Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/b3d9a224-be61-3e9a-846f-9711a193deed.roa
File:                     b3d9a224-be61-3e9a-846f-9711a193deed.roa (raw, json)
Hash identifier:          NVaWUEyIIobNee7t42PNYPXeBeC37yBki80z7IjDF1s=
Subject key identifier:   3A:EA:34:52:FF:B0:2C:D1:9F:18:E4:03:F4:C0:FD:E2:01:16:21:1B
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584A7780A6C3DB17D799B23CE180
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/b3d9a224-be61-3e9a-846f-9711a193deed.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     63360
IP address blocks:        168.225.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:a6:c3:db:17:d7:99:b2:3c:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=d09aac57-815a-4e2a-a874-d103a623e042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:d1:85:8c:8d:c5:83:77:29:68:d4:48:a4:
                    10:d2:d6:45:a0:04:6b:be:83:6d:47:19:d7:81:89:
                    53:35:35:23:0d:3e:b1:45:5d:2a:27:88:79:ae:41:
                    62:07:e3:32:8e:66:6f:bb:7d:be:9d:c4:a1:d9:4a:
                    3f:7b:79:25:96:9a:2d:14:5d:0e:6f:dd:c4:b0:03:
                    e4:03:d7:c5:79:f5:97:6d:f1:27:7a:41:11:4c:88:
                    02:de:f9:0c:5e:93:f7:c6:29:91:30:da:6c:f8:59:
                    2e:7d:a5:54:6f:fc:24:8b:d1:94:0f:21:6a:62:22:
                    33:ea:36:de:ad:de:20:96:a7:ba:29:29:a2:15:85:
                    f5:fa:f3:5b:cb:4e:57:c5:4d:a0:5a:37:9b:e3:43:
                    c4:03:c8:00:b0:72:5c:b4:bf:4e:4a:cd:40:f2:29:
                    7a:27:2a:4e:a6:97:c0:ff:1d:7a:58:43:ad:3e:e6:
                    58:8a:16:92:cb:9d:a5:92:01:4f:2b:e8:a0:8b:69:
                    4e:cd:6b:cb:70:67:dd:04:23:76:43:00:7e:08:20:
                    c0:e1:9e:46:a0:bf:fd:a3:45:42:90:e2:6f:60:e3:
                    8a:73:11:49:1d:2a:d4:6b:05:16:8e:9c:0e:41:e0:
                    3a:2e:a0:b3:3b:ae:37:1f:7d:63:46:f4:92:13:8d:
                    e9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EA:34:52:FF:B0:2C:D1:9F:18:E4:03:F4:C0:FD:E2:01:16:21:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/b3d9a224-be61-3e9a-846f-9711a193deed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:e1:6a:dc:44:73:7d:4a:70:ae:06:d0:c1:8b:de:be:c8:a1:
         ab:85:4b:83:99:07:e0:a3:18:51:b9:fa:ef:64:8b:8c:cf:e9:
         7e:89:85:81:89:35:da:1e:41:57:7d:16:a9:7a:20:15:47:74:
         e7:bb:8f:02:bc:55:af:5d:8b:38:e4:fc:25:71:af:5e:ec:be:
         d1:ea:38:36:c3:a7:b5:6e:34:ee:9c:37:a0:35:a1:eb:93:53:
         09:bd:05:7e:12:be:ce:be:cd:50:e3:c0:89:bc:e0:8c:dd:6a:
         88:05:eb:87:2b:aa:82:ce:16:03:d6:e0:31:d6:62:61:ba:af:
         af:02:23:d0:80:55:62:e7:cb:47:b3:9f:29:1f:ab:0b:0c:34:
         ba:dd:c3:00:63:ea:d4:e7:20:00:de:a8:fb:c3:6b:e2:5c:47:
         58:fa:84:cc:d6:46:75:56:fe:06:02:c8:1a:90:ff:c4:18:18:
         e5:45:69:a4:1f:8b:02:14:cf:0b:95:0f:97:ba:a2:62:9f:26:
         a5:d7:87:77:5f:af:53:f4:de:43:42:fc:ad:8b:18:b6:26:09:
         e2:f7:9f:70:45:51:8a:79:dc:7c:d4:0e:90:e9:ff:55:9e:74:
         b9:4b:f4:3e:aa:da:ea:84:0d:90:76:68:d4:8d:f3:b8:c9:04:
         a3:88:4c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:47:35 2025 by rpki-client