Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/98245db9-f886-3a27-8cd3-0bef3287f111.roa
File:                     98245db9-f886-3a27-8cd3-0bef3287f111.roa (raw, json)
Hash identifier:          hW524Nxb61KOk6znlFEDywDTt7Y4PA9FyvmMeJOm+Yc=
Subject key identifier:   AC:76:0E:53:FF:F9:83:ED:07:24:B3:B4:92:24:5F:CF:2A:3F:36:92
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584DFA70A05755B71AE0A79BA500
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/98245db9-f886-3a27-8cd3-0bef3287f111.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     63360
IP address blocks:        168.225.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:a0:57:55:b7:1a:e0:a7:9b:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=f9a0d5a9-55e7-481d-a7bb-18c1ec28a502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0c:ed:84:69:72:52:64:97:16:e7:65:7d:b4:
                    7f:71:3c:1a:e3:1d:da:3d:20:53:ab:42:f0:06:2a:
                    34:59:55:83:0f:36:e7:2f:a1:c9:71:93:2e:a8:b9:
                    ce:de:d9:1c:9e:01:9e:b9:b9:83:84:13:90:cd:0b:
                    1a:c7:77:4f:1b:f1:00:c2:ca:8b:f7:98:7a:d5:02:
                    89:51:fe:cf:f6:ec:8b:18:f4:dc:50:f3:5a:11:73:
                    9f:f0:90:8f:19:dd:e9:4c:90:96:68:de:8e:b5:8c:
                    16:53:0a:09:55:9b:bd:39:48:fa:f9:88:c1:4e:eb:
                    82:d1:e7:e1:20:ae:f9:58:68:b8:90:ed:dd:53:68:
                    22:6f:82:4a:68:f8:5b:04:cc:f8:0f:d7:0c:ae:40:
                    f5:6a:b4:ab:18:87:31:ab:c2:7c:4f:70:61:ef:09:
                    8f:2f:ee:03:44:c6:8d:f1:e5:e6:ae:76:ba:d0:d1:
                    e6:f0:cd:bf:19:29:94:f3:1e:9e:f5:c4:0c:7f:44:
                    46:63:b9:fd:5d:fc:d0:b0:98:40:b2:b1:34:9a:fe:
                    b6:06:46:a2:81:45:73:7a:12:12:96:c7:83:22:7d:
                    15:8e:fe:fe:fa:cf:36:bc:60:39:40:b0:5e:c7:35:
                    3e:91:11:77:a1:2f:5b:59:4d:01:e8:2a:e0:31:9e:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:76:0E:53:FF:F9:83:ED:07:24:B3:B4:92:24:5F:CF:2A:3F:36:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/98245db9-f886-3a27-8cd3-0bef3287f111.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:48:0f:d1:1c:fa:46:b7:70:43:f9:9d:e4:7c:ad:88:e8:f5:
         e9:5e:c9:1b:95:e7:45:10:68:37:96:a1:84:70:de:6b:e3:80:
         bc:36:53:0a:f1:4e:cd:94:02:78:3e:ff:8b:e0:cc:82:a3:d9:
         2b:b2:f3:cd:9f:ce:ea:c7:2b:75:fb:99:02:b8:7a:9e:f0:3a:
         d4:fd:98:71:ac:d2:de:64:67:e5:58:f6:fd:e9:44:89:0b:08:
         dc:14:a7:99:8d:12:b6:b4:d6:ee:50:be:c8:86:65:e7:bc:5f:
         6b:41:35:a3:64:cb:6d:2c:03:13:31:9b:42:9e:5c:dd:22:8a:
         ff:e9:74:99:a7:6e:62:d4:98:38:2e:49:06:42:c2:c1:2b:e2:
         61:5c:58:ee:c4:53:a0:13:a1:d5:da:0b:e2:02:37:0a:68:f3:
         6f:f3:dc:ee:83:6a:8f:34:9d:19:a1:85:fe:2b:65:6d:14:d4:
         f7:d6:c9:0e:cd:5c:cd:22:50:0f:38:73:3f:bc:64:5f:3e:a3:
         0d:51:01:93:8a:91:64:7e:5a:bf:82:ad:94:48:a2:c2:61:f7:
         bb:4c:1d:d9:6a:ed:e7:01:8c:87:df:6c:80:47:0d:e4:5e:d1:
         e3:55:dd:52:3a:ce:be:f0:09:22:a6:c3:2b:26:ba:30:ac:06:
         ad:45:98:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:22:54 2026 by rpki-client