Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/833f5f93-724a-3c22-a00b-700ea32b586a.roa
File:                     833f5f93-724a-3c22-a00b-700ea32b586a.roa (raw, json)
Hash identifier:          bmvw6sbiLJEp7QfFCH/BZtA3LROZ1DnaP+X1yaHoPqc=
Subject key identifier:   76:17:73:93:C2:F6:E4:BE:77:2F:E4:34:95:58:47:C0:91:5E:01:C5
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584E6C6F75BE3877D3FB9FE3CE40
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/833f5f93-724a-3c22-a00b-700ea32b586a.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     63360
IP address blocks:        168.225.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:75:be:38:77:d3:fb:9f:e3:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=4e449f9d-de24-4caa-9a95-3e45dc44e12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:40:c6:b2:c6:8c:86:d3:77:12:e8:78:5b:
                    6f:15:94:fa:6c:f3:02:f1:fb:3f:ff:d0:0b:57:37:
                    7e:47:ed:10:98:44:87:71:bb:dd:da:45:66:be:14:
                    73:0a:52:e2:67:88:20:be:b1:16:62:49:ef:46:e1:
                    69:51:e3:02:bd:90:4c:5f:10:e0:b5:2d:0c:e9:6b:
                    49:99:6a:4e:58:8d:43:c0:3b:66:09:94:f9:19:66:
                    a5:14:d7:6d:c2:eb:ad:20:1d:47:29:a6:08:86:61:
                    73:c9:2d:8d:4b:b2:86:08:ec:bd:a7:56:50:2a:f4:
                    14:b0:18:a8:2e:22:45:10:51:71:1d:9a:88:8d:e1:
                    b0:b1:d4:78:5a:fc:0b:27:39:91:e6:b9:7c:d0:e6:
                    b5:e7:e6:e7:65:13:19:2e:8f:aa:3d:b0:65:60:a8:
                    89:56:53:d1:f2:6e:a7:bc:4b:88:c9:ef:1b:8f:8f:
                    8d:7c:ae:c9:42:a7:a9:6b:82:4d:59:a3:6e:ff:6e:
                    ac:84:37:ff:f4:d2:36:36:7f:fe:6b:71:68:02:89:
                    38:1d:22:d5:d5:02:2b:03:12:e0:54:03:28:81:bb:
                    81:45:27:02:4a:04:c6:74:88:05:37:07:36:2b:45:
                    49:7d:f3:95:f5:cc:41:91:d6:e6:23:88:9b:19:83:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:17:73:93:C2:F6:E4:BE:77:2F:E4:34:95:58:47:C0:91:5E:01:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/833f5f93-724a-3c22-a00b-700ea32b586a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:06:fb:ee:c0:1d:c5:c6:fa:bc:74:ae:f0:b1:44:9b:69:f3:
         29:e2:4c:47:74:05:c7:26:46:07:65:f6:0b:62:50:bb:69:15:
         ce:63:3c:79:a3:b7:38:c8:2d:bd:38:4e:4a:33:17:36:84:7a:
         c5:61:e1:ba:26:3d:63:e3:a1:56:88:64:4c:62:d7:e7:49:57:
         19:ec:aa:b2:61:7a:50:6c:81:3e:74:05:a4:13:bd:6f:62:97:
         23:24:03:42:c5:dd:b7:39:11:69:b3:a7:62:8b:e1:87:03:cd:
         0b:10:a0:01:3e:dc:b1:14:bd:67:f4:82:ee:0b:f4:16:31:ea:
         fc:4c:58:7e:a2:e1:6e:31:a1:ec:dc:69:8a:13:cf:83:b1:7e:
         7f:25:c7:0a:18:83:76:ee:7e:c7:55:13:06:49:46:af:32:47:
         7c:86:d7:27:09:26:99:51:82:ec:b1:0c:09:fc:7b:be:0a:a5:
         a5:2b:2c:2f:8b:47:04:16:2b:03:ea:a4:df:b8:0e:a7:4d:c0:
         5a:23:ee:be:65:8d:b6:b9:b5:4b:f3:6b:f8:d8:1b:f5:9d:ef:
         e3:90:06:08:6f:79:ad:1b:c8:df:a3:da:66:4f:a4:74:d3:3a:
         38:33:3b:ab:8b:b1:9d:e4:00:f4:99:94:3e:09:ff:c5:d7:82:
         0c:22:7b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:49:50 2026 by rpki-client