Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/96fdadfb-ba18-3067-ab96-46533f828a9d.roa
File:                     96fdadfb-ba18-3067-ab96-46533f828a9d.roa (raw, json)
Hash identifier:          0liFnskm+VjLm+FaJ9GWUs3/4rWA0nyEabCzAhY+0Dw=
Subject key identifier:   51:88:96:9F:60:AD:36:70:BA:46:E9:59:53:D9:F0:55:2F:E1:62:57
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584EF44CCDDC8C8FBF5054308820
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/96fdadfb-ba18-3067-ab96-46533f828a9d.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     63360
IP address blocks:        168.225.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:cd:dc:8c:8f:bf:50:54:30:88:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=c772c031-f650-4297-b83f-58305e4ccf90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:cf:ef:70:48:ed:a8:f2:90:51:a8:4f:9c:
                    3a:bd:44:c6:d8:94:4b:35:2a:d5:e7:7b:4f:db:9e:
                    9f:41:9b:2b:26:34:3c:55:79:11:a8:cc:7c:c7:e7:
                    7a:91:54:68:09:78:2b:8c:b8:b1:18:75:9f:b4:8e:
                    0f:8f:3f:d8:b6:d0:8b:eb:51:63:fc:a8:d9:12:3f:
                    1e:fd:71:4a:73:e1:6e:b1:80:8f:74:cf:5c:9f:d5:
                    e0:2b:44:2d:f8:ab:62:df:24:b5:f5:23:c0:f7:a1:
                    cc:c4:63:08:15:7a:8e:04:73:ef:dc:e3:86:82:17:
                    03:75:83:7d:04:22:bb:40:16:c6:44:f2:62:f5:8d:
                    3b:83:ec:96:8d:a3:a5:04:d1:ce:8a:4e:31:4e:5a:
                    24:e8:06:9c:5b:86:f9:64:4c:dd:47:1a:4e:1e:ca:
                    2d:e0:1c:f9:d9:ae:f6:d7:8e:fc:6d:0d:7d:ab:7f:
                    54:88:a6:bc:dc:28:12:86:3f:a3:78:22:a3:9a:d9:
                    a4:2e:5e:40:72:73:ad:91:07:9e:b7:44:c6:f6:db:
                    30:9b:5d:17:dd:d6:62:49:8a:42:81:58:42:58:9a:
                    0a:2a:a2:3a:6a:6c:9e:ce:0b:a0:4d:62:e3:37:10:
                    1a:18:a4:79:97:d5:c0:f6:f8:30:89:9f:14:68:9c:
                    38:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:88:96:9F:60:AD:36:70:BA:46:E9:59:53:D9:F0:55:2F:E1:62:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/96fdadfb-ba18-3067-ab96-46533f828a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f2:f8:8e:8e:d0:35:52:66:80:49:de:0d:4a:f3:23:ab:42:
         2f:47:21:77:5f:75:8e:72:19:a9:4a:79:3b:05:0e:ad:68:42:
         b6:eb:f0:4b:36:67:1b:99:e5:79:16:02:a1:da:df:18:dd:47:
         63:c8:88:5e:10:6f:55:4e:9e:c0:f9:c2:ed:33:8e:d5:3e:02:
         52:be:58:6f:8c:a4:37:31:6e:fe:bc:7f:b7:54:c1:b0:d9:79:
         91:0e:8c:a7:ee:b0:98:41:9e:92:72:99:61:2c:db:ae:cf:f7:
         90:15:e2:e1:f3:d7:00:4d:19:32:41:27:6f:df:4f:f9:31:2e:
         7f:a0:e9:85:80:63:63:73:37:d2:50:8e:35:9d:f9:3d:b1:38:
         87:44:59:04:61:44:18:2b:17:4e:e8:e5:35:b0:46:6e:a8:2b:
         dd:fb:e8:79:8e:17:c7:26:af:69:e0:d9:5e:81:9c:8b:d0:81:
         56:05:d1:33:b3:16:23:5b:cc:f1:0f:cc:7f:40:43:4a:b5:fb:
         5a:20:67:14:cf:3d:58:15:b2:c2:ea:d2:3f:9c:fe:4b:19:df:
         ff:4e:eb:92:22:e2:45:d9:70:4f:0e:79:1a:0c:be:4d:6a:fd:
         4d:cf:41:36:15:4b:97:0c:8a:bc:67:9b:f1:49:88:a3:f9:63:
         88:ce:7f:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TM3cjI+/UFQwiCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl
YzhhMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk
Yzc3MmMwMzEtZjY1MC00Mjk3LWI4M2YtNTgzMDVlNGNjZjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SDP73BI7ajykFGoT5w6vUTG2JRLNSrV53tP
256fQZsrJjQ8VXkRqMx8x+d6kVRoCXgrjLixGHWftI4Pjz/YttCL61Fj/KjZEj8e
/XFKc+FusYCPdM9cn9XgK0Qt+Kti3yS19SPA96HMxGMIFXqOBHPv3OOGghcDdYN9
BCK7QBbGRPJi9Y07g+yWjaOlBNHOik4xTlok6AacW4b5ZEzdRxpOHsot4Bz52a72
1478bQ19q39UiKa83CgShj+jeCKjmtmkLl5AcnOtkQeet0TG9tswm10X3dZiSYpC
gVhCWJoKKqI6amyezgugTWLjNxAaGKR5l9XA9vgwiZ8UaJw4QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFGIlp9grTZwukbpWVPZ8FUv4WJXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy
NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvOTZmZGFkZmItYmExOC0z
MDY3LWFiOTYtNDY1MzNmODI4YTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh
MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm
ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh
NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHry+I6O0DVSZoBJ3g1K8yOrQi9HIXdfdY5yGalKeTsFDq1oQrbr8Es2
ZxuZ5XkWAqHa3xjdR2PIiF4Qb1VOnsD5wu0zjtU+AlK+WG+MpDcxbv68f7dUwbDZ
eZEOjKfusJhBnpJymWEs267P95AV4uHz1wBNGTJBJ2/fT/kxLn+g6YWAY2NzN9JQ
jjWd+T2xOIdEWQRhRBgrF07o5TWwRm6oK9376HmOF8cmr2ng2V6BnIvQgVYF0TOz
FiNbzPEPzH9AQ0q1+1ogZxTPPVgVssLq0j+c/ksZ3/9O65Ii4kXZcE8OeRoMvk1q
/U3PQTYVS5cMirxnm/FJiKP5Y4jOf00=
-----END CERTIFICATE-----
Generated at Thu Aug 27 11:29:42 2026 by rpki-client