Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/3270940a-915c-31df-8234-b2625e2ac55e.roa
File:                     3270940a-915c-31df-8234-b2625e2ac55e.roa (raw, json)
Hash identifier:          iwclLTVjS7glCi5FiBJaZHZmK68QMrlbkqaARSCfbIA=
Subject key identifier:   AA:6B:9F:06:B0:52:62:4E:37:F7:75:E4:67:79:A5:80:67:B5:D0:3E
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584EF47C65A8E3761755BDBBB240
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/3270940a-915c-31df-8234-b2625e2ac55e.roa
Signing time:             Tue 25 Aug 2026 14:36:24 +0000
ROA not before:           Tue 25 Aug 2026 14:36:24 +0000
ROA not after:            Mon 23 Nov 2026 15:36:24 +0000
asID:                     31898
IP address blocks:        168.225.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:7c:65:a8:e3:76:17:55:bd:bb:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Aug 25 14:36:24 2026 GMT
            Not After : Nov 23 15:36:24 2026 GMT
        Subject: CN=93744bc6-eb6d-4707-86b0-9e62ab2aa9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:57:7f:b6:3c:6c:76:22:32:63:32:88:6e:4f:
                    8c:1b:c5:a2:8b:25:b5:18:81:97:41:91:c5:03:ed:
                    ac:d1:e7:f6:18:6d:8e:ea:ff:ac:8f:c9:d8:0b:0e:
                    33:86:b6:ac:a1:47:e4:3e:e7:30:ef:10:a2:eb:0a:
                    98:c2:ad:a9:1c:05:7e:d2:97:78:64:96:27:94:a3:
                    a6:26:14:fb:50:ce:8d:57:9e:89:d6:17:7f:64:81:
                    73:21:f6:38:87:dd:aa:d5:f0:0f:15:2f:8c:a8:99:
                    8b:7c:f0:1c:59:17:c9:b4:65:01:96:96:b1:1e:61:
                    8a:b7:ce:9e:24:a4:de:a1:8d:8f:a3:8f:35:cc:3d:
                    0a:0a:18:45:28:7b:74:96:94:ab:3b:8c:93:b0:fc:
                    84:65:35:df:ad:3d:18:9c:01:e6:93:70:ba:ed:f9:
                    97:c9:3a:9c:48:8b:18:1c:75:e7:98:ae:6e:ba:80:
                    a4:fd:32:a3:39:14:c4:06:54:38:da:64:88:2e:24:
                    c7:df:af:3b:6e:f0:a3:45:0c:3b:fb:87:f5:ae:2e:
                    f8:07:78:5a:cd:2f:84:49:f9:b1:95:65:96:33:c7:
                    d9:1e:5c:e9:80:6b:60:ac:31:95:e9:a8:ab:c8:ea:
                    21:6d:50:4a:34:1f:08:62:9e:31:e1:2d:27:e7:a9:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6B:9F:06:B0:52:62:4E:37:F7:75:E4:67:79:A5:80:67:B5:D0:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/3270940a-915c-31df-8234-b2625e2ac55e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d7:f0:e0:00:6d:6e:81:93:df:a3:e3:7c:20:d9:5a:47:4f:
         2a:1d:79:e2:cf:ce:5e:35:8b:4a:15:f0:9f:c3:83:79:17:e9:
         a9:72:10:d3:a9:68:99:5c:47:c8:76:58:df:5e:c0:7e:62:e5:
         df:d6:f2:84:91:f7:66:fe:0f:bc:7e:fa:93:96:e8:77:f9:f0:
         a8:05:4b:95:82:b1:51:a9:78:47:85:d0:27:2e:31:96:0b:9f:
         4d:65:ed:30:65:8b:e5:69:cf:dd:e4:9a:9d:31:df:da:42:c5:
         f1:0e:e5:ab:a0:e0:6c:de:d3:01:90:be:c6:99:cc:86:be:32:
         8f:7c:cb:c1:d9:5c:df:5a:96:33:54:6d:c9:b1:2f:93:ec:85:
         15:90:31:f0:d3:c6:ab:05:23:34:eb:9c:81:3e:27:25:7f:8e:
         d5:bf:17:2e:3b:a5:12:a9:8b:72:1e:50:a5:f8:d1:88:53:07:
         e8:d4:57:80:39:d4:5c:f3:aa:67:00:37:d6:ff:e0:a0:60:e1:
         30:92:c4:1e:27:26:10:b9:da:b3:9f:e6:fb:39:88:1a:b5:24:
         19:38:92:fb:eb:c0:95:c2:9b:05:6e:b5:87:3d:16:37:2d:0a:
         06:91:67:16:d0:46:b9:07:01:fe:63:c6:11:76:e4:92:19:2b:
         84:96:02:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:54:38 2026 by rpki-client