Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/17a44f09-9074-318d-b88d-e295ae84a626.roa
File:                     17a44f09-9074-318d-b88d-e295ae84a626.roa (raw, json)
Hash identifier:          sIWPqYAi1mwaS58xnUUPxu3TiLwls81dapvhMJLlze0=
Subject key identifier:   A3:7C:BD:AE:C9:64:BF:DE:4F:79:92:97:A0:D4:AB:DD:BB:85:67:69
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584EC0A718A1757F0FF4EC3D4000
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/17a44f09-9074-318d-b88d-e295ae84a626.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        168.225.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:18:a1:75:7f:0f:f4:ec:3d:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=c62f8155-ae1e-4c73-8a3a-becd8ef73082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:2d:fd:6f:1c:c5:7d:e9:c9:33:5f:c7:8f:
                    18:99:b5:ab:9f:6b:e3:45:97:5f:a3:a5:c5:15:cd:
                    78:90:d9:07:98:7a:6a:d5:6c:cd:ef:05:e3:32:19:
                    1b:93:58:3b:4b:47:b1:4f:e0:90:51:3b:1a:ac:28:
                    c3:5d:04:a4:74:b9:3f:8b:36:42:ab:8b:9f:f0:57:
                    ad:46:ff:c7:2c:b4:a0:43:b4:72:0b:d4:cc:62:b6:
                    ea:6d:23:c1:5a:db:73:be:32:90:8e:01:dc:67:07:
                    e1:4f:05:7d:c1:41:4a:65:32:bb:93:75:2e:38:75:
                    d8:7f:84:82:8e:ed:31:7d:b6:31:34:3c:18:01:52:
                    24:a5:2a:48:e2:d7:5a:08:e5:f4:f4:84:2f:a5:94:
                    1f:b7:f7:3d:7e:ce:e9:9f:c5:4e:c9:fb:d0:2a:5f:
                    a7:4e:81:e5:40:b0:b5:43:fd:a5:3a:86:a0:be:37:
                    bd:88:a1:b9:f2:4c:ce:c4:f6:20:dc:d9:6f:60:0b:
                    60:83:5e:18:97:c7:07:ce:71:75:26:f9:5e:a0:5d:
                    34:08:8a:c1:63:8d:53:ef:95:05:52:d4:7c:75:d9:
                    61:22:4d:b2:88:a4:22:89:ca:a8:a9:f6:02:a2:7a:
                    fd:0f:7f:5a:ad:e3:90:9b:37:95:4f:9c:a3:92:eb:
                    b4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7C:BD:AE:C9:64:BF:DE:4F:79:92:97:A0:D4:AB:DD:BB:85:67:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/17a44f09-9074-318d-b88d-e295ae84a626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ce:73:53:de:56:fd:ab:6e:3b:c1:7d:01:5b:4d:cb:38:02:
         72:68:c9:5d:47:47:8a:b7:14:c0:4a:72:87:cd:a6:d0:84:b9:
         01:41:07:ff:4b:ce:74:56:e8:12:78:a7:8a:87:20:ac:08:a9:
         7b:aa:1e:f3:a3:37:8e:e6:64:de:32:22:1e:2a:cd:fd:9f:94:
         f2:0f:83:3c:b3:90:43:65:b4:cc:27:1a:34:87:3c:4b:4b:13:
         e6:8f:b8:97:39:71:b0:99:1e:3c:be:83:cf:e2:19:dc:ef:67:
         9f:d6:f0:83:6a:be:c4:e3:53:35:1e:ff:71:c1:28:e1:32:82:
         84:05:2f:03:f0:df:1e:d6:a6:ad:90:36:9d:3f:d0:23:f6:17:
         8f:70:e7:14:b2:d9:76:e4:33:4c:f1:ea:4c:ab:38:19:39:76:
         a0:c8:c4:69:a5:72:5e:63:c8:a8:8c:99:cd:be:45:17:0c:24:
         e3:f5:a3:65:2c:f8:4b:aa:da:f4:09:6f:e8:3a:f2:ba:9d:86:
         99:20:f3:29:dc:0e:7c:ac:11:bc:df:ba:7e:fa:ac:e7:3c:c8:
         53:ff:af:d9:3d:3d:04:19:5c:8a:54:f2:67:2a:1b:79:1a:ae:
         88:a6:ad:00:1c:d5:ff:ce:8d:13:aa:44:1a:f5:37:b2:7d:67:
         a3:85:cd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:56:36 2026 by rpki-client