Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa
File:                     ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa (raw, json)
Hash identifier:          Rpi4K5a152w6jAt3uB1SsE+EtbbrsFkJ2CMkbPxRwOw=
Subject key identifier:   D8:99:F2:D0:B5:15:02:CD:C3:60:1D:08:06:9B:ED:57:F4:E5:00:02
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584AE9F67F4A36B98B5A1647FB00
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     63360
IP address blocks:        168.225.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:7f:4a:36:b9:8b:5a:16:47:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=73614e2c-8aaf-4035-917e-7c58de9bb268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:eb:b9:7a:22:8b:50:1a:08:34:b6:7b:30:40:
                    3c:9a:e3:d7:ab:4f:72:13:74:00:f7:95:d1:91:67:
                    cd:7f:db:c1:89:e7:f2:00:ef:21:a7:93:26:28:ee:
                    1b:90:1d:66:6b:2d:d9:11:dd:2f:2e:58:4a:27:45:
                    2b:cf:a7:bb:f1:d4:88:9f:51:3a:23:21:68:a2:21:
                    13:f1:f0:b1:b5:da:5e:4f:8e:76:47:41:f3:0e:71:
                    b1:05:2f:cc:ce:3c:8f:70:4c:77:2e:d6:96:30:f2:
                    14:d6:ac:97:39:d7:a3:87:67:99:44:cc:0a:de:ee:
                    89:3b:05:54:fd:c7:3f:81:1b:0d:92:fc:03:14:3b:
                    09:5e:7a:40:76:a8:4c:96:c6:6a:3c:4d:61:15:59:
                    a5:1e:b7:06:72:53:11:3f:a5:57:e6:20:41:09:83:
                    b7:13:9d:16:69:aa:55:c9:ac:06:71:db:e2:18:31:
                    70:7d:b4:ed:22:0a:4e:12:63:14:9d:f7:d6:6f:57:
                    b3:15:59:b3:e0:dc:88:81:40:33:36:3c:a9:7b:7a:
                    34:01:08:df:72:41:fe:43:29:c9:ae:17:cd:83:2c:
                    05:0a:70:94:10:96:3b:a8:95:43:73:33:70:05:5d:
                    28:6e:7c:57:13:bf:bd:6f:22:5b:f6:64:37:47:cd:
                    01:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:99:F2:D0:B5:15:02:CD:C3:60:1D:08:06:9B:ED:57:F4:E5:00:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:1a:8d:18:c0:51:17:23:ed:d3:8d:52:81:54:48:e6:0e:21:
         f5:37:ce:c9:54:99:73:2b:9d:be:6a:86:64:4d:7b:2a:ce:a2:
         87:99:a8:b0:26:a1:ed:39:ab:58:13:f5:ac:aa:5a:77:2b:2d:
         4a:43:29:e9:95:4f:06:79:bb:af:66:b4:7a:b2:0a:41:24:b2:
         5c:d7:57:d0:96:aa:91:55:de:ea:72:cc:6f:8e:81:63:e3:1b:
         62:b9:f1:03:08:af:6a:2c:17:d9:4c:8f:89:88:1f:b5:73:da:
         38:31:97:c8:b6:83:77:6c:2c:e8:f4:cd:99:91:61:63:17:3e:
         b1:45:45:5e:b9:05:79:fa:da:58:66:d4:d0:1f:8a:87:c3:a2:
         0e:2e:fd:6c:3a:ba:34:14:ed:f3:c6:e3:50:e1:0c:18:22:b6:
         2c:93:35:4a:38:43:79:a3:65:4f:97:ee:a9:5a:b5:b8:8f:54:
         5b:1b:0f:6e:e5:65:ba:84:48:98:88:19:58:34:59:e3:45:32:
         0e:20:6d:0d:c0:98:d2:59:6b:ec:3e:5e:db:2e:57:a9:22:03:
         f4:4d:14:19:7f:0f:2c:9c:99:ef:c7:47:9c:ee:77:3c:86:30:
         7f:48:12:23:bd:f5:ed:8a:fd:60:de:13:9c:53:f2:6e:2d:fa:
         2c:5e:b0:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9n9KNrmLWhZH+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl
YzhhMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk
NzM2MTRlMmMtOGFhZi00MDM1LTkxN2UtN2M1OGRlOWJiMjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+u5eiKLUBoINLZ7MEA8muPXq09yE3QA95XR
kWfNf9vBiefyAO8hp5MmKO4bkB1may3ZEd0vLlhKJ0Urz6e78dSIn1E6IyFooiET
8fCxtdpeT452R0HzDnGxBS/MzjyPcEx3LtaWMPIU1qyXOdejh2eZRMwK3u6JOwVU
/cc/gRsNkvwDFDsJXnpAdqhMlsZqPE1hFVmlHrcGclMRP6VX5iBBCYO3E50WaapV
yawGcdviGDFwfbTtIgpOEmMUnffWb1ezFVmz4NyIgUAzNjype3o0AQjfckH+QynJ
rhfNgywFCnCUEJY7qJVDczNwBV0obnxXE7+9byJb9mQ3R80BhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNiZ8tC1FQLNw2AdCAab7Vf05QACMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy
NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvYWMyMzY1NTAtY2Y3MS0z
YTc3LWE2YjEtNGVlZDM5ZDJhZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh
MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm
ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh
NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ8ajRjAURcj7dONUoFUSOYOIfU3zslUmXMrnb5qhmRNeyrOooeZqLAm
oe05q1gT9ayqWncrLUpDKemVTwZ5u69mtHqyCkEkslzXV9CWqpFV3upyzG+OgWPj
G2K58QMIr2osF9lMj4mIH7Vz2jgxl8i2g3dsLOj0zZmRYWMXPrFFRV65BXn62lhm
1NAfiofDog4u/Ww6ujQU7fPG41DhDBgitiyTNUo4Q3mjZU+X7qlatbiPVFsbD27l
ZbqESJiIGVg0WeNFMg4gbQ3AmNJZa+w+XtsuV6kiA/RNFBl/Dyycme/HR5zudzyG
MH9IEiO99e2K/WDeE5xT8m4t+ixesGY=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:51:02 2025 by rpki-client