Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/17a44f09-9074-318d-b88d-e295ae84a626.roa
File:                     17a44f09-9074-318d-b88d-e295ae84a626.roa (raw, json)
Hash identifier:          yHymJCrm1JwYzmaRUuuo2/6QAQStHrhiU+Hjx6QzIzg=
Subject key identifier:   5A:98:0D:4F:56:C0:5F:71:1D:AF:A2:C9:EA:1A:68:6F:A3:E1:77:F7
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584B7EB51B622886BB79A6D08A00
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/17a44f09-9074-318d-b88d-e295ae84a626.roa
Signing time:             Sun 12 Oct 2025 07:44:28 +0000
ROA not before:           Sun 12 Oct 2025 07:44:28 +0000
ROA not after:            Sat 10 Jan 2026 08:44:28 +0000
asID:                     31898
IP address blocks:        168.225.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7e:b5:1b:62:28:86:bb:79:a6:d0:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Oct 12 07:44:28 2025 GMT
            Not After : Jan 10 08:44:28 2026 GMT
        Subject: CN=8a3203c3-ee4c-4a39-b934-d30cbc4c3df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:cc:09:b5:8b:68:42:8f:e0:4e:77:06:4b:
                    7e:c2:7b:69:c6:c5:f3:55:d9:c5:da:3f:ef:41:d1:
                    e3:3f:17:0f:2d:20:e1:81:6f:39:5c:90:7f:57:2d:
                    ee:36:e7:5c:3b:65:63:85:fc:bf:24:a1:02:96:b4:
                    87:e5:4d:21:c7:1f:8f:c4:ef:83:a1:f5:c6:c7:10:
                    25:f8:8f:ba:4d:8e:ca:0a:7a:a7:e2:fa:79:72:3b:
                    0c:a8:71:a5:53:06:e8:ca:aa:ba:06:f5:d5:1e:61:
                    46:0b:89:70:9e:04:19:ca:81:b7:f5:8e:54:26:58:
                    ea:e3:2e:a4:c8:cf:45:4f:e3:e1:93:93:da:d3:17:
                    d4:d2:02:13:32:77:77:7e:9f:23:64:bc:2e:ca:82:
                    b5:fd:79:c5:2e:1e:7f:b3:29:38:a9:c0:19:fc:22:
                    58:d0:57:e2:7d:e2:e3:c9:ea:da:45:82:bf:02:60:
                    0a:98:bd:88:7a:94:ef:cb:93:bc:0d:15:e5:c5:1a:
                    0f:df:3c:3f:35:ef:52:d4:49:26:26:03:ae:95:68:
                    15:c9:a2:b5:dc:ff:ba:f4:c5:f9:26:19:6d:87:30:
                    0e:6d:1e:6d:cb:ab:f9:74:c4:f5:a9:e6:06:04:45:
                    88:39:36:79:b5:0e:2c:9d:b7:5b:98:55:ed:44:80:
                    58:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:98:0D:4F:56:C0:5F:71:1D:AF:A2:C9:EA:1A:68:6F:A3:E1:77:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/17a44f09-9074-318d-b88d-e295ae84a626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c8:da:96:ba:c6:fd:b8:67:2f:18:03:ae:17:56:04:1e:62:
         ae:17:68:b1:2d:0b:80:94:b4:8a:bf:04:5a:b4:bf:25:32:ac:
         11:9c:c1:7d:01:42:0a:dd:44:65:f5:0b:f9:6e:da:8f:43:4a:
         14:a7:4f:31:50:7c:ac:d3:b7:dd:c0:8d:a4:c0:89:b0:dc:12:
         29:ad:62:f2:8a:aa:7e:09:b5:bf:a1:38:96:65:63:82:61:9a:
         ae:48:10:0c:f0:47:14:cc:27:be:b2:99:78:0b:fe:61:26:11:
         18:d4:49:79:8e:7e:b2:95:e4:ca:61:56:0e:d2:ea:72:3f:3a:
         d8:8d:4e:9b:53:f3:a2:7c:d4:90:29:40:98:8d:8d:3f:fe:a8:
         43:9c:93:a1:81:80:37:48:ff:a1:76:b5:93:e3:91:5e:95:57:
         fe:8f:e8:78:6f:b8:2e:52:b1:18:88:2a:d8:e7:55:9b:a8:37:
         6e:e0:41:81:48:8b:cd:0f:ef:d0:bd:d2:ad:1e:6f:0e:2e:8c:
         f5:0b:f9:cb:24:9c:9d:6a:7d:c5:2b:63:21:86:be:95:35:61:
         b0:9a:11:e8:69:68:26:f8:f7:be:e8:22:55:dd:ab:47:ca:0c:
         3f:a9:22:69:9c:00:36:4c:eb:e5:63:d5:77:45:d1:bd:99:97:
         1b:55:df:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:52:33 2025 by rpki-client