f:68:9d:fa:5a:7c:7a:80:62:c6:
                    a5:98:d9:b6:c7:43:90:65:2f:e0:9e:2b:42:0e:11:
                    56:82:8c:b5:87:63:70:bc:e0:f6:28:49:2f:0f:b1:
                    3c:0c:36:b6:a4:77:31:f6:b3:aa:30:7e:29:36:79:
                    58:ef:92:4d:50:94:c8:c0:0e:05:ff:d5:55:20:7f:
                    78:7a:39:e0:f7:dd:5e:18:89:b8:b6:cb:b7:47:76:
                    d7:e3:33:8b:59:9c:d0:0b:17:4d:9b:70:68:90:88:
                    7d:a6:50:1b:bc:5e:47:59:6e:ed:4c:a0:58:f8:fe:
                    7b:f9:02:5d:79:d4:7b:b5:0c:66:f5:a6:51:c5:dc:
                    30:b0:47:56:6f:a1:4e:53:e1:92:bf:18:a6:22:fb:
                    e6:6d:d0:5e:55:8d:c2:2c:e6:11:2c:07:3f:66:0f:
                    08:91:b2:a1:8b:fa:27:18:cb:69:81:12:07:47:27:
                    75:f8:29:21:57:e4:3e:cd:e1:99:9b:d9:ad:3c:fb:
                    86:7b:0a:7d:2f:7b:3e:01:58:65:c4:b6:11:5b:3e:
                    68:1a:45:86:d3:6f:38:8d:e3:ca:2d:0f:b3:81:81:
                    33:4e:a9:0f:3a:ca:36:f7:3c:fa:db:35:13:f4:0f:
                    84:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:05:34:90:C3:97:3B:96:36:BD:E2:20:C7:8C:9C:9C:62:6B:C6:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/c1fd30ee-4c6f-3231-9b86-679ee5b3d71d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl

            X509v3 Authority Key Identifier:
                keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:96:62:cb:e3:a1:43:fb:6d:2a:2a:9e:b2:a0:fe:3f:c9:18:
         58:ba:a3:eb:86:5b:29:43:76:7f:b5:a7:54:1e:14:d9:37:d7:
         37:20:62:77:8b:ad:04:c0:49:6a:0e:0a:7d:9e:d8:4b:1d:50:
         9b:76:5d:b2:00:ba:fa:15:69:da:c0:00:ae:ef:93:c3:00:18:
         4c:7d:f4:7d:80:05:5b:4e:3a:9f:13:bc:49:7b:7d:b4:7c:1d:
         0b:9b:f1:45:8d:33:fd:c0:26:b8:b8:d6:62:f5:56:04:fd:0d:
         ed:e6:1b:aa:a6:fa:a4:12:ea:3b:27:ee:10:bf:24:5f:f6:1c:
         48:53:1a:5d:44:21:0d:dc:54:26:0c:a1:29:1b:11:53:5f:e0:
         f6:71:49:a0:89:96:5a:53:3f:73:4b:06:58:a1:e6:33:7f:35:
         18:8b:71:3d:c6:30:53:f5:d2:29:40:2c:eb:ce:d8:0f:1a:98:
         93:18:a1:b4:73:61:05:3c:34:f5:b8:fa:63:49:fe:37:74:46:
         a8:ef:db:8a:58:39:af:61:a2:26:00:fa:e7:9c:20:09:08:b4:
         ef:c2:76:95:aa:e0:d2:20:2d:2c:b5:05:44:99:73:9d:a5:25:
         e1:82:e4:e8:d4:56:5d:c2:7c:4d:8d:70:4b:16:5d:ec:dc:46:
         0a:9d:01:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:57 2026 by rpki-client