Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/0dbe73ac-3f67-340e-aeda-9bf4f3053904.roa
File:                     0dbe73ac-3f67-340e-aeda-9bf4f3053904.roa (raw, json)
Hash identifier:          1YbDTBkWMeSZL6EJuZK9sYl+sB+1QfCwGIlynZi1D6k=
Subject key identifier:   30:34:45:DC:11:E3:2C:F2:59:0C:82:1B:5B:28:60:BA:FA:32:98:73
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584D27AA2EAC248C3ECC5B763B40
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/0dbe73ac-3f67-340e-aeda-9bf4f3053904.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     16509
IP address blocks:        168.225.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:2e:ac:24:8c:3e:cc:5b:76:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=4850f76a-bb92-42b6-8e3a-7ab099d07a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:dc:2c:98:0c:ee:5a:b1:be:0a:a3:ed:4e:4d:
                    4b:e4:52:00:cc:da:5d:86:59:d3:0d:98:99:5b:03:
                    49:41:54:aa:4d:3c:fa:6e:b9:58:73:36:e4:25:6a:
                    c9:66:3b:d4:0a:c5:86:f1:34:54:2d:ca:d1:27:4f:
                    97:88:3d:5b:fb:af:db:fb:82:e3:8a:af:a2:c0:ba:
                    e9:e0:1f:3f:79:04:d3:d4:e1:22:04:f1:33:bf:0a:
                    77:f0:06:ce:99:9a:ed:89:57:ed:c4:31:1c:4d:ca:
                    6b:b0:40:34:58:a9:56:a6:dd:88:c4:9b:ab:54:f1:
                    7e:d8:dd:ee:0c:bc:e5:1f:cb:79:3f:91:c6:97:80:
                    94:df:8e:af:b7:e4:6e:af:6d:66:5f:de:20:86:84:
                    88:2e:24:16:cf:2a:e1:d3:2a:c0:37:49:a5:3b:06:
                    21:35:62:28:f7:4e:2c:ab:d5:ab:92:89:9e:8a:dc:
                    c6:e0:d5:a9:66:5c:4e:c5:7b:b6:a7:8d:92:dc:15:
                    95:96:6d:6d:a9:1d:86:5b:f0:b7:50:bc:0c:da:ad:
                    b7:d4:b3:f1:93:5c:1a:2a:78:bb:83:2f:20:82:8e:
                    92:5b:0d:24:a2:ef:76:5e:0a:e2:3d:4c:2d:c3:60:
                    61:ba:b4:33:48:0a:8c:43:e9:e6:15:de:76:63:3e:
                    bb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:34:45:DC:11:E3:2C:F2:59:0C:82:1B:5B:28:60:BA:FA:32:98:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/0dbe73ac-3f67-340e-aeda-9bf4f3053904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:78:45:21:3d:2c:d7:b3:a3:bc:dc:ff:c5:35:17:97:8f:bc:
         eb:08:92:82:f8:f1:1e:c7:31:1a:48:c5:17:d2:5d:ca:09:57:
         ab:5a:69:3a:e8:46:e6:5f:82:0f:fd:37:2b:b7:3a:fd:6f:85:
         8a:bc:4d:3e:95:97:86:1d:e5:db:06:7a:d2:93:29:44:ce:b3:
         5b:31:43:ca:33:53:f4:d9:60:36:c9:df:19:c1:87:65:6d:ed:
         40:7f:76:e0:c1:f6:e8:2f:2a:92:2f:c4:32:08:86:3f:32:4c:
         cd:74:a3:02:dd:76:8b:99:66:92:50:00:30:d6:60:81:69:f9:
         00:86:5e:06:cd:15:aa:49:da:a8:d4:d3:60:c0:fe:43:dd:8d:
         23:de:9c:1a:4b:ed:d9:08:00:bb:52:42:52:63:62:6b:3a:9d:
         01:8b:47:bd:80:0e:60:12:a8:85:0b:66:6b:34:4e:82:24:b6:
         d6:b8:ea:0d:40:06:b0:6e:b4:8f:29:c4:79:c5:63:45:69:68:
         53:01:d6:c9:a5:a6:d9:2b:59:22:d9:d4:f6:05:8e:71:ad:25:
         47:75:1a:76:d6:e2:91:b5:47:8b:26:1b:7c:64:c6:4e:d3:88:
         6e:4a:28:a3:6f:a9:e2:58:60:2c:cf:86:9d:60:98:32:dd:36:
         20:ba:ae:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:56:53 2026 by rpki-client