Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc4c4b89-4992-35a1-86e6-767de781e1b6.roa
File:                     fc4c4b89-4992-35a1-86e6-767de781e1b6.roa (raw, json)
Hash identifier:          tUvOgdCfuLkdEd7RJvU4KFPET+498zx3VlrT6G7m2ls=
Subject key identifier:   C0:39:31:A7:6F:08:91:2B:8D:2D:BA:98:DE:09:9B:77:12:EB:38:D8
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584D71A50AC68F3CECADFA147B40
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc4c4b89-4992-35a1-86e6-767de781e1b6.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     63360
IP address blocks:        168.225.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:0a:c6:8f:3c:ec:ad:fa:14:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=f45ce7bd-a8d5-4ec1-a86b-c9438b38053e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:ee:f0:41:f1:6d:ab:c8:56:00:9e:73:cd:
                    83:2f:30:a1:b8:9b:f7:9d:c6:69:36:23:5b:9f:db:
                    cd:81:f4:0b:9a:0c:2a:88:dc:db:ea:1c:65:b5:b1:
                    28:90:ec:16:e1:db:2c:82:50:4f:e3:9c:40:f9:ec:
                    20:f6:09:0e:5c:b0:cc:77:99:41:a6:4c:f6:19:0d:
                    a5:96:a3:6a:bd:fc:03:2d:59:4e:e0:8b:15:26:c0:
                    51:ad:14:da:55:03:fc:1e:db:4b:1e:c5:9b:5c:e5:
                    c5:99:93:18:94:3a:f4:5c:7e:75:05:f3:d1:7e:0a:
                    20:62:18:a2:8d:19:df:ca:09:88:d8:61:43:70:a2:
                    6f:9c:33:42:e7:21:1e:58:42:73:83:39:e9:09:5b:
                    11:b0:67:d3:38:74:54:d5:ac:dd:f6:7d:df:77:1b:
                    ad:9b:ab:eb:f4:3a:ab:70:a3:03:91:ea:7d:8d:5b:
                    f0:2c:94:8f:57:35:41:00:13:4a:ca:d5:4d:c5:12:
                    79:e3:8c:35:8c:f6:22:da:78:65:76:4d:0b:1d:28:
                    d6:0e:f5:57:d5:2c:3a:29:57:51:f5:49:68:06:97:
                    ea:5f:57:d3:c2:4c:ee:90:68:91:f4:31:57:b1:ec:
                    ce:46:fb:9a:d2:de:2c:6f:9c:a4:6c:52:84:c3:44:
                    c0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:39:31:A7:6F:08:91:2B:8D:2D:BA:98:DE:09:9B:77:12:EB:38:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc4c4b89-4992-35a1-86e6-767de781e1b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:37:c7:f8:b9:b5:62:c7:dc:75:92:7c:3c:bb:fb:da:4b:1b:
         ef:37:9a:91:99:f3:41:be:d4:ee:4c:95:52:5d:f8:12:47:37:
         74:cb:eb:48:91:78:13:b3:ca:df:96:b7:ea:c7:27:88:78:c0:
         3f:b7:a9:9b:00:aa:d1:53:cc:f6:8c:a0:c5:d3:21:1e:49:01:
         42:fd:0a:51:5d:7a:6a:67:62:3d:d0:e1:27:e1:3e:1e:14:7a:
         31:95:cd:9a:8b:d3:f2:0c:53:9b:32:f4:a2:94:c1:54:05:a2:
         16:de:f8:2f:b9:5d:55:16:a9:ed:52:83:ff:07:4d:9a:29:88:
         9e:69:fc:76:25:3d:f6:01:fc:58:17:90:81:11:39:aa:4f:c9:
         fa:63:fa:71:c0:ce:b3:49:fb:7a:d5:1f:8d:77:12:cd:a2:54:
         40:8b:96:a3:e6:40:ff:82:82:08:a0:fd:6b:a7:f1:a3:ba:8d:
         91:2d:f1:25:2a:6b:10:33:be:c9:98:a4:dc:db:64:44:c5:7b:
         f9:2b:7d:7d:54:cf:8d:25:f2:de:16:18:5d:7f:20:7e:78:24:
         a7:af:12:6a:b1:d0:56:0b:03:82:ab:15:24:fc:eb:48:61:9e:
         53:e8:47:1b:ee:c2:f0:94:a5:b2:10:68:d9:30:86:0e:9c:57:
         f9:82:d4:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpQrGjzzsrfoUe0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl
YzhhMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk
ZjQ1Y2U3YmQtYThkNS00ZWMxLWE4NmItYzk0MzhiMzgwNTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhzu8EHxbavIVgCec82DLzChuJv3ncZpNiNb
n9vNgfQLmgwqiNzb6hxltbEokOwW4dssglBP45xA+ewg9gkOXLDMd5lBpkz2GQ2l
lqNqvfwDLVlO4IsVJsBRrRTaVQP8HttLHsWbXOXFmZMYlDr0XH51BfPRfgogYhii
jRnfygmI2GFDcKJvnDNC5yEeWEJzgznpCVsRsGfTOHRU1azd9n3fdxutm6vr9Dqr
cKMDkep9jVvwLJSPVzVBABNKytVNxRJ544w1jPYi2nhldk0LHSjWDvVX1Sw6KVdR
9UloBpfqX1fTwkzukGiR9DFXsezORvua0t4sb5ykbFKEw0TAQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMA5MadvCJErjS26mN4Jm3cS6zjYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy
NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvZmM0YzRiODktNDk5Mi0z
NWExLTg2ZTYtNzY3ZGU3ODFlMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh
MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm
ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh
NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACY3x/i5tWLH3HWSfDy7+9pLG+83mpGZ80G+1O5MlVJd+BJHN3TL60iR
eBOzyt+Wt+rHJ4h4wD+3qZsAqtFTzPaMoMXTIR5JAUL9ClFdempnYj3Q4SfhPh4U
ejGVzZqL0/IMU5sy9KKUwVQFohbe+C+5XVUWqe1Sg/8HTZopiJ5p/HYlPfYB/FgX
kIEROapPyfpj+nHAzrNJ+3rVH413Es2iVECLlqPmQP+Cggig/Wun8aO6jZEt8SUq
axAzvsmYpNzbZETFe/krfX1Uz40l8t4WGF1/IH54JKevEmqx0FYLA4KrFST860hh
nlPoRxvuwvCUpbIQaNkwhg6cV/mC1Kw=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:51 2026 by rpki-client