Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/4ef0e48f-3bf5-3269-b736-04ae7e3f131d.roa
File:                     4ef0e48f-3bf5-3269-b736-04ae7e3f131d.roa (raw, json)
Hash identifier:          1kvwvpYOLkVCGSTnxL+MHNS7GIW4CA8ITG2LTK5P6ds=
Subject key identifier:   D3:6F:70:DE:1E:B3:81:10:A8:37:92:49:E2:1A:31:62:4C:56:A1:69
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584BB192871AFDE655DBDFEEA000
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/4ef0e48f-3bf5-3269-b736-04ae7e3f131d.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     63360
IP address blocks:        168.225.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:87:1a:fd:e6:55:db:df:ee:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=8c61e450-3c56-4cef-a9f5-37b6ad885a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:41:82:e3:8e:99:ce:9d:42:ee:93:a3:0e:
                    ac:c4:f4:ae:03:f4:2e:6b:1d:16:0c:bb:40:95:b4:
                    e2:07:35:57:01:22:df:99:f4:29:43:f8:4f:a6:a6:
                    0b:fc:3b:62:22:a3:43:7c:b1:a8:e9:2b:b0:d6:1a:
                    81:18:63:78:7a:e8:b5:c5:4a:f2:60:e9:7f:b5:64:
                    78:a2:a0:f1:23:24:43:bf:17:32:54:14:ed:1c:e2:
                    5f:b1:5b:19:1f:e6:ce:ad:7e:d4:ff:be:fa:82:3e:
                    72:6d:53:95:49:1e:4f:4b:9f:c1:7d:9b:b5:21:c9:
                    16:04:84:bf:73:3a:a8:72:bd:c1:fd:83:1f:d6:6c:
                    dd:b8:06:b3:3e:48:43:bd:c7:68:26:22:a7:06:5d:
                    96:d3:d7:fc:06:c9:06:53:3b:4c:d2:01:86:2f:d9:
                    0c:9a:0f:c6:6d:b6:01:ea:1c:77:06:92:94:93:00:
                    49:0c:58:b3:fb:0f:31:09:d5:a5:c6:06:66:89:02:
                    46:11:5f:77:1b:63:39:72:cc:3f:27:43:8c:a2:23:
                    9c:42:4d:77:1e:f8:93:28:92:68:cc:bb:ab:06:36:
                    01:78:7b:2b:9b:60:06:b2:67:c6:fb:57:74:21:72:
                    b9:30:e3:bf:12:85:7a:be:b1:fa:5c:45:02:8e:1c:
                    de:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6F:70:DE:1E:B3:81:10:A8:37:92:49:E2:1A:31:62:4C:56:A1:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/4ef0e48f-3bf5-3269-b736-04ae7e3f131d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5e:6c:10:9d:71:3e:f4:53:ca:9a:ff:7a:b0:c8:bd:bf:7f:
         fa:39:8d:fb:05:3a:23:10:56:44:9f:db:1e:25:ec:ff:10:0c:
         9d:c5:33:c3:1f:2b:d7:0b:a7:6b:09:63:19:1a:db:30:6d:53:
         b0:0f:bb:a9:78:03:44:4b:4a:8b:99:b1:a1:65:19:15:fe:98:
         f5:d0:61:ec:c8:9f:76:b3:b2:fa:49:d0:69:53:02:b2:08:5b:
         9c:1f:63:27:ba:7f:ff:dc:ab:f6:2a:4e:ed:6d:64:13:b1:59:
         87:9c:e9:5c:da:46:49:29:be:64:61:87:0b:04:04:8d:eb:c6:
         d8:ca:08:59:09:d4:1d:6c:94:19:86:f2:b5:41:b7:d3:a2:0b:
         96:e1:f3:17:23:ca:6a:aa:d5:47:ec:e4:17:7f:19:6f:e8:97:
         ab:81:f3:21:ec:19:99:0b:53:42:59:a6:d9:35:c2:8b:1f:39:
         82:c5:0c:7e:11:4b:97:3b:d1:f8:ee:91:0a:5c:d3:a8:98:27:
         9a:fb:26:a3:e8:57:ef:0c:57:71:85:23:13:2f:39:e3:57:99:
         1d:0e:ee:65:9f:cb:07:89:5c:d5:c4:1c:94:1e:bb:92:1a:71:
         95:7a:9e:f9:0e:bc:85:06:bf:52:f5:c3:d7:e1:20:70:15:16:
         ad:d4:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:48:42 2025 by rpki-client