Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d883bae7-3067-34d2-b612-d4b17b17fb12.roa
File:                     d883bae7-3067-34d2-b612-d4b17b17fb12.roa (raw, json)
Hash identifier:          4X6NRbbyJUnZtUycSJpJRXQyykUkR1curd7ElSQ/ngA=
Subject key identifier:   EA:D7:21:41:6D:4C:06:B9:C0:10:E4:C1:E8:B6:51:AE:19:FC:42:DC
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584A86DB7705CFB0EEFAE9234200
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d883bae7-3067-34d2-b612-d4b17b17fb12.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        168.225.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:77:05:cf:b0:ee:fa:e9:23:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=39ef1736-7c70-4435-863c-d713d11d6f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fe:aa:e0:3b:aa:e9:39:e8:ea:6e:43:0a:e3:
                    1d:15:22:a1:01:99:9c:81:2d:e7:94:1c:04:9d:85:
                    09:2b:7f:79:bb:60:54:ad:00:41:22:e3:01:2b:51:
                    1b:76:b7:32:80:29:ab:af:68:bc:33:98:0c:4e:b8:
                    7c:39:cb:68:c6:6d:00:5e:8a:e8:ae:ba:d2:a0:12:
                    c1:a6:33:5d:ea:d8:16:2a:c2:f6:16:c6:38:c2:4c:
                    58:31:47:e4:c2:c1:e7:61:40:6c:44:5a:cb:e5:5a:
                    63:fa:aa:51:7d:2c:82:d2:57:57:26:73:4f:e3:28:
                    50:1e:08:1c:44:7b:aa:8e:56:4b:62:58:ea:d1:e9:
                    d6:56:d8:85:c2:77:74:5e:14:76:0a:73:4a:41:e3:
                    7d:de:4a:f4:9d:0f:fe:ac:33:ba:23:b5:75:66:04:
                    f2:36:7f:d9:24:67:d2:a6:1b:4a:b5:2d:0b:b2:b2:
                    b7:b9:e6:48:2b:71:77:4f:1b:f3:f1:9f:cb:a3:f2:
                    e5:bf:21:5e:85:86:74:ad:6b:28:f6:2e:77:b9:25:
                    54:f7:c5:6a:d7:c3:b5:fc:6b:15:09:f7:df:38:4f:
                    fe:2c:f7:6c:4a:62:9b:79:b7:2d:60:b7:80:cc:dd:
                    1f:0b:6b:16:1c:d8:2e:df:de:48:27:db:10:79:d4:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D7:21:41:6D:4C:06:B9:C0:10:E4:C1:E8:B6:51:AE:19:FC:42:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d883bae7-3067-34d2-b612-d4b17b17fb12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:1d:23:30:3b:55:dd:ba:a9:04:5b:e2:4d:a6:ae:8a:de:bf:
         e8:5c:91:7a:65:85:b8:50:58:84:40:9f:15:b2:7c:57:a7:1a:
         3f:1b:96:09:1f:34:b5:8e:d7:7d:bd:17:95:4f:59:05:6b:7b:
         40:20:64:fa:4c:1a:fb:21:74:33:5e:bc:26:b1:5c:72:8e:be:
         5c:fa:8f:08:a4:94:8d:0a:7c:71:79:e8:a9:29:19:16:65:d9:
         bc:7e:d2:1e:b7:2f:c7:dd:a8:61:6b:33:cf:48:a2:2a:7b:e8:
         88:12:59:ec:97:2e:08:3f:2a:c3:cf:8d:0f:04:7a:34:ed:37:
         29:1d:dd:79:be:cc:98:bb:68:7d:1b:4f:03:48:b2:0a:87:33:
         e7:5f:b0:ed:e1:c8:27:9c:df:db:b4:c8:3f:24:e7:de:6c:d5:
         1d:f1:a2:0f:91:ee:67:d0:ab:51:7d:cf:3b:18:78:73:70:5a:
         68:7e:9d:0d:d7:67:e9:e2:ae:e4:6b:24:e1:e4:06:c8:85:13:
         2e:ed:bc:aa:ad:45:5c:d7:68:f0:4f:08:5a:84:04:1f:30:ec:
         2a:6e:47:05:df:91:cc:b0:6a:a7:e2:ba:1f:2a:66:b9:3e:82:
         e2:8c:ba:65:63:37:66:59:8b:39:00:77:1a:ad:1e:7d:21:19:
         30:ab:cc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:19:33 2025 by rpki-client