Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/17a44f09-9074-318d-b88d-e295ae84a626.roa
File:                     17a44f09-9074-318d-b88d-e295ae84a626.roa (raw, json)
Hash identifier:          LnenmqI1FBqsttyELCJanuiN/8jRS2cMXBYyQpKiEb4=
Subject key identifier:   93:2F:48:4A:BD:F3:DF:E1:B0:FC:E2:CE:0F:9B:CC:7F:D4:B8:F6:61
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584D3DFF92499CEF6960391D8A00
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/17a44f09-9074-318d-b88d-e295ae84a626.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     31898
IP address blocks:        168.225.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:92:49:9c:ef:69:60:39:1d:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=2d10b885-84e8-44bc-bfb3-05fe4213d3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2b:76:66:80:5e:99:aa:a6:09:dd:69:09:37:
                    22:41:93:b9:f0:d3:c3:a7:99:49:c8:71:08:8a:22:
                    88:87:63:62:21:a2:ad:de:d3:fa:8e:2d:3c:f1:6a:
                    50:95:5f:3f:ea:2a:da:85:d4:5a:42:dc:4f:85:e8:
                    f4:d2:7a:71:7d:c8:67:9d:01:c6:91:fc:1e:1d:76:
                    6c:73:03:6c:50:1d:26:0d:07:f5:ec:25:0e:da:6f:
                    94:13:c2:21:4b:0d:d0:3d:99:4f:2d:5c:be:2f:ac:
                    1c:a6:61:fc:aa:95:d5:a5:35:41:bf:ea:dc:7a:3e:
                    4e:69:79:6b:91:4a:c8:70:ad:a7:7d:36:6e:fb:3f:
                    15:1d:95:55:1e:b3:1d:c1:8f:9e:66:ad:85:04:d9:
                    72:75:2b:20:c1:0c:e8:39:e4:df:61:70:20:81:e1:
                    5a:49:0b:d5:67:c6:9d:42:59:24:a8:b2:19:62:86:
                    8c:23:31:2f:61:8d:55:d7:49:c3:fe:73:c3:e0:d1:
                    75:b6:58:a0:bc:50:d9:13:ea:92:49:68:1e:91:b4:
                    34:73:35:78:8b:f4:2e:b6:5f:b9:08:37:c3:9c:ef:
                    a0:a4:07:4c:95:a2:f9:94:2a:8e:11:3b:6c:49:b3:
                    74:63:45:52:95:ab:fc:59:8b:a5:69:29:69:74:25:
                    d5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2F:48:4A:BD:F3:DF:E1:B0:FC:E2:CE:0F:9B:CC:7F:D4:B8:F6:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/17a44f09-9074-318d-b88d-e295ae84a626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:95:dd:b7:ec:84:73:db:3d:19:b5:29:20:08:36:54:8c:99:
         8c:1a:bf:41:81:9c:2b:07:76:ba:af:87:ed:47:a3:f7:d1:bd:
         d2:7d:83:99:3d:b9:12:18:cf:99:55:ea:40:ab:66:10:f9:e9:
         d9:e2:8f:1a:d9:ba:b8:71:e4:01:c1:03:ee:f5:24:00:bd:c9:
         70:e5:e5:34:34:67:dc:47:79:01:a9:ac:f5:02:02:40:14:70:
         ac:d0:b7:74:6c:bc:95:92:98:5c:7a:5a:6d:79:04:09:e7:6b:
         b8:23:f2:4b:6b:68:e8:19:a5:05:03:bf:b2:48:a8:f6:12:8f:
         18:5d:ab:bb:09:5b:6e:19:60:be:11:29:55:bc:8d:38:a2:d1:
         67:53:c8:2c:b0:f2:cc:cc:0b:29:4c:f4:95:41:37:02:73:16:
         cb:5a:53:5b:04:73:7a:93:fa:eb:b4:81:23:13:59:e9:ed:2b:
         43:c0:ce:d4:4b:5b:f3:d7:f1:3a:12:54:22:21:8b:5e:60:ac:
         e0:41:3a:27:97:41:37:67:90:2a:8a:fc:dd:8e:cb:f1:88:0e:
         b3:24:ac:46:5d:83:28:e9:e5:f2:86:30:ad:bb:24:c4:78:8b:
         cb:93:c9:2b:d3:e7:3f:4a:b5:3c:26:44:03:fe:3d:1d:82:42:
         d5:40:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:19 2026 by rpki-client