Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/add3d5a6-1410-3a84-ba24-b5d1dddd441d.roa
File:                     add3d5a6-1410-3a84-ba24-b5d1dddd441d.roa (raw, json)
Hash identifier:          dbLJkMKWdhoehZZ1KHJZ3n1R8zHll7qaJRbzutJx9CQ=
Subject key identifier:   6C:D0:76:56:D4:A6:24:CD:31:D4:88:57:1C:83:C5:80:99:66:20:5B
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584AE9F6654A50E497D13EACBF80
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/add3d5a6-1410-3a84-ba24-b5d1dddd441d.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     63360
IP address blocks:        168.225.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:65:4a:50:e4:97:d1:3e:ac:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=894fcff0-06e4-49d4-b9b1-c1efa56f4fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:56:39:f6:b5:4b:31:52:f1:15:e6:fe:c5:25:
                    ee:7b:23:fa:6e:0d:0d:ba:85:71:6c:b8:e9:3e:af:
                    58:6f:58:1f:90:4f:d9:8e:da:ab:19:3b:1b:b4:87:
                    45:12:2d:65:df:42:41:7a:7b:53:42:23:15:ec:07:
                    a1:21:a4:1b:d9:73:cd:93:68:ce:f9:8c:b3:37:2b:
                    0e:70:d9:83:ca:77:58:42:95:4a:bf:89:b2:ee:04:
                    25:b5:d8:0d:f3:78:d1:ad:1d:d4:76:f3:ef:bc:17:
                    7b:88:7b:b1:02:8d:43:62:15:d4:11:73:cf:8b:cb:
                    ef:ab:02:ba:01:1d:60:1f:97:39:5e:cc:34:48:5a:
                    55:9a:56:34:4f:66:87:e5:bd:6a:89:87:09:19:37:
                    5f:9c:35:f0:51:39:49:aa:c6:3c:12:2b:6b:f0:28:
                    d7:81:50:cd:34:40:e8:8e:2e:95:7d:34:93:f9:90:
                    17:14:04:c8:d8:d0:c5:57:24:5c:60:ad:ef:aa:da:
                    c8:cd:ce:9d:d6:a9:05:13:df:aa:cb:bf:1a:3a:cb:
                    1c:c9:7d:ed:7c:55:dc:99:1d:6a:6d:27:e3:cf:55:
                    5c:22:9f:04:58:bd:6d:ad:a7:88:71:39:70:2d:86:
                    8e:e8:b9:58:bb:b4:30:b3:21:9b:18:7e:03:bd:20:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D0:76:56:D4:A6:24:CD:31:D4:88:57:1C:83:C5:80:99:66:20:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/add3d5a6-1410-3a84-ba24-b5d1dddd441d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:12:c6:1e:14:42:c5:f4:15:ae:a0:de:68:a5:44:6c:b6:9a:
         2b:9f:63:4e:99:83:90:31:75:27:5c:11:58:1a:0e:a2:2d:4b:
         a3:52:63:67:d8:71:cc:1e:34:fe:2d:b1:12:b5:51:7f:f3:51:
         22:80:b0:0a:60:f0:4c:9f:88:a7:a7:ee:03:a9:91:ea:16:bb:
         18:33:cf:20:c6:4e:40:95:d9:5e:93:71:3d:be:ef:0e:0e:c2:
         c0:9f:ce:0d:ff:18:e2:31:35:b9:e6:11:11:35:f5:be:2f:8d:
         c1:bc:6c:12:3b:bb:7a:64:b3:b1:c0:05:89:62:9a:eb:2e:98:
         b1:74:33:49:bd:0b:8a:6a:c8:94:77:93:6b:52:9f:6c:b9:b1:
         9a:0a:eb:2f:bf:a1:fc:ff:a3:09:30:15:a0:a6:6d:60:e2:1b:
         53:12:b1:d1:1d:48:52:90:d8:a0:0b:b0:85:b9:fe:75:9c:48:
         0e:7a:37:bd:17:4f:b2:f9:aa:13:c5:f3:84:9f:e0:2c:c8:54:
         8f:00:97:b2:f9:34:97:7d:85:d5:00:c4:ac:25:70:92:28:8d:
         e4:0a:69:4d:0d:cf:f6:27:7c:33:af:f0:41:3e:81:c5:fa:a0:
         19:71:33:69:29:2d:69:37:01:b8:12:87:ca:7a:3e:5f:41:d3:
         ff:9d:b5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:54:14 2025 by rpki-client