Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/e2693b35-4954-3b54-989c-1d5875b48104.roa
File:                     e2693b35-4954-3b54-989c-1d5875b48104.roa (raw, json)
Hash identifier:          stfZJlPCu3mwRVNKbJ6KqHspVN3GjCpuPlmIskHyzIE=
Subject key identifier:   4F:44:14:85:55:1B:B5:77:F1:CB:60:72:2E:BA:37:33:02:F6:B3:90
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584A77808AD35CF98FF4DB8E81F0
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/e2693b35-4954-3b54-989c-1d5875b48104.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     63360
IP address blocks:        168.225.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:8a:d3:5c:f9:8f:f4:db:8e:81:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=d9d01f1f-2faf-435d-84ee-4006109b3ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:28:e6:0e:59:66:a4:52:5f:44:ac:cd:9a:
                    e1:ff:cc:3e:07:02:74:93:96:80:e5:ca:a1:79:38:
                    13:a1:9f:00:08:a3:02:8e:a4:ad:e7:e8:d4:c0:96:
                    bd:bb:5b:df:e2:f7:50:0d:10:c6:b7:64:ba:c2:d1:
                    c8:e3:53:b7:b7:b9:48:99:d8:32:b2:c1:71:03:ae:
                    fe:75:83:3e:0e:8e:d4:10:e7:a4:30:09:17:82:a0:
                    7c:20:43:6e:dc:af:58:45:12:03:40:a4:6f:c6:d1:
                    58:b9:d2:48:fc:8b:af:98:ce:cd:12:1f:f9:46:a9:
                    92:1c:a4:31:62:bd:f8:83:c9:6e:65:b5:b4:5d:42:
                    19:a7:9b:22:a8:fc:ee:9b:0a:3e:dd:80:63:71:c5:
                    8b:0b:e0:d8:6f:e7:9d:9d:f6:92:43:02:33:3e:94:
                    49:bd:55:09:35:5a:90:b6:83:eb:61:65:a8:c5:6f:
                    24:df:3a:dd:cf:a4:55:70:5a:06:e6:7c:7e:b0:b3:
                    ac:c9:81:1b:3b:25:0a:c5:a1:1e:07:22:9b:5b:28:
                    98:55:b0:d0:51:13:c9:d4:9a:f1:e1:4c:3e:b2:83:
                    01:49:0c:88:a5:0b:ec:63:96:1b:86:f3:8f:6c:4b:
                    e9:ba:5d:54:cc:e2:f4:69:5e:28:d8:2b:8e:06:9a:
                    18:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:44:14:85:55:1B:B5:77:F1:CB:60:72:2E:BA:37:33:02:F6:B3:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/e2693b35-4954-3b54-989c-1d5875b48104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:1a:d5:79:bd:4b:f1:26:59:f3:60:70:27:f9:78:dd:0b:fb:
         03:0d:0c:c8:41:80:cf:6d:33:d8:cc:11:b5:be:a2:19:8d:03:
         b0:0e:a1:35:24:2f:ce:b4:e4:fe:55:11:35:13:25:7d:de:c7:
         96:1c:c2:c1:c5:0b:27:06:03:c8:fa:12:82:1d:00:88:a9:07:
         9a:b6:83:9b:93:2a:97:a1:67:7a:64:58:3e:dd:38:68:df:0c:
         61:33:c3:a5:97:8c:95:13:fa:64:40:55:53:a1:db:ca:65:e6:
         ad:5d:2e:c7:aa:1f:28:83:2a:1c:16:0d:89:b9:8a:86:25:74:
         d8:92:78:03:69:fd:72:05:eb:44:4b:07:21:9a:5d:3f:9a:31:
         8b:06:63:ef:a3:93:36:92:84:f2:fc:81:8d:79:40:a4:86:4f:
         44:05:6e:2c:d1:df:bc:98:96:28:38:69:a3:a0:49:31:a3:5e:
         0c:d7:7a:45:e4:ba:8f:0a:58:30:2a:06:33:a6:98:84:29:d5:
         a5:f5:96:88:c6:9b:5f:37:e9:97:72:14:21:42:16:d1:ed:c0:
         df:c3:8d:fc:f4:94:10:d3:e2:f1:c4:b6:fa:80:c0:a7:d2:3d:
         44:3e:50:9d:87:34:96:8c:71:b4:61:17:6d:9b:a8:7b:f3:e0:
         ed:65:00:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIrTXPmP9NuOgfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl
YzhhMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk
ZDlkMDFmMWYtMmZhZi00MzVkLTg0ZWUtNDAwNjEwOWIzYWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+ko5g5ZZqRSX0SszZrh/8w+BwJ0k5aA5cqh
eTgToZ8ACKMCjqSt5+jUwJa9u1vf4vdQDRDGt2S6wtHI41O3t7lImdgyssFxA67+
dYM+Do7UEOekMAkXgqB8IENu3K9YRRIDQKRvxtFYudJI/IuvmM7NEh/5RqmSHKQx
Yr34g8luZbW0XUIZp5siqPzumwo+3YBjccWLC+DYb+ednfaSQwIzPpRJvVUJNVqQ
toPrYWWoxW8k3zrdz6RVcFoG5nx+sLOsyYEbOyUKxaEeByKbWyiYVbDQURPJ1Jrx
4Uw+soMBSQyIpQvsY5YbhvOPbEvpul1UzOL0aV4o2CuOBpoYFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE9EFIVVG7V38ctgci66NzMC9rOQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy
NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvZTI2OTNiMzUtNDk1NC0z
YjU0LTk4OWMtMWQ1ODc1YjQ4MTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh
MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm
ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh
NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACka1Xm9S/EmWfNgcCf5eN0L+wMNDMhBgM9tM9jMEbW+ohmNA7AOoTUk
L8605P5VETUTJX3ex5YcwsHFCycGA8j6EoIdAIipB5q2g5uTKpehZ3pkWD7dOGjf
DGEzw6WXjJUT+mRAVVOh28pl5q1dLseqHyiDKhwWDYm5ioYldNiSeANp/XIF60RL
ByGaXT+aMYsGY++jkzaShPL8gY15QKSGT0QFbizR37yYlig4aaOgSTGjXgzXekXk
uo8KWDAqBjOmmIQp1aX1lojGm1836ZdyFCFCFtHtwN/Djfz0lBDT4vHEtvqAwKfS
PUQ+UJ2HNJaMcbRhF22bqHvz4O1lAKI=
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:48:09 2025 by rpki-client