Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/b3d9a224-be61-3e9a-846f-9711a193deed.roa
File:                     b3d9a224-be61-3e9a-846f-9711a193deed.roa (raw, json)
Hash identifier:          hFpoNeR1ieMYC4tbg+9mWcmy43bHRVal/TmNhOGljIc=
Subject key identifier:   2E:AE:24:52:28:D2:12:EA:04:E1:20:BD:C3:C5:AA:F0:64:76:D7:31
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584D19B4D4BA91712C8843E291D0
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/b3d9a224-be61-3e9a-846f-9711a193deed.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     63360
IP address blocks:        168.225.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:d4:ba:91:71:2c:88:43:e2:91:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=90158edc-144f-486d-a996-194edc9f9400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:25:a5:2a:1f:67:34:fc:8e:8a:68:fc:16:c8:
                    06:61:a9:54:be:10:40:99:53:67:17:e2:c6:af:ea:
                    0d:d4:17:85:0c:f8:35:02:12:9a:b2:4c:70:e4:cc:
                    02:4a:d0:e0:e7:85:16:bc:e9:aa:ba:be:26:79:11:
                    d7:a8:26:0b:30:ba:76:25:87:cc:7d:c9:0c:9e:1c:
                    12:97:5e:f1:6c:43:c9:e6:04:17:07:9f:ec:cf:1c:
                    9b:7b:bf:75:8e:9d:ef:be:2c:69:01:73:c6:1a:b4:
                    0a:02:c6:a9:f1:ea:47:a4:2f:c8:76:cd:6c:03:c0:
                    6b:0c:ff:cf:6c:4e:e1:ad:2a:00:ac:d7:80:ab:5d:
                    9e:25:1d:d1:c9:9d:26:b0:87:45:f0:4d:6a:7a:43:
                    ee:8b:2c:b3:b8:b9:61:fa:3a:f8:6b:b7:35:de:e6:
                    06:21:53:8f:2c:e7:52:58:f3:46:ae:6b:d6:cd:d4:
                    ff:62:9d:1a:0a:ed:fa:0d:e7:5f:0b:2c:0a:7f:85:
                    1f:c1:1b:34:f2:36:ba:0d:4f:dc:a3:27:7d:0b:09:
                    b2:5b:a5:6f:eb:53:18:fa:d5:87:7a:f1:38:57:e3:
                    cc:53:5d:43:5a:3c:cc:84:bd:a7:a9:c6:8b:86:f4:
                    6f:7f:a1:7a:d1:8c:4d:0a:60:64:9a:4e:ff:37:50:
                    1b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AE:24:52:28:D2:12:EA:04:E1:20:BD:C3:C5:AA:F0:64:76:D7:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/b3d9a224-be61-3e9a-846f-9711a193deed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:21:13:c8:24:81:c0:be:f5:5e:b9:85:52:b2:93:a2:b8:57:
         08:68:82:b4:c7:b5:12:d0:3d:5e:fe:b2:ea:db:84:59:9b:76:
         52:4f:b2:21:d4:d6:c1:bf:f9:19:1d:bb:43:2f:c2:ba:b6:14:
         e3:29:7e:a7:69:36:e9:1a:ca:b1:f8:d9:eb:84:c5:ef:9d:28:
         10:fc:f5:23:86:45:4d:24:c1:7d:03:66:c8:f0:aa:8b:8c:54:
         99:e9:6b:ac:3c:68:63:b1:ff:44:75:49:c9:1a:37:8b:d5:8e:
         fb:15:ca:af:ff:e6:77:21:1b:79:88:69:c0:40:ee:5a:81:9c:
         46:1d:fb:e4:15:45:c9:2d:1b:2f:c2:2c:81:4b:72:dc:b2:f0:
         ed:bc:11:c9:94:f1:02:35:4b:e4:74:ae:27:df:5d:af:f0:6c:
         04:28:e4:17:9b:61:e4:07:40:64:77:ff:46:39:fd:ce:2f:38:
         68:b7:2b:f3:95:40:a3:37:13:14:b7:68:df:e9:cd:e8:72:66:
         2c:a2:5e:25:58:21:a5:cb:a5:5c:bf:6e:3a:a3:98:d6:cf:c2:
         da:0a:55:6e:9b:bb:17:7e:17:50:a3:50:1a:4f:63:99:ed:43:
         37:44:73:0d:11:4e:d4:83:5e:61:b4:57:ce:2f:4d:2a:1f:4c:
         e8:64:65:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:32:13 2026 by rpki-client