Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/01d900ee-03cc-3a62-8985-3af3d67f0830.roa
File:                     01d900ee-03cc-3a62-8985-3af3d67f0830.roa (raw, json)
Hash identifier:          4i/4qvoLenL39Le0fs8TL19G4AFfcYimzK2hNLiDXK0=
Subject key identifier:   E6:67:B4:44:B2:9D:17:86:CD:55:E1:5E:78:89:BC:66:0E:C2:B2:D9
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584EE7BCCABCBB8C8682335A2FC0
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/01d900ee-03cc-3a62-8985-3af3d67f0830.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     63360
IP address blocks:        168.225.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:ca:bc:bb:8c:86:82:33:5a:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=bf378c9f-9d18-4ab1-bb15-717a170064d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:54:d2:ee:26:d2:f4:ac:1f:50:82:39:fb:a2:
                    2e:76:00:ec:2f:8d:a2:26:f2:57:2a:24:9b:0b:24:
                    09:67:98:a6:8c:8e:63:ee:c5:b8:a7:87:72:53:03:
                    00:e6:f1:b9:e7:1f:ee:74:cb:10:1a:7e:42:32:7f:
                    2d:72:bd:e6:bd:ec:b3:98:de:0a:8e:83:3c:49:94:
                    a8:5f:56:5c:95:94:47:a3:4d:8c:16:8f:d2:e1:9c:
                    56:a6:a6:7a:06:c1:ef:e8:61:d5:f9:67:c0:c4:46:
                    77:04:63:df:43:13:23:8d:4e:87:b4:b1:fa:29:00:
                    38:59:21:07:04:cc:b5:2b:7d:4f:8b:f4:07:b9:44:
                    88:04:92:34:b1:2c:28:e1:e3:ff:e4:1b:7f:6e:ba:
                    d0:7e:3d:34:39:49:78:63:05:a6:3f:99:27:10:ec:
                    65:a3:f3:07:5d:ff:b0:bc:04:9f:c6:da:df:f5:2a:
                    d2:f5:5f:12:20:0a:18:d9:ff:cf:9e:61:cc:52:62:
                    9f:1b:09:59:15:e3:84:f9:e3:5e:0c:8d:1b:0b:0a:
                    61:9b:78:48:c0:3b:8c:8d:a9:2c:7e:8b:9e:87:1b:
                    aa:76:de:0a:5a:58:50:f1:72:71:5d:4f:bb:c6:1a:
                    3f:77:07:0e:a6:7d:2a:8a:45:8a:51:41:e4:64:72:
                    c2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:67:B4:44:B2:9D:17:86:CD:55:E1:5E:78:89:BC:66:0E:C2:B2:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/01d900ee-03cc-3a62-8985-3af3d67f0830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:4c:19:bb:a4:5a:78:05:4f:21:cf:e0:94:1e:34:41:dd:06:
         48:26:58:5c:32:56:8a:56:c0:09:08:65:96:11:b7:44:36:18:
         ce:db:96:90:3b:0d:ce:18:66:82:a6:20:d0:81:e5:2b:80:42:
         6d:91:5d:c1:49:10:02:4d:4d:47:51:50:ca:06:86:e8:b6:26:
         02:99:04:7d:f8:0c:1f:a4:4c:f1:e1:c6:a6:c4:2d:e8:64:41:
         89:5f:5d:cb:a0:dd:fe:01:5a:ce:39:b4:05:ca:0f:ce:e5:4e:
         ee:dd:8a:c8:c4:16:93:81:ab:17:c0:01:a6:bd:0c:44:3c:ac:
         2c:86:02:77:a7:cf:9e:ce:d3:ae:9b:15:99:c8:a5:03:7f:38:
         f3:b2:30:0a:63:61:9b:f8:fe:1e:1e:32:a0:cc:dc:77:78:13:
         be:b2:cd:ba:c6:35:ab:54:af:24:16:6d:4a:a1:23:54:64:c2:
         41:4d:99:99:d1:eb:cf:30:f6:bb:51:de:71:82:a7:cc:50:d5:
         c9:42:b6:34:d5:7d:6b:5b:5e:dd:9a:54:91:48:02:40:5d:ac:
         4c:66:dd:fa:6a:37:4e:b4:0f:b9:48:7a:ae:ad:70:c7:75:12:
         36:a2:75:64:2d:14:cd:e3:ee:3e:37:06:90:fb:bf:d2:cb:b6:
         7d:d8:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 13:15:33 2026 by rpki-client