Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ec501c6d-915c-3245-a9b1-5c41fc8d8fdb.roa
File:                     ec501c6d-915c-3245-a9b1-5c41fc8d8fdb.roa (raw, json)
Hash identifier:          dJ1ri2XU9D8vcDrtR11/xbCw7TqMWESnaBhTlSFnLrc=
Subject key identifier:   0C:ED:64:41:54:97:6C:C7:5A:1A:03:BF:0F:38:60:4B:D1:40:11:2B
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584AB045E68B9C3EA5BEBB845C00
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ec501c6d-915c-3245-a9b1-5c41fc8d8fdb.roa
Signing time:             Wed 30 Jul 2025 09:03:52 +0000
ROA not before:           Wed 30 Jul 2025 09:03:52 +0000
ROA not after:            Tue 28 Oct 2025 09:03:52 +0000
asID:                     31898
IP address blocks:        168.225.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:45:e6:8b:9c:3e:a5:be:bb:84:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Jul 30 09:03:52 2025 GMT
            Not After : Oct 28 09:03:52 2025 GMT
        Subject: CN=009eebe3-81c9-4eda-84b0-f11c9c75526c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d8:cf:4f:2e:83:b5:32:a5:5f:16:df:6a:07:
                    37:45:0b:16:36:9e:c3:aa:0f:16:8c:eb:5c:76:eb:
                    03:5f:60:d6:61:7b:ee:8e:37:1d:0d:24:60:df:50:
                    2a:a1:91:0c:e9:86:60:2b:97:ec:88:36:72:b3:30:
                    fc:b1:f9:fc:ea:f5:fe:a8:e7:14:92:8e:cd:25:05:
                    81:17:4c:83:cb:83:ca:cd:0c:42:ce:9b:5c:25:99:
                    85:4a:50:62:8c:e1:2c:ea:2a:97:c6:07:cc:48:e4:
                    2e:54:1d:3c:49:c0:d0:41:76:fb:fb:8d:e8:0e:0e:
                    ef:0d:e4:4c:5d:eb:3c:c3:88:a0:bd:8f:44:c2:c3:
                    81:9a:87:8f:fc:e2:63:52:ae:00:89:b0:26:dc:d7:
                    43:a3:d3:5d:ff:e8:14:30:12:0e:21:84:05:85:65:
                    1d:1e:94:80:44:48:ef:8d:8e:76:c9:8d:bf:c4:3f:
                    74:b5:4f:12:48:d7:18:a0:f0:88:62:0c:24:b5:99:
                    a0:98:98:41:6d:73:fe:f9:77:37:2a:60:ef:10:41:
                    dd:af:8d:9c:fa:b3:d2:c2:44:9b:26:3e:52:59:b8:
                    51:3d:58:1d:d1:30:00:57:71:6c:02:49:2f:b3:e4:
                    82:90:26:7f:ed:85:f8:51:b5:45:7b:87:f8:17:f7:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:ED:64:41:54:97:6C:C7:5A:1A:03:BF:0F:38:60:4B:D1:40:11:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ec501c6d-915c-3245-a9b1-5c41fc8d8fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:31:40:05:9b:97:52:03:bf:19:8b:14:20:c5:35:a2:d2:18:
         b4:bc:4b:eb:f4:92:74:af:92:41:08:f2:18:75:4c:db:a4:a5:
         f8:6f:97:c6:46:ad:cc:4b:25:4c:90:fc:3a:73:f0:fe:6a:30:
         96:b1:7e:9e:e7:47:68:5d:00:c7:71:df:1e:0f:66:7c:b3:83:
         bb:d9:3e:d7:4b:46:59:74:6c:5a:cf:7e:68:02:7b:5c:3f:bb:
         d0:4b:c7:99:6e:82:d9:3f:62:e6:a3:5d:f9:16:95:70:1d:67:
         53:bd:a1:17:4f:c1:8a:f5:96:f5:e3:e0:6f:d9:5f:f9:ac:4b:
         12:3d:e8:9c:4e:cc:15:d7:82:f0:f2:4a:04:51:d9:8f:a1:8d:
         0e:39:0c:44:dc:4b:6d:76:16:ed:32:93:6b:e1:2a:24:45:1c:
         2b:16:2f:b1:db:5a:4e:6a:3a:c8:46:8a:c6:22:81:16:e1:a1:
         2c:cb:35:13:81:57:90:af:40:09:b2:04:0e:2b:10:a5:ce:75:
         fc:9f:eb:f6:b9:f9:b2:6d:ee:89:18:7d:ad:cc:f5:39:f0:9f:
         ae:8c:48:b9:3e:36:27:17:23:25:66:41:43:01:47:e8:9b:52:
         53:15:43:53:1a:96:08:f6:91:c3:90:48:a9:9d:fd:6a:2a:b4:
         f3:11:76:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:23:11 2025 by rpki-client