Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/c1fd828c-6b1c-3606-9937-6ce3433710c1.roa
File:                     c1fd828c-6b1c-3606-9937-6ce3433710c1.roa (raw, json)
Hash identifier:          CGkiaPmc91iUy5k8yUDGMQN/sMMGOqP6m1aOq5aQ6ws=
Subject key identifier:   D1:9D:B4:94:2B:C2:A9:33:E5:E6:AC:56:E1:DB:7F:89:C0:E6:45:C9
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584AB051968A7C6EA6C763C38000
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/c1fd828c-6b1c-3606-9937-6ce3433710c1.roa
Signing time:             Wed 30 Jul 2025 09:27:25 +0000
ROA not before:           Wed 30 Jul 2025 09:27:25 +0000
ROA not after:            Tue 28 Oct 2025 09:27:25 +0000
asID:                     31898
IP address blocks:        168.225.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:51:96:8a:7c:6e:a6:c7:63:c3:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Jul 30 09:27:25 2025 GMT
            Not After : Oct 28 09:27:25 2025 GMT
        Subject: CN=71d1847e-7098-4308-b038-69c651405a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:8a:8b:6e:18:35:35:b7:e4:f1:04:9f:a3:
                    c1:5d:2c:a2:9b:21:77:f8:97:69:52:39:44:bf:42:
                    ff:46:0b:f2:ce:e7:e1:60:68:bd:eb:51:b1:13:68:
                    e0:51:8a:30:5f:8f:6a:07:96:b7:14:a1:12:59:43:
                    a2:f5:5c:bf:22:bc:de:68:bb:4e:cb:7d:aa:eb:d5:
                    cf:4a:2d:f5:e3:b0:12:d3:f4:1c:b4:db:b9:90:dd:
                    62:07:66:21:99:1f:8c:1c:30:d7:cf:37:0e:50:7e:
                    a2:54:2b:ba:e0:ea:17:4f:2e:e7:f0:c2:29:fc:8d:
                    08:a5:e3:a1:0f:68:53:d3:ab:89:6d:9d:4a:de:eb:
                    a5:52:d4:bf:b8:5e:f3:2d:86:09:3c:77:a9:29:e2:
                    93:c4:53:bd:68:a6:1d:e3:b5:ef:37:fa:a3:a6:12:
                    ae:ad:46:92:aa:b7:ff:cc:02:6f:ea:b7:ea:72:25:
                    83:50:3f:83:3d:c4:12:4c:50:79:12:c6:e5:0d:c7:
                    ee:d4:eb:26:f5:71:69:5b:7e:ee:ce:72:8c:9f:1d:
                    e8:98:6a:3f:e0:4b:11:ad:e3:32:bd:64:2d:1a:08:
                    12:30:e6:49:bd:a3:6d:e9:fd:0d:7b:05:b0:31:66:
                    f4:b2:ea:a3:92:08:57:63:4f:29:de:72:a8:4b:1c:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9D:B4:94:2B:C2:A9:33:E5:E6:AC:56:E1:DB:7F:89:C0:E6:45:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/c1fd828c-6b1c-3606-9937-6ce3433710c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:dc:f7:b0:16:f8:83:2b:81:50:9f:b5:12:05:3a:1b:94:cf:
         65:70:fd:20:24:f7:e5:98:e4:07:98:4a:1e:ae:ba:a6:4c:01:
         9a:47:e0:be:7b:02:2d:a0:0a:52:95:bd:6f:4e:62:60:19:12:
         c8:bc:d0:d6:50:82:63:1b:21:58:b9:8a:7f:41:0b:2a:d2:ea:
         4a:83:bd:21:fd:eb:da:30:94:10:9a:f1:18:60:7f:09:3b:7a:
         1c:b9:43:9b:01:3a:61:fd:3e:85:83:99:de:8c:89:b0:4d:d0:
         17:ef:7c:24:17:67:01:c3:d5:2d:53:05:aa:e5:1e:94:68:a3:
         fc:4c:f8:17:d8:22:36:c3:e5:e9:57:a9:02:91:87:c4:72:9d:
         91:8b:f4:45:3d:4e:c9:94:2a:cc:48:ab:19:97:de:b6:3e:63:
         48:43:70:23:99:c5:bc:a1:dc:9b:7d:4d:52:0a:7b:fb:7f:8c:
         d5:0a:10:7f:59:f7:e0:e1:ec:7a:bd:27:fe:a4:91:3e:ac:6f:
         00:c0:09:dc:88:97:fa:b1:ce:94:be:2b:46:e7:1b:e1:d2:45:
         db:72:05:55:58:ea:a4:3a:2a:0e:ee:bc:f9:7c:ac:0c:f9:a1:
         23:3b:27:1f:04:f8:5c:7f:7d:f9:c4:a5:97:1b:c1:8b:e4:29:
         84:10:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 21:36:34 2025 by rpki-client