Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f8eaaa80-a751-3137-a927-fda10e9f5161.roa
File:                     f8eaaa80-a751-3137-a927-fda10e9f5161.roa (raw, json)
Hash identifier:          p8pPACElNURR6asYviOWyIFVV0IjjSbpNWla/ptvLIM=
Subject key identifier:   77:7B:93:11:76:79:4F:05:3D:61:50:E9:2D:18:E0:BC:5F:E5:1F:7A
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584D19B4D5995F06E6CF07F22920
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f8eaaa80-a751-3137-a927-fda10e9f5161.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     63360
IP address blocks:        168.225.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:d5:99:5f:06:e6:cf:07:f2:29:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=96a763ed-cab9-431b-8878-873f5064f327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:67:b9:61:23:6b:b5:92:a3:3c:7c:24:60:78:
                    e4:30:d2:a9:38:84:e2:40:bd:3c:2a:86:9c:f1:e7:
                    da:4f:8b:ec:01:b1:0f:f9:36:f5:02:f4:bb:6c:cd:
                    20:dd:09:6f:8f:8b:14:89:32:aa:9a:e8:e2:f1:c3:
                    62:08:70:53:5e:13:5b:6b:ff:71:c7:4f:52:38:be:
                    ae:7c:db:e6:4e:ae:33:e1:d0:ac:ad:c0:62:ad:e1:
                    1f:b1:07:30:b5:86:29:19:ea:54:7f:4e:10:24:d9:
                    9b:1e:8f:fb:61:22:27:10:78:dd:5f:e4:7a:5b:af:
                    8d:85:1b:f4:c9:b5:25:cd:ae:12:00:19:41:fe:cc:
                    ce:2c:d4:35:d2:c8:60:a4:12:6c:1d:49:2d:fd:0d:
                    df:df:04:33:13:f8:47:ec:96:6c:21:e8:a1:15:41:
                    08:1b:d4:28:df:b0:8e:1d:4a:c9:24:1f:ea:12:e5:
                    d9:50:b2:1b:08:ff:f5:40:08:d0:67:11:bd:51:04:
                    1e:c8:43:89:22:5a:a4:e4:cc:bd:fc:27:01:fc:27:
                    73:fd:68:47:6a:95:1d:59:5c:58:d6:88:7f:d8:0a:
                    24:54:a1:18:50:3d:88:29:6a:c3:cc:50:84:0e:3d:
                    b2:22:af:3d:fb:49:38:07:0a:20:9c:ae:63:3d:1b:
                    e4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7B:93:11:76:79:4F:05:3D:61:50:E9:2D:18:E0:BC:5F:E5:1F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f8eaaa80-a751-3137-a927-fda10e9f5161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:1c:73:af:55:e8:3d:a5:aa:72:b6:b5:d2:83:84:2b:0b:99:
         81:1f:e5:50:31:73:f5:be:dd:f4:98:c8:0f:76:24:d3:30:e0:
         c3:70:be:bf:29:c1:3b:90:af:ea:d3:94:85:71:ea:ec:02:52:
         28:51:d1:9b:90:bb:6d:5b:09:21:ca:f0:07:2e:76:db:f8:b2:
         11:27:be:76:84:6a:a6:48:06:07:12:0f:f6:f8:81:ca:48:67:
         9e:89:ce:89:0a:88:fe:7b:d8:fe:46:6c:3d:4b:1e:39:9d:cc:
         68:ac:4d:ae:ae:42:90:3d:69:fc:94:d4:89:c8:84:b0:cb:c7:
         4b:ba:99:68:7e:85:1f:ec:85:d0:85:ab:05:52:93:01:89:d0:
         20:81:63:5e:57:38:9b:87:e2:1a:13:04:9f:98:23:32:d0:32:
         1e:a2:48:0b:9c:2d:40:d9:09:6f:71:f8:1b:57:2b:e9:7b:56:
         5b:94:8c:30:3d:04:e9:25:e5:35:fb:44:1b:29:44:05:6b:02:
         aa:01:c8:89:41:66:cc:11:1f:4a:bb:cd:73:ec:d5:37:95:cc:
         b7:f5:1e:fc:c3:f8:fe:59:b3:e6:6b:b9:20:8c:68:3d:02:16:
         9b:5f:e0:f2:8f:dd:df:50:96:05:fb:5d:dc:a5:93:80:70:b9:
         7d:3c:26:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNWZXwbmzwfyKSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl
YzhhMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk
OTZhNzYzZWQtY2FiOS00MzFiLTg4NzgtODczZjUwNjRmMzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ge5YSNrtZKjPHwkYHjkMNKpOITiQL08Koac
8efaT4vsAbEP+Tb1AvS7bM0g3Qlvj4sUiTKqmuji8cNiCHBTXhNba/9xx09SOL6u
fNvmTq4z4dCsrcBireEfsQcwtYYpGepUf04QJNmbHo/7YSInEHjdX+R6W6+NhRv0
ybUlza4SABlB/szOLNQ10shgpBJsHUkt/Q3f3wQzE/hH7JZsIeihFUEIG9Qo37CO
HUrJJB/qEuXZULIbCP/1QAjQZxG9UQQeyEOJIlqk5My9/CcB/Cdz/WhHapUdWVxY
1oh/2AokVKEYUD2IKWrDzFCEDj2yIq89+0k4BwognK5jPRvkrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHd7kxF2eU8FPWFQ6S0Y4Lxf5R96MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy
NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvZjhlYWFhODAtYTc1MS0z
MTM3LWE5MjctZmRhMTBlOWY1MTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh
MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm
ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh
NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8cc69V6D2lqnK2tdKDhCsLmYEf5VAxc/W+3fSYyA92JNMw4MNwvr8p
wTuQr+rTlIVx6uwCUihR0ZuQu21bCSHK8Acudtv4shEnvnaEaqZIBgcSD/b4gcpI
Z56JzokKiP572P5GbD1LHjmdzGisTa6uQpA9afyU1InIhLDLx0u6mWh+hR/shdCF
qwVSkwGJ0CCBY15XOJuH4hoTBJ+YIzLQMh6iSAucLUDZCW9x+BtXK+l7VluUjDA9
BOkl5TX7RBspRAVrAqoByIlBZswRH0q7zXPs1TeVzLf1HvzD+P5Zs+ZruSCMaD0C
Fptf4PKP3d9QlgX7Xdylk4BwuX08Jn4=
-----END CERTIFICATE-----
Generated at Thu Mar 19 15:38:07 2026 by rpki-client