Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/1c0a76cd-a848-347a-8534-bb81117de2e4.roa
File:                     1c0a76cd-a848-347a-8534-bb81117de2e4.roa (raw, json)
Hash identifier:          Rz+Ax6SnYlWbA5qJ37gHeNQcta3mc42anhL/oxLXI20=
Subject key identifier:   CF:D5:BA:F9:8F:C7:9D:B7:74:AA:DE:24:37:24:87:B1:B4:F9:9A:93
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584FB0BDE59AE878156EFDBCC100
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/1c0a76cd-a848-347a-8534-bb81117de2e4.roa
Signing time:             Sun 01 Nov 2026 01:00:13 +0000
ROA not before:           Sun 01 Nov 2026 01:00:13 +0000
ROA not after:            Sat 30 Jan 2027 02:00:13 +0000
asID:                     63360
IP address blocks:        168.225.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b0:bd:e5:9a:e8:78:15:6e:fd:bc:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Nov  1 01:00:13 2026 GMT
            Not After : Jan 30 02:00:13 2027 GMT
        Subject: CN=4d7b19d7-4484-460b-9b0d-276adee6ea60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:75:bd:71:93:c0:d6:fb:a5:69:95:12:27:d1:
                    11:1f:4d:bb:fa:38:eb:e5:6f:a1:0a:c2:8a:e1:bd:
                    4c:31:a3:bf:dd:3d:79:ad:e9:bb:48:42:4b:7b:c1:
                    a5:2d:e9:cb:82:ff:86:da:ef:c6:43:e9:4c:64:52:
                    c9:de:ac:de:85:9d:90:0d:94:20:01:51:36:2a:38:
                    c6:80:c6:99:19:8a:d2:ed:b1:55:50:4d:b3:d8:dc:
                    06:b5:df:46:46:b1:8b:f5:9f:0d:7f:68:51:fd:1c:
                    df:00:0b:db:76:58:19:9e:76:81:0e:8d:22:22:d8:
                    dd:e3:91:93:1b:83:a6:e3:5a:d5:a7:fe:ad:37:47:
                    f2:80:77:fd:c7:62:e5:7e:0d:3e:58:19:09:5f:3f:
                    7d:9a:88:b3:5f:0e:c6:77:69:88:32:6e:30:c5:da:
                    cb:b7:69:b2:7d:5a:55:6b:78:5d:27:19:ec:80:52:
                    c2:df:33:e0:da:ca:5c:06:05:07:a5:05:16:56:26:
                    d3:37:1d:fd:ff:84:0c:67:f6:79:3c:41:b7:4c:05:
                    a7:36:d5:b7:b8:93:71:82:ad:a7:f9:e0:25:d1:b8:
                    5d:9c:48:cc:55:d8:a9:86:b0:82:d3:78:24:6a:19:
                    bc:df:91:20:7e:6e:ea:f3:24:68:09:20:72:16:9f:
                    5f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D5:BA:F9:8F:C7:9D:B7:74:AA:DE:24:37:24:87:B1:B4:F9:9A:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/1c0a76cd-a848-347a-8534-bb81117de2e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b1:79:e7:a1:04:b4:b3:12:27:43:77:e9:2c:40:0e:98:90:
         3c:31:0c:2d:33:d6:a3:7c:1d:b5:d7:6a:02:a7:5f:a4:de:21:
         e9:f9:09:50:a5:6b:8e:1d:78:7d:ac:e2:92:a0:c2:61:26:4e:
         04:86:e3:cd:98:55:b3:8d:60:a8:e0:3d:7b:95:ae:b0:7d:de:
         1e:c7:e2:ae:66:05:b4:c0:99:09:8c:84:c9:75:f4:53:23:9a:
         91:13:c5:10:2f:fe:a3:9d:81:d9:9e:b3:b1:cf:ba:76:27:ee:
         ef:af:be:42:32:65:d5:57:1a:eb:9f:ff:4b:9b:9b:11:e7:f2:
         f0:89:a3:fe:91:19:20:a3:39:cb:e0:65:87:3f:14:b1:58:76:
         38:f4:9c:31:09:37:bd:c6:97:db:6a:a2:1b:22:60:68:d7:73:
         dc:c2:6d:6a:9b:4a:24:ac:40:db:ce:cf:d2:e4:3e:f3:bd:7c:
         0e:70:2e:6f:72:c7:41:cb:ac:33:60:d4:73:e8:46:14:5f:f8:
         36:e7:06:68:cb:1b:1c:2e:95:ef:81:c6:18:8d:e0:70:fc:fd:
         38:bd:49:c2:48:78:59:02:f2:1e:f1:cb:6e:8d:69:22:45:1c:
         d9:57:6f:00:6c:06:60:10:95:a0:1e:08:79:c8:b3:ca:aa:a6:
         4b:d0:49:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+wveWa6HgVbv28wQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl
YzhhMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk
NGQ3YjE5ZDctNDQ4NC00NjBiLTliMGQtMjc2YWRlZTZlYTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXW9cZPA1vulaZUSJ9ERH027+jjr5W+hCsKK
4b1MMaO/3T15rem7SEJLe8GlLenLgv+G2u/GQ+lMZFLJ3qzehZ2QDZQgAVE2KjjG
gMaZGYrS7bFVUE2z2NwGtd9GRrGL9Z8Nf2hR/RzfAAvbdlgZnnaBDo0iItjd45GT
G4Om41rVp/6tN0fygHf9x2Llfg0+WBkJXz99moizXw7Gd2mIMm4wxdrLt2myfVpV
a3hdJxnsgFLC3zPg2spcBgUHpQUWVibTNx39/4QMZ/Z5PEG3TAWnNtW3uJNxgq2n
+eAl0bhdnEjMVdiphrCC03gkahm835Egfm7q8yRoCSByFp9f4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM/VuvmPx523dKreJDckh7G0+ZqTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy
NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvMWMwYTc2Y2QtYTg0OC0z
NDdhLTg1MzQtYmI4MTExN2RlMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh
MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm
ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh
NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJOxeeehBLSzEidDd+ksQA6YkDwxDC0z1qN8HbXXagKnX6TeIen5CVCl
a44deH2s4pKgwmEmTgSG482YVbONYKjgPXuVrrB93h7H4q5mBbTAmQmMhMl19FMj
mpETxRAv/qOdgdmes7HPunYn7u+vvkIyZdVXGuuf/0ubmxHn8vCJo/6RGSCjOcvg
ZYc/FLFYdjj0nDEJN73Gl9tqohsiYGjXc9zCbWqbSiSsQNvOz9LkPvO9fA5wLm9y
x0HLrDNg1HPoRhRf+DbnBmjLGxwule+BxhiN4HD8/Ti9ScJIeFkC8h7xy26NaSJF
HNlXbwBsBmAQlaAeCHnIs8qqpkvQSTg=
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:29:20 2026 by rpki-client