Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f7c64320-d4d7-3163-8a7e-4ab6fed6afbe.roa
File:                     f7c64320-d4d7-3163-8a7e-4ab6fed6afbe.roa (raw, json)
Hash identifier:          F39tJK3inG1VE2HPETD1DRqBlEQDkU+7X//265/7xDY=
Subject key identifier:   0D:3F:6E:A7:1A:AD:69:EE:7B:2C:6C:D4:D1:9E:CD:53:5E:68:4F:B4
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584DCAFAE9908C866D942B793D80
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f7c64320-d4d7-3163-8a7e-4ab6fed6afbe.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     63360
IP address blocks:        168.225.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:e9:90:8c:86:6d:94:2b:79:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=bf8f6d0b-5a2e-4ac8-a760-075af032ed7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:76:d1:43:27:5b:f1:26:1b:68:81:97:53:
                    8c:8f:aa:9a:2b:d8:cb:df:ae:bc:19:1d:69:14:bc:
                    66:9e:0e:3b:98:d5:31:2e:97:8d:d7:c2:1f:37:c8:
                    59:d0:70:e8:b9:ac:42:b6:34:f7:40:78:db:c9:7f:
                    1b:d1:31:05:54:5d:a1:f5:20:c6:a1:f0:6e:ab:e4:
                    e3:81:97:98:f3:2d:4b:ef:15:cd:f5:a2:b6:18:30:
                    fb:da:78:08:1c:7d:25:66:87:47:c5:62:ee:37:72:
                    7d:83:a5:11:6f:06:f7:71:29:d8:de:3d:4d:71:55:
                    b2:6e:51:ed:06:90:15:70:5d:df:0e:14:a7:a5:f1:
                    9f:c3:5f:14:95:0f:f2:04:57:12:16:31:d8:ff:e2:
                    3b:b7:a6:96:99:04:59:30:7a:3b:37:f8:79:3c:53:
                    6c:23:10:60:a1:b7:af:f4:62:e0:26:a2:66:50:40:
                    6c:6f:33:16:28:1a:e7:cd:08:b5:2b:a3:27:bc:39:
                    6b:d0:0c:6c:d2:48:ad:d9:63:4e:f7:03:b6:41:ab:
                    3b:19:7a:98:df:75:b2:55:b1:a7:52:7b:55:31:4e:
                    bb:82:02:a1:2e:d0:a5:75:53:d4:f1:3e:1b:82:e7:
                    c3:ac:f5:a9:90:23:e5:05:75:67:42:8e:6b:c4:8c:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3F:6E:A7:1A:AD:69:EE:7B:2C:6C:D4:D1:9E:CD:53:5E:68:4F:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f7c64320-d4d7-3163-8a7e-4ab6fed6afbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b6:1b:86:bf:5a:df:74:58:eb:da:b2:81:77:d3:bc:1e:a7:
         0e:6e:32:a7:e2:f7:50:87:a5:bf:c0:be:27:0d:82:56:2d:a6:
         2d:da:ea:4c:78:62:71:e9:45:d4:d5:c4:ed:6f:62:e9:de:2f:
         84:9c:5e:43:2f:c1:b0:62:81:20:ff:5b:8b:08:ac:48:4b:5c:
         ac:bf:0f:86:d1:21:f1:8b:a7:e1:c4:ba:1d:ee:39:34:81:95:
         37:9f:97:05:7e:f3:91:f7:44:e9:17:a8:19:fa:6b:1d:32:2c:
         fa:a8:c2:8a:65:95:14:88:5f:76:e3:30:30:d4:e5:f8:ea:41:
         b6:0d:0c:96:de:3a:dd:ea:ee:23:ee:7c:c4:b2:b5:9e:07:c1:
         7a:80:fc:17:1a:02:50:b5:9d:47:64:c0:84:e3:ed:dd:38:2a:
         b1:33:05:97:36:0f:d4:0b:41:2a:42:bd:69:59:5e:e8:04:34:
         e9:c9:12:d7:38:be:2f:de:5d:59:c1:82:d7:e6:23:f2:84:65:
         2c:a4:31:28:c5:c0:5e:09:bd:03:d4:83:bc:29:91:91:34:00:
         d8:11:79:5a:bd:da:a0:7e:af:87:da:38:ce:12:fb:66:3b:be:
         f6:de:13:77:96:5e:e4:3d:ec:59:08:20:84:8a:28:c7:09:55:
         f5:0b:c7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:06:01 2026 by rpki-client