Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/7c3c75a6-8245-3ff9-b177-5d0d7d5e0088.roa
File:                     7c3c75a6-8245-3ff9-b177-5d0d7d5e0088.roa (raw, json)
Hash identifier:          92wFimtlLEnQ1t0kriWodtsG66iOKLf5kOfVxODuQHA=
Subject key identifier:   B3:EC:31:3E:24:6B:A2:E4:9E:9F:AE:C8:CC:D6:A5:88:58:65:5D:58
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584A86DB76E9A1AD7B8020E9F800
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/7c3c75a6-8245-3ff9-b177-5d0d7d5e0088.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        168.225.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:76:e9:a1:ad:7b:80:20:e9:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=98cf1709-bbc1-4eba-a972-0446606ab305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:77:9f:ba:38:55:8c:49:30:7d:5a:42:90:
                    b8:64:f8:58:63:88:01:2c:5e:9c:77:44:59:ec:2d:
                    67:33:31:9e:dd:7b:b0:95:5f:97:3c:d2:55:e2:bb:
                    0b:69:c9:18:d3:fc:e5:f1:4b:0b:37:0a:87:5a:bb:
                    ee:13:10:02:99:dc:b9:17:34:ef:0f:16:c6:28:b7:
                    e0:e6:df:04:69:c2:a6:98:d5:9f:4c:1f:44:ee:a8:
                    fb:75:8e:65:25:59:df:6d:91:30:73:96:e2:c5:6d:
                    a7:4a:f2:a6:12:e1:db:39:50:f0:b4:4c:ee:58:f6:
                    5b:e9:17:7b:85:53:f2:74:be:06:7d:40:2b:ce:25:
                    52:ec:bc:71:ca:23:10:a1:61:46:4f:a6:83:8b:b6:
                    45:7b:ed:e3:a0:d0:f3:cc:35:4b:87:d6:44:24:cd:
                    2e:fd:46:db:f1:e0:c5:36:c4:75:c0:54:cb:06:8a:
                    ce:53:47:6f:4e:63:58:d2:28:d7:44:79:6f:21:ed:
                    3f:bf:c3:f9:d7:11:05:1c:9b:10:cc:2d:70:93:11:
                    e2:af:33:f5:55:11:9b:49:9c:2e:48:de:0f:14:4e:
                    92:30:aa:a0:51:6d:96:25:b3:ae:42:6e:09:8c:c9:
                    a3:69:1c:e0:10:da:e1:c7:58:52:b4:08:6f:87:94:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EC:31:3E:24:6B:A2:E4:9E:9F:AE:C8:CC:D6:A5:88:58:65:5D:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/7c3c75a6-8245-3ff9-b177-5d0d7d5e0088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:00:04:a5:85:ab:19:89:bd:06:0d:34:e8:c0:51:c2:02:d6:
         60:38:44:c7:93:06:7a:15:40:ed:be:3c:f8:17:56:21:f2:7a:
         43:2a:16:98:1d:1f:4d:e5:ad:9a:37:ce:70:e9:60:06:22:eb:
         36:ed:95:f3:0c:59:cf:23:41:26:7b:7d:f1:38:7e:9c:05:4a:
         01:ff:ca:32:06:63:b6:ee:ca:06:44:05:ef:aa:29:78:ab:d7:
         b3:d4:6b:b4:fb:b6:3f:07:5a:f8:fb:b4:4a:35:81:94:66:58:
         30:94:6a:81:a4:f5:62:cc:77:40:c8:e1:e0:68:e7:c9:b5:86:
         83:8a:e3:95:31:6b:07:80:4a:77:0c:2d:7b:61:7d:b2:42:a3:
         1a:b2:e9:ae:c4:f6:96:5b:ea:eb:d9:07:a8:dd:96:f1:65:80:
         9c:8d:7b:07:f7:35:fd:a4:fa:f6:73:4a:54:b2:79:81:b5:cf:
         42:2e:64:9e:c6:ac:fd:65:92:09:16:30:4c:ad:3f:e5:52:2f:
         ca:49:cb:97:c9:46:93:34:8b:88:05:c5:d4:09:af:38:94:03:
         c0:38:20:64:7b:32:38:0b:39:c7:97:ee:c6:98:7e:cb:65:06:
         e7:3f:aa:56:72:cd:a1:6d:b7:4a:d6:e4:1e:c4:9b:66:c1:bb:
         1b:fe:84:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:31:25 2025 by rpki-client