Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/0dbe73ac-3f67-340e-aeda-9bf4f3053904.roa
File:                     0dbe73ac-3f67-340e-aeda-9bf4f3053904.roa (raw, json)
Hash identifier:          MqFwwWKV2VpaMr51UJIvsKycC/iEYGQ9t5wliDhk15k=
Subject key identifier:   F0:9C:6B:47:05:DB:AA:F8:84:B0:36:60:0A:CC:02:23:15:4A:DB:E0
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584E0865E8B45A18A7C0695D8B80
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/0dbe73ac-3f67-340e-aeda-9bf4f3053904.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     16509
IP address blocks:        168.225.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:e8:b4:5a:18:a7:c0:69:5d:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=a3497854-bec6-49ce-bc66-ef6b8362971f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ea:db:1d:3b:70:6e:41:81:a7:a3:75:b1:50:
                    da:78:a4:c1:c9:0e:94:93:73:c7:65:1a:71:28:e8:
                    6a:0d:7b:9f:6e:a5:4d:d9:41:19:e9:63:fc:90:dc:
                    4c:1b:f4:33:09:d5:55:d8:8f:b9:a6:f1:61:bc:a8:
                    ed:fd:9d:a6:c0:eb:e7:7c:b1:80:5a:32:f8:0b:68:
                    87:ba:47:5a:e7:9d:ee:4c:8a:15:f1:6f:a2:e8:38:
                    ce:b5:b1:83:5d:5d:37:f0:8b:a4:51:1f:0b:0e:fd:
                    3a:74:cd:70:e1:13:62:d8:37:2b:91:4e:8b:86:a1:
                    57:1c:c4:5c:98:1e:dd:94:d7:4b:cb:f1:62:e9:33:
                    7c:8c:29:51:28:45:d9:96:6f:da:ec:90:7d:2a:40:
                    6d:d1:2e:77:91:24:0a:6c:ad:5c:19:bc:c9:3f:3c:
                    f2:e3:9c:15:f4:18:53:84:39:3e:05:d4:83:e3:b2:
                    7d:64:1b:1a:c4:1c:67:46:df:81:5c:ce:fd:41:e0:
                    a9:ca:73:12:aa:b7:92:0a:78:80:93:64:47:86:bf:
                    06:23:5b:15:3c:f0:0e:8e:bf:38:f9:18:84:ec:48:
                    7d:0c:ec:45:a3:9a:69:a4:08:ac:86:ca:7f:d1:eb:
                    bf:32:a4:f6:2c:64:b5:1c:a0:88:71:67:c0:e4:a5:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9C:6B:47:05:DB:AA:F8:84:B0:36:60:0A:CC:02:23:15:4A:DB:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/0dbe73ac-3f67-340e-aeda-9bf4f3053904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:67:1a:0b:f7:38:f7:15:9e:3c:3c:98:93:55:4e:0d:6a:9a:
         25:9f:95:7f:f2:4d:e3:2f:fd:ce:7d:57:72:25:08:05:a1:3d:
         63:04:bb:2f:cc:e1:54:e1:03:fd:b6:c5:44:cf:59:ce:45:73:
         6a:f9:e6:93:33:9a:43:01:93:19:36:5d:05:47:e1:5f:d3:56:
         79:b4:27:74:2a:e3:58:c4:15:55:9f:5f:46:13:fa:c5:85:48:
         88:9c:c2:78:60:1a:b0:55:80:72:98:7e:79:cf:af:90:d0:be:
         ee:a3:ab:56:9c:4c:d0:32:e2:19:33:f2:db:07:76:21:66:5c:
         12:c7:9b:ab:2b:71:6b:a3:f4:2c:71:a7:e2:64:83:a0:93:3f:
         9d:b8:e7:b7:eb:df:13:24:da:7c:db:d4:60:c7:75:1b:42:df:
         4f:07:d6:be:33:23:3d:cc:ff:97:35:81:79:78:56:4f:bc:12:
         dd:74:0a:bc:58:2f:1e:97:dc:b5:07:73:09:fd:a2:81:ce:84:
         e2:05:9b:f2:9d:a2:21:89:c8:36:11:06:81:90:2e:d7:d9:52:
         ea:e4:31:63:9b:ec:5d:3c:45:86:0b:6c:32:81:ca:98:ec:11:
         bd:fc:9d:c0:d2:f9:9f:9f:10:15:b9:38:a1:42:7c:29:80:92:
         92:6a:ff:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZei0WhinwGldi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl
YzhhMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk
YTM0OTc4NTQtYmVjNi00OWNlLWJjNjYtZWY2YjgzNjI5NzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+rbHTtwbkGBp6N1sVDaeKTByQ6Uk3PHZRpx
KOhqDXufbqVN2UEZ6WP8kNxMG/QzCdVV2I+5pvFhvKjt/Z2mwOvnfLGAWjL4C2iH
ukda553uTIoV8W+i6DjOtbGDXV038IukUR8LDv06dM1w4RNi2DcrkU6LhqFXHMRc
mB7dlNdLy/Fi6TN8jClRKEXZlm/a7JB9KkBt0S53kSQKbK1cGbzJPzzy45wV9BhT
hDk+BdSD47J9ZBsaxBxnRt+BXM79QeCpynMSqreSCniAk2RHhr8GI1sVPPAOjr84
+RiE7Eh9DOxFo5pppAishsp/0eu/MqT2LGS1HKCIcWfA5KXmRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCca0cF26r4hLA2YArMAiMVStvgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy
NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvMGRiZTczYWMtM2Y2Ny0z
NDBlLWFlZGEtOWJmNGYzMDUzOTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh
MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm
ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh
NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1nGgv3OPcVnjw8mJNVTg1qmiWflX/yTeMv/c59V3IlCAWhPWMEuy/M
4VThA/22xUTPWc5Fc2r55pMzmkMBkxk2XQVH4V/TVnm0J3Qq41jEFVWfX0YT+sWF
SIicwnhgGrBVgHKYfnnPr5DQvu6jq1acTNAy4hkz8tsHdiFmXBLHm6srcWuj9Cxx
p+Jkg6CTP52457fr3xMk2nzb1GDHdRtC308H1r4zIz3M/5c1gXl4Vk+8Et10CrxY
Lx6X3LUHcwn9ooHOhOIFm/KdoiGJyDYRBoGQLtfZUurkMWOb7F08RYYLbDKBypjs
Eb38ncDS+Z+fEBW5OKFCfCmAkpJq/1I=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:25:09 2026 by rpki-client