Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fdd13daa-2091-3d8d-aaaa-84c334ee0e73.roa
File:                     fdd13daa-2091-3d8d-aaaa-84c334ee0e73.roa (raw, json)
Hash identifier:          IZshlCmU5ahqjayZH74Xra95v8LoBdH2SfYpbhreiNg=
Subject key identifier:   49:89:EE:4A:9A:0D:FC:29:94:5E:6F:D4:16:B2:98:58:D2:6F:70:9E
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584FB0BDF95EE3183D2ED1F1C340
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fdd13daa-2091-3d8d-aaaa-84c334ee0e73.roa
Signing time:             Sun 01 Nov 2026 01:00:13 +0000
ROA not before:           Sun 01 Nov 2026 01:00:13 +0000
ROA not after:            Sat 30 Jan 2027 02:00:13 +0000
asID:                     63360
IP address blocks:        168.225.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b0:bd:f9:5e:e3:18:3d:2e:d1:f1:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Nov  1 01:00:13 2026 GMT
            Not After : Jan 30 02:00:13 2027 GMT
        Subject: CN=b17a6962-b4b2-44b1-940d-b75701429912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:20:1e:57:80:2f:94:da:a0:a5:c3:55:e6:c4:
                    18:c1:f5:e4:f0:f1:1f:d8:5e:36:46:a4:61:42:cf:
                    f1:0c:f7:86:e8:0c:c7:54:4d:29:66:d3:dd:e7:82:
                    c0:08:ec:ec:74:24:92:ba:13:5a:3e:80:73:f8:85:
                    36:e7:15:a0:44:bb:5f:e8:18:e5:9d:52:a7:52:bd:
                    30:cf:33:b6:e2:f2:28:1e:d8:17:c6:9f:f8:95:c7:
                    39:1d:58:2c:7a:ee:62:88:36:0b:16:89:32:4f:ff:
                    b2:67:5a:53:a3:78:b1:e8:79:05:dc:77:57:ed:b4:
                    29:29:55:b6:c4:ed:e8:0a:bf:f7:2e:89:9f:c0:bf:
                    f8:c7:f3:5f:c8:1f:6b:65:45:17:e9:3b:90:6c:c4:
                    4e:c8:e4:30:f7:64:40:a6:22:95:5a:41:1b:9e:c5:
                    f1:a6:fe:af:3a:8e:a1:08:16:0b:2a:04:1e:f3:f5:
                    f1:b0:8f:c3:a7:af:89:a3:d4:bb:d0:65:7c:bb:e6:
                    85:f9:37:f6:5a:33:c7:b4:7e:39:60:0d:10:8c:f3:
                    5c:0f:5e:95:19:79:95:62:24:62:56:b9:96:56:8b:
                    3c:94:da:85:66:1d:33:5d:86:94:6e:b3:e0:5c:96:
                    d5:c6:94:90:17:f4:44:ad:1e:2e:f5:ed:7c:51:84:
                    3a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:89:EE:4A:9A:0D:FC:29:94:5E:6F:D4:16:B2:98:58:D2:6F:70:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fdd13daa-2091-3d8d-aaaa-84c334ee0e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:28:3f:14:c7:77:1d:91:1b:ad:84:3c:63:cd:77:29:d8:8c:
         2b:51:02:67:d7:ac:62:a7:4b:f1:ce:eb:b0:08:3e:eb:1c:dc:
         51:c2:58:31:65:bd:7b:e0:cd:14:7b:49:85:e7:6a:85:70:aa:
         09:4a:df:fc:42:1c:7e:fd:a4:17:d3:2c:47:bd:e4:3c:8a:04:
         32:37:00:a4:36:a3:18:ce:4f:1a:7b:ee:5d:e6:40:6a:84:77:
         99:a9:56:71:5a:8d:47:24:39:cc:51:6b:2b:db:f9:7b:89:21:
         64:4d:28:19:b6:05:a7:dc:ee:9c:a2:9d:c5:fd:61:97:ec:87:
         27:e3:fa:88:23:2c:38:54:42:38:d4:a5:c8:e5:e1:43:f3:5b:
         a4:4e:5f:a6:93:a3:65:e0:31:77:fd:46:77:01:cd:7f:e0:2a:
         5c:73:3a:0c:35:a1:20:90:c0:ef:a9:c9:d9:09:2c:37:7b:ba:
         0f:b4:b6:37:d3:69:bd:af:b4:83:58:d9:d2:35:61:b9:25:0f:
         fb:54:48:7c:13:f8:24:21:b9:c2:7b:df:e9:32:1c:ac:50:22:
         22:8f:d7:c8:18:2a:78:2d:e5:44:3c:7f:c6:a0:e7:d0:7e:68:
         fd:67:73:c7:30:7a:b5:65:4c:36:58:1b:52:5e:4b:3c:4e:0f:
         72:e8:92:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:29:03 2026 by rpki-client