Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/7cf7f445-90db-34c4-8782-16c003bf21d8.roa
File:                     7cf7f445-90db-34c4-8782-16c003bf21d8.roa (raw, json)
Hash identifier:          bgH/dVDRdS36iVGbMLo3WqZjGnBdxGLuTIGz46kUL54=
Subject key identifier:   5F:E0:CA:B0:91:41:D2:E5:F0:5C:11:7A:F3:1D:ED:98:AD:80:FF:CA
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584D8C2A9AD86F9DBB6EEA3F4FB0
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/7cf7f445-90db-34c4-8782-16c003bf21d8.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     63360
IP address blocks:        168.225.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:9a:d8:6f:9d:bb:6e:ea:3f:4f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=e389ced3-b1b4-4727-af9e-2e5ade6b02b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:27:cd:90:04:43:65:d8:42:bf:26:52:3a:18:
                    e8:58:5b:ec:bd:85:ae:b1:18:ad:87:f5:24:db:60:
                    7a:bd:63:ef:26:62:df:30:2d:87:5b:83:86:5a:fd:
                    78:28:b5:4e:96:e4:e7:e3:ad:34:dd:24:d0:f7:b4:
                    88:b8:f7:af:d0:fd:f7:5b:19:43:b0:66:46:df:39:
                    0d:21:d6:dc:5d:e5:5b:58:61:26:3a:7a:2f:7f:10:
                    c9:95:f8:fd:63:4d:e3:d3:e3:f2:41:29:b2:0c:97:
                    dc:3b:52:3b:b7:fe:cb:82:f2:3e:20:47:7a:ca:bc:
                    6d:1d:0e:99:7f:80:3b:95:6b:a8:c5:10:cb:13:02:
                    1e:71:eb:89:03:27:71:99:d2:00:97:f1:4e:74:10:
                    9f:f0:0b:c3:79:ab:f2:09:67:77:f9:8b:af:d1:81:
                    0c:60:ff:fc:39:e8:c7:e6:44:6b:79:8c:36:8f:b5:
                    15:d7:9a:c4:af:1a:1e:5b:f8:c9:4f:12:f5:f5:9d:
                    d4:0a:9f:b5:6c:92:75:d1:65:c9:58:5f:36:17:78:
                    9b:58:95:dd:ca:6c:77:81:2b:26:ab:a2:6a:3b:ac:
                    0d:d9:cf:cf:19:57:05:a3:2a:e6:eb:1f:cd:ab:68:
                    eb:a6:e9:c0:9b:9b:56:f3:07:a2:fc:bf:5c:49:93:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E0:CA:B0:91:41:D2:E5:F0:5C:11:7A:F3:1D:ED:98:AD:80:FF:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/7cf7f445-90db-34c4-8782-16c003bf21d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:81:f2:38:59:e1:01:bd:b4:3a:37:00:f8:47:d6:dd:be:7c:
         c2:9c:1b:97:74:c8:28:b9:26:29:40:69:ae:90:28:1d:7c:22:
         bd:c0:70:23:9e:1e:d4:88:ab:42:fc:e8:ee:63:ee:4b:77:4a:
         f6:ac:9c:df:65:9b:62:a7:f7:46:77:50:d6:86:84:2d:17:8e:
         bf:9d:8e:48:c5:9c:9b:a0:fd:94:b7:48:03:f8:ea:f9:20:ce:
         33:dc:50:a1:3d:94:fd:5b:58:91:6f:cc:f3:60:68:e6:55:55:
         d5:4e:9e:87:10:bc:4c:75:94:04:a4:ca:ae:e8:18:57:2e:e3:
         ba:12:05:f4:b0:00:e5:f5:01:fa:2e:a7:d5:5e:45:b3:89:15:
         62:e1:09:49:aa:e8:77:73:1f:af:0f:b3:32:f8:98:f0:78:0b:
         19:59:c5:1f:a5:db:3c:a4:ad:09:8c:85:05:35:e6:02:db:e3:
         7b:0d:16:e6:a9:da:cb:41:55:98:9e:89:f3:61:60:ff:41:7e:
         4a:f0:2b:81:b8:aa:bb:1d:8a:58:1f:3c:81:b8:98:80:47:1f:
         61:e6:c2:b0:b4:1f:d6:9e:d4:87:cb:2a:71:52:ab:d1:4b:38:
         3c:52:aa:20:ce:d9:3a:95:d2:03:45:ba:94:e5:da:10:44:43:
         d6:a7:78:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:20:19 2026 by rpki-client