Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/0ab3783e-1cea-3325-abe6-b2e587195bf8.roa
File:                     0ab3783e-1cea-3325-abe6-b2e587195bf8.roa (raw, json)
Hash identifier:          sGjJAB8pyv6h7xWu3EUCtunpAf93kjstIJsLiNOiwYA=
Subject key identifier:   F1:45:41:6E:B6:07:CB:CD:40:29:22:A4:8D:E1:FB:C3:6F:52:D4:B1
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584F0ED243D73730A2BE142DA300
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/0ab3783e-1cea-3325-abe6-b2e587195bf8.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     63360
IP address blocks:        168.225.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:43:d7:37:30:a2:be:14:2d:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=d2f976c4-91dd-46f7-bd24-9831d4e299c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:88:29:34:7b:e5:ec:d1:a9:05:f7:63:c2:f6:
                    ff:e6:f2:e5:38:35:20:2e:bf:7b:c8:74:3c:7c:52:
                    a3:9e:fd:b8:29:d8:40:45:85:88:12:6a:89:52:fd:
                    b3:2a:f5:34:07:87:6a:4c:9e:5c:4e:b0:10:73:0e:
                    6e:cc:79:70:cd:54:9d:5b:31:fd:9b:c8:a0:81:eb:
                    d4:35:35:53:39:00:a3:cf:30:ff:cf:b0:47:ca:eb:
                    a6:97:6d:d0:4b:48:55:61:f3:9d:28:7d:3a:c1:4f:
                    20:67:7f:16:5c:2b:20:a7:b5:81:34:28:7f:1b:31:
                    29:fa:49:d3:d4:6c:55:bb:1e:3f:ff:9e:5c:4e:d8:
                    a8:73:ea:c6:9d:5a:76:e1:55:d8:b8:a5:88:ea:2f:
                    bd:62:20:72:e0:60:b8:85:f0:aa:e7:e1:6b:29:d3:
                    6c:4f:1e:3c:75:a6:a2:35:23:d4:1a:2e:7a:9e:67:
                    9c:16:9b:31:08:97:a3:3b:59:2c:b0:79:fd:29:0f:
                    7e:4a:33:c6:a9:4c:8c:dc:86:0f:d2:78:d7:e6:8f:
                    75:b5:0c:98:6a:14:c6:ee:a6:f0:2b:7b:fc:47:23:
                    33:0d:cd:44:6d:fa:d1:69:83:ec:bf:11:d9:b8:8a:
                    38:8d:00:a7:c0:c8:1a:19:df:b8:38:f6:1c:fd:6a:
                    dd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:45:41:6E:B6:07:CB:CD:40:29:22:A4:8D:E1:FB:C3:6F:52:D4:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/0ab3783e-1cea-3325-abe6-b2e587195bf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:6f:d9:44:47:6c:a1:d0:d0:74:19:cd:c1:7b:1e:ad:53:6b:
         f1:d6:c0:60:d9:c0:dd:68:b9:0d:7d:ed:9f:e6:ed:6d:45:07:
         8c:38:e3:81:f0:38:af:d4:02:bc:4c:d2:56:00:75:95:b9:5f:
         45:0b:97:67:cc:25:83:50:0b:5a:43:97:af:e2:c5:56:39:0a:
         d0:59:f6:92:b1:82:44:6d:e6:16:be:25:d5:1d:79:27:2a:b1:
         f2:26:db:b3:36:74:e1:78:70:9a:c0:d1:8f:b9:d7:48:d0:2e:
         90:74:ac:d7:db:ff:21:84:73:c2:27:af:27:2b:b9:78:d7:84:
         1e:1e:94:cb:f9:ef:8d:47:17:94:35:ed:81:66:cd:43:85:bf:
         0f:44:97:91:c3:6d:5d:e8:a8:64:df:a4:4b:6e:65:32:36:6d:
         65:cb:90:7a:e9:e0:fc:cb:3c:05:0c:33:aa:57:39:12:24:ff:
         7e:f4:f3:9b:00:08:fd:3c:ea:02:f3:05:1b:a4:2b:a4:5e:af:
         af:92:7f:31:d1:88:90:d1:bc:1e:b3:5d:ca:39:68:cd:9e:77:
         9e:47:33:6b:b9:08:cb:b1:a0:d6:39:c0:e5:3a:d6:9d:70:03:
         96:ee:81:77:fb:a4:1c:99:66:e1:14:a5:fb:d1:45:18:a1:7c:
         84:6b:28:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0kPXNzCivhQtowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl
YzhhMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk
ZDJmOTc2YzQtOTFkZC00NmY3LWJkMjQtOTgzMWQ0ZTI5OWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIgpNHvl7NGpBfdjwvb/5vLlODUgLr97yHQ8
fFKjnv24KdhARYWIEmqJUv2zKvU0B4dqTJ5cTrAQcw5uzHlwzVSdWzH9m8iggevU
NTVTOQCjzzD/z7BHyuuml23QS0hVYfOdKH06wU8gZ38WXCsgp7WBNCh/GzEp+knT
1GxVux4//55cTtioc+rGnVp24VXYuKWI6i+9YiBy4GC4hfCq5+FrKdNsTx48daai
NSPUGi56nmecFpsxCJejO1kssHn9KQ9+SjPGqUyM3IYP0njX5o91tQyYahTG7qbw
K3v8RyMzDc1EbfrRaYPsvxHZuIo4jQCnwMgaGd+4OPYc/WrdvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPFFQW62B8vNQCkipI3h+8NvUtSxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy
NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvMGFiMzc4M2UtMWNlYS0z
MzI1LWFiZTYtYjJlNTg3MTk1YmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh
MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm
ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh
NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdv2URHbKHQ0HQZzcF7Hq1Ta/HWwGDZwN1ouQ197Z/m7W1FB4w444Hw
OK/UArxM0lYAdZW5X0ULl2fMJYNQC1pDl6/ixVY5CtBZ9pKxgkRt5ha+JdUdeScq
sfIm27M2dOF4cJrA0Y+510jQLpB0rNfb/yGEc8InrycruXjXhB4elMv5741HF5Q1
7YFmzUOFvw9El5HDbV3oqGTfpEtuZTI2bWXLkHrp4PzLPAUMM6pXORIk/37085sA
CP086gLzBRukK6Rer6+SfzHRiJDRvB6zXco5aM2ed55HM2u5CMuxoNY5wOU61p1w
A5bugXf7pByZZuEUpfvRRRihfIRrKCU=
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:34:03 2026 by rpki-client