Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/461737d8-0107-3f20-9ade-835dfefc5de8.roa
File:                     461737d8-0107-3f20-9ade-835dfefc5de8.roa (raw, json)
Hash identifier:          WtGluuDtgwC8srC7BB1lxriXd/5+zWtYWgIlv89EEdg=
Subject key identifier:   BD:1D:42:D4:59:A5:12:A5:99:63:67:B5:9B:DB:89:29:8C:82:9B:9C
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584FB93BAD1A76D91EB74392BC40
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/461737d8-0107-3f20-9ade-835dfefc5de8.roa
Signing time:             Wed 04 Nov 2026 02:00:13 +0000
ROA not before:           Wed 04 Nov 2026 02:00:13 +0000
ROA not after:            Tue 02 Feb 2027 02:00:13 +0000
asID:                     63360
IP address blocks:        168.225.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b9:3b:ad:1a:76:d9:1e:b7:43:92:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Nov  4 02:00:13 2026 GMT
            Not After : Feb  2 02:00:13 2027 GMT
        Subject: CN=cbfc992b-1913-44d4-906a-6edd9dbe060e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8a:b9:c5:e3:bc:cc:13:00:96:5c:87:da:17:
                    14:82:d7:a9:de:45:91:43:53:41:73:ff:c0:fe:ea:
                    fc:6a:26:d1:00:3f:44:f6:1f:43:9a:18:00:73:9f:
                    d9:93:8a:2f:b7:36:44:19:9b:54:4b:92:83:3e:fb:
                    a1:9f:78:4b:ad:41:6e:f3:58:0a:35:d2:b1:10:6d:
                    12:86:fc:fd:9c:00:07:9b:06:df:bf:87:73:4b:d7:
                    15:f8:7c:c8:20:eb:b3:ce:4f:fc:54:11:c6:e9:55:
                    9e:e5:b2:bd:79:d1:2e:4a:a6:c3:77:fb:dc:66:ec:
                    60:07:33:fd:6d:c1:e9:da:17:16:d5:22:01:f8:09:
                    42:52:53:fa:35:3b:46:4f:ac:54:7f:55:d9:84:3c:
                    be:b2:fa:6a:93:9b:c2:ca:62:f6:8c:c3:50:f8:a5:
                    cf:c9:94:70:a8:19:c8:56:b8:d2:e3:31:4d:f7:06:
                    70:e5:ea:2a:f6:d2:86:ae:93:90:f5:99:b0:63:4f:
                    4a:3f:83:dc:65:93:d5:46:a7:82:8c:1c:37:05:eb:
                    dd:ca:bb:bb:e6:37:10:3e:37:9c:d4:92:ec:ac:19:
                    98:8c:9e:d8:f1:a5:07:35:78:ba:da:3b:ec:73:2f:
                    29:8a:2e:10:e7:9e:f1:68:9e:3e:1e:12:79:bb:ab:
                    12:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1D:42:D4:59:A5:12:A5:99:63:67:B5:9B:DB:89:29:8C:82:9B:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/461737d8-0107-3f20-9ade-835dfefc5de8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:44:60:1d:03:59:e2:e5:4b:c2:2f:ce:c5:88:62:73:70:cb:
         62:da:f3:5c:40:0d:1c:76:41:bc:f0:75:d1:30:ce:4d:d4:96:
         69:07:33:9a:bf:5b:e5:34:72:45:b8:b0:94:dc:d4:51:86:bd:
         83:d5:d6:3e:6d:57:f3:80:4b:37:62:9a:73:b8:48:78:ff:41:
         56:2e:e4:de:01:10:91:d0:c2:63:6f:91:52:29:a8:c5:9c:21:
         e2:f7:03:b6:b8:c1:fb:93:58:72:e9:9b:01:5c:a2:d3:fc:9c:
         a5:e6:8e:4f:a8:12:3d:a0:b6:05:54:33:a5:38:86:2a:9b:66:
         70:09:00:1c:08:e0:fc:bf:9b:4b:fb:6a:4d:54:3e:38:0a:63:
         c1:0c:2a:89:bf:45:7c:b3:00:73:fa:83:13:8f:b7:63:cb:78:
         3d:c7:ea:37:d0:9e:ab:fb:5c:58:8a:66:bb:73:dc:dd:6e:3f:
         84:10:ea:08:30:65:14:3b:3e:87:19:4a:17:6e:cd:07:ab:d2:
         18:15:90:30:39:88:a6:54:00:d6:50:56:c5:bb:d0:59:52:39:
         70:54:95:4c:c4:61:1f:31:2c:a4:a7:2d:0e:df:bb:0d:c5:14:
         77:8b:6c:cf:86:10:da:1b:0c:76:19:31:0e:61:28:5f:24:3a:
         3d:77:1f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:29:35 2026 by rpki-client