Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/e7031ac6-3b56-3ae9-9593-3096f2210f21.roa
File:                     e7031ac6-3b56-3ae9-9593-3096f2210f21.roa (raw, json)
Hash identifier:          QvIQ44qM/sK6nh3wURh75rBXB3vT6nL1wBPslVcDZyE=
Subject key identifier:   8C:E4:60:2E:11:E8:E5:B8:80:9B:AC:0A:7A:EF:4D:E0:EB:5C:92:3C
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584B583C8888101580AF34F45940
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/e7031ac6-3b56-3ae9-9593-3096f2210f21.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     63360
IP address blocks:        168.225.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:88:88:10:15:80:af:34:f4:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=de6786b4-2d84-4cf5-8544-b2436972bf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:95:5a:0e:b5:c6:74:17:ed:d9:de:f3:af:
                    6a:43:ac:28:39:4b:90:9e:97:3f:d6:58:d9:12:47:
                    af:4b:b3:e1:a4:45:04:4c:e7:ef:14:28:6f:7f:54:
                    fc:f7:49:82:07:56:0e:f0:08:94:cf:eb:6b:25:d9:
                    ec:a3:fa:6b:92:74:e2:ee:2a:4a:52:74:02:3d:ed:
                    18:78:87:c6:18:75:ae:8e:db:33:d3:fc:bc:ec:b4:
                    b2:4f:df:a5:37:5f:5c:bd:31:1d:7f:d0:1c:4c:0f:
                    b2:53:27:2d:40:bb:55:74:de:a8:72:95:4e:d2:bf:
                    3c:5d:09:60:f8:78:45:9e:91:00:6c:9e:b5:8b:ce:
                    26:49:4f:92:32:4a:b1:d2:d1:36:e4:b8:d7:6d:55:
                    ab:ab:ba:f1:a8:ac:63:bc:84:1c:de:c6:8f:2a:b7:
                    5e:0e:ab:af:a8:de:6f:94:ee:5c:94:9c:8c:38:50:
                    6e:0b:5e:8e:df:72:40:02:80:a5:a1:15:44:53:d8:
                    6f:8d:a0:9b:d4:8a:0f:86:b4:f8:05:08:25:66:8d:
                    26:1e:db:b3:93:ca:ec:41:b6:61:de:15:52:96:e1:
                    7a:5f:0c:7e:e0:bd:8f:6d:07:e0:1c:7e:a0:1f:17:
                    b3:46:31:6f:ef:4a:b3:b7:17:3d:d8:43:53:aa:a0:
                    a7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E4:60:2E:11:E8:E5:B8:80:9B:AC:0A:7A:EF:4D:E0:EB:5C:92:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/e7031ac6-3b56-3ae9-9593-3096f2210f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:bd:7d:98:a1:ba:24:97:d4:03:b5:ee:18:53:56:6c:f6:60:
         ac:77:3b:0a:21:44:d1:b6:d9:34:aa:8d:03:e6:c3:9a:72:32:
         59:98:9f:f5:af:35:0b:b2:86:41:d9:ee:14:70:f4:cb:c9:1e:
         bf:dd:51:17:23:69:0b:67:29:70:9c:78:b7:1e:fd:29:7b:ba:
         7f:2c:f8:0f:9c:7d:d8:77:c5:2c:35:9d:2c:ee:ac:ea:a3:00:
         ae:b3:f5:14:56:30:e7:19:91:65:be:c0:ac:1c:c9:b3:d0:b0:
         2f:b1:9b:54:78:c6:8c:0b:07:da:1b:47:00:04:61:19:13:d2:
         1d:24:ee:54:bf:f3:32:e3:08:cb:66:d4:c6:6c:03:ce:57:15:
         d7:63:dc:33:bd:a5:71:1f:cb:f6:49:f4:9b:bb:8d:ff:84:fe:
         ea:66:25:75:6e:f3:a1:d2:81:4b:d7:1d:73:a1:d0:f1:a0:38:
         bb:cb:9e:cb:ba:66:d9:46:ef:fb:b5:fc:59:86:56:12:ed:c3:
         c5:32:6e:f1:6a:53:17:e4:4e:f1:6b:2a:20:84:d8:57:ab:c6:
         08:67:35:91:a2:d5:af:e0:4e:31:1b:7d:14:56:2a:5c:59:5b:
         3f:63:18:3c:50:f8:15:ca:44:fa:a3:9f:e8:9c:3a:b8:39:63:
         0d:a9:c3:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIiIEBWArzT0WUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl
YzhhMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk
ZGU2Nzg2YjQtMmQ4NC00Y2Y1LTg1NDQtYjI0MzY5NzJiZjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN+VWg61xnQX7dne869qQ6woOUuQnpc/1ljZ
EkevS7PhpEUETOfvFChvf1T890mCB1YO8AiUz+trJdnso/prknTi7ipKUnQCPe0Y
eIfGGHWujtsz0/y87LSyT9+lN19cvTEdf9AcTA+yUyctQLtVdN6ocpVO0r88XQlg
+HhFnpEAbJ61i84mSU+SMkqx0tE25LjXbVWrq7rxqKxjvIQc3saPKrdeDquvqN5v
lO5clJyMOFBuC16O33JAAoCloRVEU9hvjaCb1IoPhrT4BQglZo0mHtuzk8rsQbZh
3hVSluF6Xwx+4L2PbQfgHH6gHxezRjFv70qztxc92ENTqqCniQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIzkYC4R6OW4gJusCnrvTeDrXJI8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy
NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvZTcwMzFhYzYtM2I1Ni0z
YWU5LTk1OTMtMzA5NmYyMjEwZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh
MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm
ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh
NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJy9fZihuiSX1AO17hhTVmz2YKx3OwohRNG22TSqjQPmw5pyMlmYn/Wv
NQuyhkHZ7hRw9MvJHr/dURcjaQtnKXCceLce/Sl7un8s+A+cfdh3xSw1nSzurOqj
AK6z9RRWMOcZkWW+wKwcybPQsC+xm1R4xowLB9obRwAEYRkT0h0k7lS/8zLjCMtm
1MZsA85XFddj3DO9pXEfy/ZJ9Ju7jf+E/upmJXVu86HSgUvXHXOh0PGgOLvLnsu6
ZtlG7/u1/FmGVhLtw8UybvFqUxfkTvFrKiCE2FerxghnNZGi1a/gTjEbfRRWKlxZ
Wz9jGDxQ+BXKRPqjn+icOrg5Yw2pw94=
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:00:36 2025 by rpki-client