Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/1d5c1a41-6983-32e6-a016-c42b75014c63.roa
File:                     1d5c1a41-6983-32e6-a016-c42b75014c63.roa (raw, json)
Hash identifier:          IVEgDM39dR/sZnjRqz8hc9Km0Zyo6FfLhPeqcTMCQYs=
Subject key identifier:   70:4F:03:D5:CC:FB:FE:CC:0C:1E:D8:04:41:C6:18:5E:33:D8:44:A6
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584BA39D3EAC96361FEC5E102D20
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/1d5c1a41-6983-32e6-a016-c42b75014c63.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     63360
IP address blocks:        168.225.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:3e:ac:96:36:1f:ec:5e:10:2d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=1f938955-ef90-4a81-ab7e-22baf7f3f671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:eb:c7:ad:5d:dd:07:a2:01:ee:21:fe:22:d7:
                    eb:20:92:a3:b3:f6:d0:00:df:db:40:b4:da:1e:e9:
                    c2:7e:37:85:00:12:0a:7c:b5:eb:31:f3:20:14:41:
                    c2:50:83:40:58:e4:8e:c1:21:49:de:01:79:4f:64:
                    93:21:6c:57:2d:14:eb:72:a7:bd:c9:5b:b6:2e:bd:
                    e2:27:6f:3f:7a:1a:9c:20:cc:62:b3:6d:40:31:d1:
                    ea:88:82:51:ab:43:ce:35:ab:0f:8e:2b:71:9e:90:
                    09:34:e6:89:d6:10:fb:ab:ea:64:1f:ba:42:4d:f7:
                    86:c1:23:e5:90:d1:12:dc:c3:8f:9c:7d:f6:21:14:
                    ce:2a:0a:a4:9a:29:ec:6e:24:94:34:30:a0:03:58:
                    15:5c:e7:f6:9e:8c:93:78:5e:ef:45:57:bb:12:9d:
                    59:88:a2:7a:76:0c:1d:02:b4:6d:61:c6:3f:3d:96:
                    4f:6e:37:e7:f7:2d:c7:f9:e7:eb:c3:eb:a2:58:40:
                    1b:32:fc:37:d3:7a:4e:b2:fc:8e:07:8b:db:ea:08:
                    b8:d8:09:e2:35:35:88:2c:0b:8f:1d:bc:3a:c5:3b:
                    26:8c:ff:ec:b8:1f:6b:d3:2c:6b:43:97:5a:af:f5:
                    c7:01:7a:fd:ec:58:e9:bf:d0:93:cc:4b:45:87:ed:
                    84:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4F:03:D5:CC:FB:FE:CC:0C:1E:D8:04:41:C6:18:5E:33:D8:44:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/1d5c1a41-6983-32e6-a016-c42b75014c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:60:a2:b5:75:34:88:ec:37:d6:cb:90:b0:a1:41:19:28:1b:
         74:da:5e:f8:4c:f9:99:f2:98:6b:02:84:92:78:e4:98:61:91:
         b4:45:e6:c2:07:b5:19:36:b7:48:8a:70:c6:4b:23:d2:47:f0:
         39:bc:74:6c:2b:5c:16:2d:c3:1c:95:5e:8e:6d:33:3b:f6:b0:
         06:5c:35:e2:9f:1e:50:c7:51:be:9c:e9:6a:8f:85:70:8b:e1:
         eb:5a:d8:bf:57:4d:2f:a2:df:5f:42:b0:f0:b2:ee:12:9a:05:
         67:d3:99:90:1b:95:de:1a:e7:69:80:d0:82:90:9e:e7:de:78:
         0c:a8:48:8e:f6:bb:6e:09:1e:8a:42:3c:aa:f4:31:53:0a:c9:
         ad:95:a4:01:43:60:a6:40:30:e2:71:78:e0:f2:4c:9f:a3:9d:
         30:b7:ee:44:4b:d7:c6:e2:ee:a9:8d:07:24:18:21:35:83:9f:
         05:0c:dd:cd:12:d7:0a:67:92:a4:78:99:59:e6:e8:a8:41:eb:
         74:a4:6e:1b:be:7d:b4:ea:5a:33:9c:75:a1:c2:91:0e:11:1f:
         71:a3:d4:7c:cb:39:f5:9c:a4:6d:0a:94:a5:1d:72:6a:ed:17:
         f4:7a:2f:4e:3a:64:c6:c5:55:5b:07:6f:cb:64:72:93:fb:d7:
         2a:11:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:48:40 2025 by rpki-client