Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d883bae7-3067-34d2-b612-d4b17b17fb12.roa
File:                     d883bae7-3067-34d2-b612-d4b17b17fb12.roa (raw, json)
Hash identifier:          WeMOUPcIc59muxQbN/TwfWZbVZt12rJqSfkmMopmBSQ=
Subject key identifier:   AC:BA:A1:86:0A:AB:0D:3F:68:AC:D1:A0:B8:44:23:D0:47:43:AC:83
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584D27AA2E992FE83141516BCD80
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d883bae7-3067-34d2-b612-d4b17b17fb12.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        168.225.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:2e:99:2f:e8:31:41:51:6b:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=9985df6c-dcc4-44a0-a18d-696387287425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4f:a6:61:0c:62:c9:c2:0f:ca:07:da:b4:51:
                    32:f2:35:3d:ec:1f:81:20:35:a9:7c:37:22:c9:35:
                    77:c2:ae:1e:d4:44:2d:74:2b:a4:be:6d:0b:39:7e:
                    69:0a:b1:7d:fb:37:70:31:14:ef:f4:ce:46:5d:2e:
                    9b:eb:f2:5b:8e:da:36:83:d2:8e:f3:0f:7b:1d:11:
                    3e:1f:a6:53:f4:b6:ef:d7:67:6d:27:d5:57:43:71:
                    98:79:0c:9c:7b:a7:0a:7a:7d:47:6b:ef:43:18:e7:
                    e0:72:52:77:a1:4d:90:1c:f0:f3:79:1e:69:9a:8b:
                    8e:dd:a9:19:35:6a:8c:7c:05:ba:3c:1f:51:9e:01:
                    36:b4:29:4c:16:1d:64:be:85:64:40:2e:b3:7c:a6:
                    92:ef:03:70:19:51:a9:54:a7:b0:cc:82:b8:a5:e8:
                    9a:5e:53:88:36:47:ca:6f:2b:b2:2b:03:fb:ac:7d:
                    fd:59:0b:92:15:91:74:4e:7e:1d:31:44:af:1a:ff:
                    73:f5:6e:fe:0d:d4:e6:e2:a6:01:e6:45:ff:c7:7a:
                    88:4c:97:94:41:c3:02:86:cd:74:94:2f:cc:27:9a:
                    c1:df:11:da:9a:49:58:a9:1d:c8:ff:4a:bf:bd:7e:
                    7f:d9:ca:eb:e2:d4:9e:7e:85:95:9e:b7:a3:76:15:
                    5c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BA:A1:86:0A:AB:0D:3F:68:AC:D1:A0:B8:44:23:D0:47:43:AC:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d883bae7-3067-34d2-b612-d4b17b17fb12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:19:2a:49:2a:39:c6:13:6c:e4:d6:65:6e:33:7a:9c:04:78:
         29:b0:3c:2b:7f:95:6d:b2:b5:f7:b0:67:6c:ad:83:48:3e:03:
         e6:b8:f3:c2:7d:45:2a:84:2e:fd:ac:d2:f0:d9:72:23:d0:ca:
         db:9e:b7:7c:0d:ae:9d:c3:af:22:27:7e:fd:7d:35:db:d7:bd:
         4f:cc:ac:15:91:5c:35:a2:63:7d:91:a8:a3:a8:ab:21:25:d4:
         f9:c4:1b:52:33:0e:a8:33:b2:01:42:5e:1b:a7:86:2f:39:00:
         26:97:de:32:b1:8b:25:4a:c3:26:8d:cb:db:45:7c:f1:35:a1:
         d0:2d:59:42:a6:65:2e:22:ac:0e:d0:98:d3:d9:24:69:62:0d:
         9c:f6:f9:1c:0d:06:93:3a:55:45:8e:7a:74:6e:4f:fc:41:e5:
         91:c8:eb:13:31:52:56:17:00:28:37:14:cc:44:95:95:f2:69:
         d9:fe:45:71:ad:dd:49:20:44:9f:0f:f5:d9:5c:26:78:1b:15:
         22:b2:b3:7e:be:ba:70:67:bb:7f:76:28:f7:61:9a:b6:e4:a7:
         11:32:31:7b:66:91:8e:4e:c8:99:10:41:5e:96:5c:73:56:2c:
         cd:b7:89:32:93:af:62:97:94:f2:1f:86:84:02:3e:89:6f:89:
         94:68:e1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:32:10 2026 by rpki-client