Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ffe10a4a-433b-3696-8bd3-f6fad77d0bfa.roa
File:                     ffe10a4a-433b-3696-8bd3-f6fad77d0bfa.roa (raw, json)
Hash identifier:          vu1erMn1KsIc7wK6aFtjyj2WF7U6cf/0fY8cKVZPWuw=
Subject key identifier:   14:43:2B:90:8F:11:CA:DD:6C:22:06:A5:E1:8E:9F:80:31:78:EA:F1
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584D6515219BD41FE6D3C999A580
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ffe10a4a-433b-3696-8bd3-f6fad77d0bfa.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     63360
IP address blocks:        168.225.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:21:9b:d4:1f:e6:d3:c9:99:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=190bd5cc-5eae-4733-bbc4-fa4f1da321cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:8d:ed:b7:c3:75:4c:22:9a:1e:dc:5b:19:
                    63:98:ee:c1:82:3a:90:ec:2e:24:e8:7e:05:d5:a6:
                    0c:6b:5f:5c:a2:d4:1d:ee:be:8d:8d:d3:71:38:6e:
                    d3:83:a5:9b:f1:1f:ab:a7:66:8f:e9:d7:ea:ba:06:
                    e7:a4:85:8d:fb:9f:ed:2d:5c:72:ad:7e:5d:5e:36:
                    4b:ac:8f:1f:7e:de:2c:ab:d0:65:8f:51:95:12:04:
                    24:4b:77:a4:2d:d3:b0:01:8d:79:ad:95:83:ac:5a:
                    70:62:f4:73:c3:63:15:a4:09:98:b9:7f:e9:35:96:
                    3a:c4:f2:d9:cf:51:8d:7f:5f:b2:8f:76:e7:ef:b0:
                    13:c5:f6:2b:5d:2e:96:6e:d0:1a:a0:4a:39:99:fe:
                    8a:55:4f:e9:ad:63:77:db:60:eb:70:a9:f9:12:8f:
                    e2:93:77:74:7a:b7:13:04:51:aa:3c:2e:d7:b6:b7:
                    8c:a9:e6:38:80:8a:a7:69:43:0d:5e:23:f1:6c:75:
                    a4:02:16:1d:4f:2e:a5:80:98:28:74:ff:76:2a:e5:
                    7d:a6:7c:bc:7a:61:68:37:dd:0c:6e:47:66:97:83:
                    fb:38:ad:59:ce:47:93:33:dc:a0:3a:82:0e:8c:48:
                    f6:ea:6a:7b:21:31:ad:9a:2e:70:73:59:19:e7:0d:
                    84:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:43:2B:90:8F:11:CA:DD:6C:22:06:A5:E1:8E:9F:80:31:78:EA:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ffe10a4a-433b-3696-8bd3-f6fad77d0bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:36:79:d6:41:c6:4d:1f:e7:db:7a:31:f7:ce:26:7e:a2:58:
         d9:ff:8e:91:00:fa:2f:d0:d7:59:3a:cc:04:83:72:b7:a4:c9:
         3a:75:52:fe:2f:aa:16:ee:4f:a4:75:98:45:69:37:eb:5e:d5:
         52:f7:6c:5c:b1:34:8c:b1:b6:c9:f6:e8:09:e8:72:ea:99:c4:
         c4:2d:ae:4b:1f:ce:ba:54:31:13:36:41:e7:3e:d7:6e:c3:48:
         e2:12:61:9d:ba:b4:9c:d9:6e:1b:00:37:fa:ee:3e:d1:ce:84:
         a9:ef:ba:b3:95:af:fb:ae:35:3b:d6:4f:43:37:86:4f:fd:d4:
         a8:f9:24:54:b1:84:ba:1f:d9:ad:0d:e7:f1:51:f7:da:ab:a2:
         d5:76:be:45:ef:16:24:49:6e:68:80:d0:86:38:81:5b:fb:89:
         44:1d:5c:e7:26:91:eb:66:5c:ca:cf:a9:23:93:db:37:b2:dc:
         1d:60:dc:29:30:fc:a2:b5:9c:a8:da:2e:b1:ee:99:3c:e7:e4:
         03:5b:db:af:d8:be:60:2b:96:1e:33:f1:20:93:f5:f4:50:5e:
         0f:e9:91:84:4a:a2:41:a5:00:73:f9:93:4f:22:26:d1:a2:6e:
         5a:e7:a2:d6:3d:47:ea:a2:47:93:17:5e:f7:f5:7b:5e:c0:d2:
         05:e4:4a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:25 2026 by rpki-client