Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/07f8ebf0-7d71-3dc5-9d40-91da754a6187.roa
File:                     07f8ebf0-7d71-3dc5-9d40-91da754a6187.roa (raw, json)
Hash identifier:          ij/hocTN3TwfuM/Z6wzKhvrvhEV01pmc8yBceCJXD0c=
Subject key identifier:   40:8A:9D:12:8B:06:A1:C9:4A:5E:49:4B:BC:A9:8B:D4:5F:81:A3:A3
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584B583CA82FF3DEA45554F4EE80
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/07f8ebf0-7d71-3dc5-9d40-91da754a6187.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     63360
IP address blocks:        168.225.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:a8:2f:f3:de:a4:55:54:f4:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=7e28fdcb-fd83-48e7-97f9-88aedf0df9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:27:d0:40:6f:06:66:0e:e1:ae:d3:c5:8b:
                    2b:66:5e:7d:b6:f2:32:e2:26:c5:12:c3:5b:43:c6:
                    7d:ba:fb:fa:ac:7f:b9:48:70:cb:84:17:8e:ab:40:
                    0d:9b:c3:a4:e7:aa:23:1e:9b:a9:35:e7:74:b2:a0:
                    8e:96:f7:18:3b:e2:e8:4c:d6:16:e0:55:dc:06:01:
                    e0:d0:a1:fa:4d:64:90:6a:c3:3a:63:b7:4f:d3:28:
                    4a:0d:a0:b1:d3:88:e2:be:e6:4b:f5:67:7b:b8:5a:
                    63:38:d5:ec:12:1c:5a:de:a1:be:66:34:a4:d3:d8:
                    7c:02:67:5a:d3:42:d3:c4:19:47:9c:45:60:2c:46:
                    51:f0:b4:87:81:c7:38:be:42:f1:8c:cd:30:47:16:
                    71:c3:b9:68:ab:23:22:6e:20:86:74:4e:2e:90:b1:
                    c8:b3:5f:00:82:ed:e4:ec:73:7a:28:40:7b:07:3a:
                    db:07:ea:fe:c9:02:a1:7c:c9:60:e6:58:79:d4:0f:
                    40:51:f0:04:7e:d9:90:55:01:41:50:20:12:6d:24:
                    55:14:6b:a4:16:e1:89:47:bb:a9:61:ea:82:11:e1:
                    e4:d1:1c:b7:08:0b:57:8f:df:86:b2:f8:05:f2:41:
                    b0:6a:2f:4d:6a:77:85:ab:63:6d:20:a3:25:5a:ca:
                    0b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8A:9D:12:8B:06:A1:C9:4A:5E:49:4B:BC:A9:8B:D4:5F:81:A3:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/07f8ebf0-7d71-3dc5-9d40-91da754a6187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a9:59:08:8b:ba:1f:77:97:53:61:a3:bc:b6:f8:31:28:e7:
         a5:0a:4b:fd:21:76:a7:92:ec:d9:d7:79:c6:10:9b:7d:fd:4f:
         ad:fc:c0:c2:21:24:c7:ac:ec:15:f4:3c:d8:3e:a8:39:fb:79:
         5c:65:2d:02:b9:0e:ab:00:c0:98:14:e0:48:de:c2:34:39:6c:
         42:ea:9b:b1:72:5c:57:a9:d1:15:b3:ee:3e:f9:e4:c6:ed:43:
         be:95:49:40:c3:99:72:d8:2b:bc:c9:46:f5:be:be:b0:01:61:
         01:66:3a:15:6e:2a:86:60:7b:ec:96:f6:00:60:43:13:a3:e2:
         93:f9:ff:1e:36:82:cc:ae:e5:67:e9:18:7e:4e:9c:6e:ac:61:
         2f:9b:2e:c3:9e:c3:f1:d9:fe:38:e1:68:4c:c2:10:69:ec:68:
         84:d2:00:d5:0e:97:3e:12:22:45:ba:8e:70:97:15:d6:9c:bf:
         40:d4:fc:e6:4e:8c:4d:53:82:27:5e:9d:db:57:f5:e9:5d:a7:
         40:7f:73:ad:7c:d5:49:fc:e5:59:91:5b:96:87:41:08:ba:1e:
         56:28:21:77:0c:d5:73:ef:f9:76:73:7e:89:91:3c:bf:88:f5:
         f6:3a:5d:cd:ba:e3:38:aa:2f:bf:f1:f3:e9:8a:06:5e:31:28:
         db:be:5d:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKgv896kVVT07oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl
YzhhMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk
N2UyOGZkY2ItZmQ4My00OGU3LTk3ZjktODhhZWRmMGRmOWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6An0EBvBmYO4a7TxYsrZl59tvIy4ibFEsNb
Q8Z9uvv6rH+5SHDLhBeOq0ANm8Ok56ojHpupNed0sqCOlvcYO+LoTNYW4FXcBgHg
0KH6TWSQasM6Y7dP0yhKDaCx04jivuZL9Wd7uFpjONXsEhxa3qG+ZjSk09h8Amda
00LTxBlHnEVgLEZR8LSHgcc4vkLxjM0wRxZxw7loqyMibiCGdE4ukLHIs18Agu3k
7HN6KEB7BzrbB+r+yQKhfMlg5lh51A9AUfAEftmQVQFBUCASbSRVFGukFuGJR7up
YeqCEeHk0Ry3CAtXj9+GsvgF8kGwai9NaneFq2NtIKMlWsoLLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECKnRKLBqHJSl5JS7ypi9RfgaOjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy
NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvMDdmOGViZjAtN2Q3MS0z
ZGM1LTlkNDAtOTFkYTc1NGE2MTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh
MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm
ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh
NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCpWQiLuh93l1Nho7y2+DEo56UKS/0hdqeS7NnXecYQm339T638wMIh
JMes7BX0PNg+qDn7eVxlLQK5DqsAwJgU4EjewjQ5bELqm7FyXFep0RWz7j755Mbt
Q76VSUDDmXLYK7zJRvW+vrABYQFmOhVuKoZge+yW9gBgQxOj4pP5/x42gsyu5Wfp
GH5OnG6sYS+bLsOew/HZ/jjhaEzCEGnsaITSANUOlz4SIkW6jnCXFdacv0DU/OZO
jE1TgidendtX9eldp0B/c6181Un85VmRW5aHQQi6HlYoIXcM1XPv+XZzfomRPL+I
9fY6Xc264ziqL7/x8+mKBl4xKNu+XWo=
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:00:29 2025 by rpki-client