Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/7cdb7205-3aff-35cd-92a8-3ec87ad0f2ad.roa
File:                     7cdb7205-3aff-35cd-92a8-3ec87ad0f2ad.roa (raw, json)
Hash identifier:          t5a/4w1HC7l5kAfusQs25diKm8BlAy7u4+CsDVNpseA=
Subject key identifier:   7C:8D:6F:8D:23:B2:AC:1E:CC:77:77:E9:1C:CD:05:20:41:A1:17:6D
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584F20C57C5BD5211C4B3964E880
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/7cdb7205-3aff-35cd-92a8-3ec87ad0f2ad.roa
Signing time:             Thu 10 Sep 2026 11:19:14 +0000
ROA not before:           Thu 10 Sep 2026 11:19:14 +0000
ROA not after:            Wed 09 Dec 2026 12:19:14 +0000
asID:                     63360
IP address blocks:        168.225.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:c5:7c:5b:d5:21:1c:4b:39:64:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Sep 10 11:19:14 2026 GMT
            Not After : Dec  9 12:19:14 2026 GMT
        Subject: CN=915f1c19-10db-4f7a-b9d4-57787c835135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2f:b6:52:8b:01:7a:87:9f:df:df:23:19:14:
                    01:a1:03:cd:9e:17:96:d0:51:ca:b3:44:0b:6f:88:
                    00:9d:12:52:5f:e9:6a:2e:b8:8d:04:25:0d:70:30:
                    fd:18:88:43:82:55:a8:ec:c3:48:38:27:89:bd:e3:
                    64:d5:f8:ce:63:db:0c:55:20:5f:8a:19:fa:cd:f2:
                    9e:cc:69:58:58:0a:32:e5:ca:4d:e0:f7:35:50:b4:
                    e7:a6:2a:12:28:2d:a1:44:2b:43:0c:e8:e7:6a:fd:
                    8d:71:97:6c:43:22:4c:6c:08:0f:75:1d:8c:92:0b:
                    63:e0:64:07:77:cc:db:16:0a:8e:59:ce:51:f7:77:
                    2d:a8:1a:9a:cf:4d:61:1c:12:1f:70:6b:c3:ab:f1:
                    22:8c:be:7e:0f:71:f1:f8:3c:77:9a:a2:17:1a:62:
                    9a:79:72:3b:91:ac:57:b7:7f:69:01:35:07:5f:0c:
                    82:05:bf:5d:67:16:b1:89:61:e4:df:16:cb:05:0c:
                    ab:d2:cf:dd:85:b5:59:c5:20:dc:19:d7:ed:88:97:
                    40:d0:0d:5f:d3:67:0c:f0:1b:9f:01:df:b3:6c:e6:
                    8e:6b:e5:15:c5:09:cd:3b:8b:9b:6c:10:c5:4b:62:
                    f1:8d:28:48:80:66:b9:a9:c0:1b:51:3c:a8:b6:8c:
                    bb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8D:6F:8D:23:B2:AC:1E:CC:77:77:E9:1C:CD:05:20:41:A1:17:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/7cdb7205-3aff-35cd-92a8-3ec87ad0f2ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a1:81:b2:a5:37:07:d2:96:ca:df:3c:a4:5a:97:c8:d4:bf:
         c4:87:14:42:35:c3:ff:54:a5:f3:7a:51:29:e1:24:09:cc:4e:
         0a:c8:cb:96:f0:e6:3c:f4:ea:ba:72:05:f1:11:4e:cf:ff:77:
         61:8d:c3:14:61:96:bd:c7:e4:4a:71:35:b6:20:7d:35:98:19:
         4f:9e:99:2a:90:93:6b:93:02:b2:d6:e5:27:47:6e:05:19:df:
         1e:08:44:ed:be:d9:10:6e:91:3f:3e:c0:3a:94:18:7a:4e:d8:
         a9:d8:96:dc:e1:59:31:31:e7:b3:60:be:db:27:26:3d:66:cd:
         c6:68:f0:13:5c:08:b1:e9:0f:23:1a:f2:dd:2b:e2:9f:05:5c:
         b0:5f:02:83:1e:82:20:97:f5:d8:82:eb:7e:97:88:38:85:4d:
         85:0b:4c:55:16:49:04:39:48:0b:8b:c4:79:f4:ab:20:76:ef:
         7b:fa:43:44:e2:35:7f:19:dd:d1:cb:dc:c1:5f:e3:9c:ff:28:
         0d:95:b9:54:1a:01:52:e7:22:57:87:54:a7:df:fe:b8:27:7a:
         40:7f:0f:45:17:98:8d:8e:a7:3f:23:13:ff:6d:ee:88:9b:72:
         16:6f:a6:de:87:20:23:27:90:74:f8:1f:d8:1b:00:d4:43:be:
         b0:ef:c1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:51 2026 by rpki-client