Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/6c495a1c-7021-370f-8b19-6d7340d2a280.roa
File:                     6c495a1c-7021-370f-8b19-6d7340d2a280.roa (raw, json)
Hash identifier:          D6tPkzS0EhrPp0YD2zpFaIxMA5iW9/cICQYwhhVe+R0=
Subject key identifier:   42:4A:7D:8F:46:B1:ED:BF:A8:BC:0C:BF:D5:A3:CD:A6:6F:9F:34:49
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584DF210AAAE4087B2499D4F2780
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/6c495a1c-7021-370f-8b19-6d7340d2a280.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     63360
IP address blocks:        168.225.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:aa:ae:40:87:b2:49:9d:4f:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=5eb4c70f-d51c-4d69-b0a3-f8e21c8fc7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f3:c8:e5:59:bb:ee:9a:9f:fc:ff:a3:56:85:
                    c9:81:38:06:44:4f:f6:21:f8:ba:c2:a6:66:6e:1c:
                    ef:ce:5f:a3:fd:52:db:4e:40:8f:83:ce:96:4d:a9:
                    3b:eb:03:9b:2e:1f:55:5f:5e:a1:d5:20:5c:db:05:
                    31:7e:e9:fe:89:53:bd:f2:72:f6:b6:ab:6c:76:d6:
                    39:47:a7:be:84:f3:27:9c:fe:84:2a:da:c3:f4:f4:
                    cc:57:dc:f4:54:26:37:6c:0e:d4:f0:ea:42:dd:40:
                    8e:be:75:70:75:5a:2f:e4:8d:fd:ed:90:ad:03:b5:
                    e4:3f:3c:e6:cc:a5:3e:0b:ad:07:9c:31:93:e1:2d:
                    96:8d:f6:e1:03:5d:ee:b0:97:cd:13:34:50:4f:40:
                    cd:fa:5c:e4:fa:2e:0a:3a:4b:8e:57:f4:3d:8f:99:
                    fe:1f:07:3a:9c:b4:1d:fb:55:3f:ed:fa:2c:32:10:
                    0b:e6:f8:41:2e:be:e1:38:d9:7c:ea:9a:d3:b1:ee:
                    b6:67:b0:be:e0:aa:08:bd:c1:b2:e3:8c:5d:a7:1a:
                    ca:07:1f:e1:9c:4e:39:f4:3e:44:43:fc:c5:c5:f6:
                    1b:ae:68:68:3a:00:53:ba:ad:da:bc:d7:68:c1:41:
                    b9:3b:49:22:bc:bb:1a:b1:0e:2f:3a:7b:a4:54:39:
                    a8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4A:7D:8F:46:B1:ED:BF:A8:BC:0C:BF:D5:A3:CD:A6:6F:9F:34:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/6c495a1c-7021-370f-8b19-6d7340d2a280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a3:09:34:2b:5e:3a:05:47:04:32:9e:81:f2:0c:a1:c4:33:
         af:27:68:e8:84:d1:78:70:b0:6b:ca:9a:31:b5:fb:bf:8a:46:
         86:83:e3:ed:a2:14:88:fb:20:bd:c2:b3:f0:8c:c3:2c:6c:2d:
         2b:a1:f3:96:0d:9a:0c:7e:24:dc:db:96:f0:db:4a:c2:11:7b:
         65:2e:0f:27:d5:ab:c8:38:32:41:8b:6b:34:67:f4:93:a7:0f:
         fe:19:28:08:1b:22:7c:2f:bf:a0:82:8c:d8:d8:c3:35:3b:00:
         3d:8c:b7:61:fc:b8:39:4e:9b:00:b8:88:0d:07:5a:6c:c3:78:
         ab:ef:8b:03:32:79:08:ee:09:3f:12:e2:d5:c2:b0:1d:4f:7e:
         b6:4d:a7:9a:b5:bf:35:a7:3d:f8:21:2c:8d:d4:27:93:12:38:
         c6:28:f2:b9:1d:02:6d:59:b1:25:3f:1d:c8:69:a9:c3:16:5f:
         02:9a:2c:53:f0:0e:c6:96:a2:74:8a:54:bf:27:26:6d:4a:5c:
         a2:62:6b:f8:8e:5a:50:6a:9c:8e:7f:3e:b6:de:67:4b:86:6c:
         7b:e3:8c:01:d3:11:06:78:e3:65:d2:b7:e4:c4:ff:0e:ea:34:
         57:e1:f6:89:f0:1e:48:af:ca:28:e7:c5:9e:5c:47:e1:72:6d:
         6c:a6:76:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:22:11 2026 by rpki-client