Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa
File:                     ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa (raw, json)
Hash identifier:          NpI/AJ24P0FJznHEjS0Bs6HiukKriqg9zPgaoKvDDv4=
Subject key identifier:   84:77:36:38:C7:C1:F4:90:E1:1C:8B:7B:06:EE:2B:FC:06:CC:74:17
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584FB0BDF979FD7CD0609FCA5240
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa
Signing time:             Sun 01 Nov 2026 01:00:13 +0000
ROA not before:           Sun 01 Nov 2026 01:00:13 +0000
ROA not after:            Sat 30 Jan 2027 02:00:13 +0000
asID:                     63360
IP address blocks:        168.225.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b0:bd:f9:79:fd:7c:d0:60:9f:ca:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Nov  1 01:00:13 2026 GMT
            Not After : Jan 30 02:00:13 2027 GMT
        Subject: CN=d232d912-0bb8-4688-9ed1-7392302082e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f5:16:f6:55:66:ad:f5:55:50:19:9a:1c:59:
                    8a:f7:4f:8e:4d:58:48:92:f3:64:6b:b0:7a:87:67:
                    87:f5:f3:cc:26:28:a6:bb:74:c4:d9:fe:53:1e:b6:
                    c9:60:8e:15:8d:18:2a:99:ca:b4:be:00:f7:21:66:
                    e3:cb:a8:99:5a:29:03:61:5e:16:5a:21:13:c1:14:
                    51:e1:ab:ab:2e:1a:22:6c:6c:b8:b1:9d:d7:75:96:
                    18:9d:31:93:98:0e:36:9f:16:c2:d1:20:f4:73:19:
                    ed:81:6c:be:29:29:ee:f6:71:ba:a6:57:37:b6:4c:
                    c2:0a:ed:d9:ea:54:f2:b8:e1:62:1c:95:cb:d1:f6:
                    ab:65:3c:24:fd:76:42:84:af:1b:ff:ef:60:24:76:
                    15:19:27:4a:13:ae:d3:2e:04:80:00:99:38:3d:4d:
                    13:45:7e:a9:15:1e:5d:1a:f8:62:61:b0:d0:7c:8d:
                    a0:aa:ee:56:15:23:53:7d:e4:c3:c7:90:c0:b1:e6:
                    31:1b:c9:19:85:9f:39:64:53:5e:7a:b5:32:f9:76:
                    cc:a0:51:56:6f:7c:f6:a3:29:de:38:7e:11:f8:f9:
                    13:8e:98:85:44:42:08:63:55:76:6f:7a:e8:4c:90:
                    b0:08:de:f4:b0:32:f5:33:1a:92:82:ed:84:e2:5c:
                    ac:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:77:36:38:C7:C1:F4:90:E1:1C:8B:7B:06:EE:2B:FC:06:CC:74:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:0d:0b:05:93:43:07:27:9b:e3:72:4c:55:d0:f2:d9:f5:09:
         bd:7d:f7:3c:ab:17:34:ae:46:34:9e:3b:f4:f7:b6:04:1d:c5:
         a4:fd:14:55:f5:5f:ba:8b:2f:98:33:a2:27:c1:24:b8:a9:db:
         cc:21:8b:2f:45:7a:2a:27:81:ef:3f:c6:1b:1f:36:22:de:3b:
         7f:07:84:da:cd:fd:87:56:8b:e7:65:97:b3:2c:fc:7a:e2:36:
         8e:70:34:79:7a:84:e6:91:4e:3a:ed:17:a6:92:32:f2:5c:e4:
         66:12:41:ae:0e:86:73:0a:8c:30:63:be:d6:cb:ee:c8:e1:88:
         95:17:02:26:61:97:2c:5c:67:cc:c5:83:52:9c:19:f0:e7:5f:
         67:82:57:89:d1:0f:12:9a:78:8a:c5:d0:61:75:2b:48:a4:17:
         35:52:ef:83:d5:22:bd:53:86:21:4e:ec:b6:01:d7:b4:f8:11:
         24:0a:d4:84:79:38:1d:03:f0:36:f5:61:e8:57:68:ed:36:65:
         0e:9f:88:75:09:9f:9c:f4:ba:d3:a8:b5:09:f1:c6:34:c1:38:
         6c:0c:de:41:79:5c:61:aa:53:af:2f:88:63:e9:6b:2b:92:91:
         e2:b6:44:5e:8f:16:ce:94:60:7b:74:03:be:96:31:4b:48:d0:
         56:bd:32:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:29:39 2026 by rpki-client