Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/1c0a76cd-a848-347a-8534-bb81117de2e4.roa
File:                     1c0a76cd-a848-347a-8534-bb81117de2e4.roa (raw, json)
Hash identifier:          Sp7wxmJhpLJZv6Irz/1fgywMi6/glW+HkXKFrBu8+Dw=
Subject key identifier:   1A:43:EF:4D:25:A6:73:58:BF:FA:9B:6C:EB:DB:8B:69:A6:D1:DB:33
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584A093A9A289C8F67A8D672D680
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/1c0a76cd-a848-347a-8534-bb81117de2e4.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     63360
IP address blocks:        168.225.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:9a:28:9c:8f:67:a8:d6:72:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=5d72737a-b09e-4345-b168-e4a72513e72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:65:11:8a:cf:a5:91:8d:bd:d5:98:db:02:77:
                    13:9a:f2:f4:4f:22:e0:46:a4:70:82:db:cd:96:0c:
                    56:51:d7:30:34:d7:14:0f:5f:26:5c:26:3f:49:aa:
                    3b:43:39:10:42:60:6f:39:f1:3b:7e:21:1f:de:f5:
                    60:be:ab:22:01:6f:18:78:f4:df:a8:de:10:05:1d:
                    05:34:60:9c:00:41:07:7e:01:ad:5c:30:e4:7a:8e:
                    b5:b6:6d:94:60:af:12:6c:89:98:12:ca:87:d3:2a:
                    7f:fa:92:d6:87:5b:c3:cb:f1:15:7f:5d:e3:da:f2:
                    32:09:2b:fe:fc:5d:3e:71:ad:21:6a:c2:4b:ec:da:
                    27:0e:c4:d1:98:18:5c:fa:13:38:25:d4:1e:18:f6:
                    7a:64:f5:ba:83:89:e8:fa:0c:0c:28:4d:09:58:94:
                    48:2d:8a:07:a4:b0:51:f9:cd:ec:b7:16:6a:85:6a:
                    66:b3:6e:88:d0:ad:b5:bb:27:10:bb:38:0b:92:bf:
                    bf:42:97:b1:33:59:82:52:0d:cd:93:d9:cc:b5:78:
                    ed:24:bd:39:29:3c:ff:46:57:39:8b:16:b1:15:2f:
                    df:04:02:2d:e8:c4:ff:4c:8b:05:09:ac:c9:1b:d5:
                    74:bf:7f:e5:3c:43:21:f5:a0:02:99:ad:15:68:83:
                    db:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:43:EF:4D:25:A6:73:58:BF:FA:9B:6C:EB:DB:8B:69:A6:D1:DB:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/1c0a76cd-a848-347a-8534-bb81117de2e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:0f:bc:a7:45:0d:54:7b:ce:11:58:47:6b:e4:08:5e:e9:82:
         b9:f9:d4:e2:04:0f:db:72:b4:39:7d:78:25:f3:d8:a6:66:f9:
         2b:db:18:b1:ca:15:86:d5:51:01:df:c0:14:75:e2:8e:8f:5a:
         55:95:94:55:39:57:ca:a1:50:19:1e:0f:5d:81:62:27:e1:d3:
         ec:d2:61:26:e3:ff:f9:a6:2f:1d:b4:b5:16:52:2d:5b:c3:6a:
         3f:e2:9a:40:00:34:25:a5:b1:20:00:cc:d8:2b:07:cc:e2:e9:
         14:3e:16:6b:8b:db:b1:ad:1c:fc:af:76:47:6b:c8:38:d8:13:
         a0:f5:88:59:b0:06:7f:ad:e6:56:cb:fb:ae:15:e9:45:1e:3d:
         6a:94:57:c4:74:27:87:ac:95:aa:c9:06:12:7e:b5:80:cc:bd:
         02:f7:84:97:e0:8d:04:9f:a7:29:3b:75:fd:9e:e2:17:60:67:
         52:5e:ef:45:9a:43:2a:77:66:b7:0e:aa:d1:84:89:98:35:a4:
         38:1e:c8:d8:40:49:37:8e:42:68:c6:ab:b3:9d:41:ca:5f:a7:
         cf:cf:3d:d7:df:a3:f5:89:b8:2e:41:d1:76:83:bb:e9:a0:f0:
         6f:8e:4e:bf:12:db:47:52:1b:20:91:51:3f:3c:93:47:00:1a:
         84:e9:3a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:17:20 2025 by rpki-client