Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/3ac7bb73-928f-3277-9b2f-6b396667d16e.roa
File:                     3ac7bb73-928f-3277-9b2f-6b396667d16e.roa (raw, json)
Hash identifier:          u4tlh/gvl4SQeBVuRJHcKvhaJBOQUuaqgTCfFUfiKC0=
Subject key identifier:   12:93:E8:1D:B1:B4:2A:42:60:18:52:2A:6E:43:89:EF:90:C1:29:73
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285845462FA0F2ED1A3565F2E2DA00
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/3ac7bb73-928f-3277-9b2f-6b396667d16e.roa
Signing time:             Wed 20 Mar 2024 21:08:37 +0000
ROA not before:           Wed 20 Mar 2024 21:08:37 +0000
ROA not after:            Tue 18 Jun 2024 21:08:37 +0000
asID:                     31898
IP address blocks:        168.225.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:2f:a0:f2:ed:1a:35:65:f2:e2:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar 20 21:08:37 2024 GMT
            Not After : Jun 18 21:08:37 2024 GMT
        Subject: CN=dac480fb-6493-4a8d-a4eb-512a2faaf7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ba:32:06:ae:46:d9:16:8f:97:97:24:e4:d7:
                    76:21:ff:76:b6:1d:cc:14:3d:38:52:2c:e9:b6:6f:
                    f8:18:19:c4:17:ec:32:95:ff:f4:d9:c7:c7:2a:48:
                    4a:43:42:1d:01:46:d1:33:de:5c:e1:66:ef:2b:44:
                    87:c8:44:f3:89:57:3c:6f:ff:dc:70:12:73:d9:4f:
                    2a:df:ae:c2:fd:be:84:ad:09:a0:4f:d2:95:36:8c:
                    a8:ce:14:80:a1:1b:6e:49:49:4f:20:d2:a0:6f:67:
                    48:74:57:2e:d1:7b:9e:3f:e7:79:c6:de:84:09:e3:
                    ad:98:b2:f5:ed:1b:37:b5:b9:80:8e:68:ff:2e:02:
                    e1:d7:3f:04:b2:27:5d:3f:4a:42:73:f2:10:6e:17:
                    64:2c:b5:5f:13:ed:e4:42:85:d8:ec:0c:40:c5:d5:
                    d2:51:8b:6f:02:57:17:29:1c:84:ed:53:e4:74:1f:
                    a7:ae:7e:4d:22:7c:82:7c:e9:25:82:d3:5f:52:3c:
                    57:60:e6:3b:0b:38:8a:96:2e:36:4f:d7:09:05:24:
                    4e:90:d1:d5:9f:e1:f1:93:fd:8a:c5:65:58:ce:87:
                    c9:be:8a:04:87:ae:b3:e8:e2:29:78:f2:a9:12:33:
                    c1:21:83:13:8a:4a:e2:13:f5:30:c7:5a:a2:77:95:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:93:E8:1D:B1:B4:2A:42:60:18:52:2A:6E:43:89:EF:90:C1:29:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/3ac7bb73-928f-3277-9b2f-6b396667d16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:42:4a:ed:48:5c:b9:8f:14:f3:71:c3:cc:2f:08:66:da:e6:
         02:58:5a:11:e2:80:f8:29:51:70:56:23:39:11:3c:b7:b7:70:
         e1:85:9b:26:ba:ee:02:2d:14:01:d3:de:60:a6:79:f7:2d:92:
         2c:2b:c8:6f:78:7a:e3:c8:db:6b:5a:07:27:8b:84:f6:39:0e:
         5e:44:ec:46:63:63:4b:8d:f3:12:48:76:40:03:38:bf:37:fc:
         3c:4f:14:21:0e:97:8e:9a:31:7a:19:0e:a4:da:f8:17:f7:b7:
         85:61:e1:fc:ae:f0:3d:87:90:c4:9b:74:06:ee:cd:de:6f:63:
         6d:4d:9b:bf:ad:f3:68:c3:94:97:b5:15:20:2f:09:1a:5d:23:
         8f:90:df:4a:15:34:5f:cd:7a:a5:4b:91:51:50:d2:45:ef:48:
         ad:b5:29:7b:e2:33:e8:9a:0c:8d:0c:ff:09:fa:96:56:f7:65:
         ea:f6:79:72:b6:49:5f:dd:f7:9e:ed:7f:aa:d9:0c:3b:68:f4:
         e5:60:3a:50:32:49:a2:c0:cf:d9:9c:e2:93:eb:a8:f2:d0:89:
         cc:12:05:22:5e:fb:b5:c3:16:da:aa:d8:5e:1b:5c:66:e0:5d:
         55:98:ff:b0:ae:e9:cc:98:f3:b5:76:32:40:e0:be:b8:75:a2:
         64:bc:74:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVGL6Dy7Ro1ZfLi2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl
YzhhMB4XDTI0MDMyMDIxMDgzN1oXDTI0MDYxODIxMDgzN1owLzEtMCsGA1UEAxMk
ZGFjNDgwZmItNjQ5My00YThkLWE0ZWItNTEyYTJmYWFmN2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhboyBq5G2RaPl5ck5Nd2If92th3MFD04Uizp
tm/4GBnEF+wylf/02cfHKkhKQ0IdAUbRM95c4WbvK0SHyETziVc8b//ccBJz2U8q
367C/b6ErQmgT9KVNoyozhSAoRtuSUlPINKgb2dIdFcu0XueP+d5xt6ECeOtmLL1
7Rs3tbmAjmj/LgLh1z8EsiddP0pCc/IQbhdkLLVfE+3kQoXY7AxAxdXSUYtvAlcX
KRyE7VPkdB+nrn5NInyCfOklgtNfUjxXYOY7CziKli42T9cJBSROkNHVn+Hxk/2K
xWVYzofJvooEh66z6OIpePKpEjPBIYMTikriE/Uwx1qid5XsNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBKT6B2xtCpCYBhSKm5Die+QwSlzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy
NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvM2FjN2JiNzMtOTI4Zi0z
Mjc3LTliMmYtNmIzOTY2NjdkMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh
MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm
ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh
NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBCSu1IXLmPFPNxw8wvCGba5gJYWhHigPgpUXBWIzkRPLe3cOGFmya6
7gItFAHT3mCmefctkiwryG94euPI22taByeLhPY5Dl5E7EZjY0uN8xJIdkADOL83
/DxPFCEOl46aMXoZDqTa+Bf3t4Vh4fyu8D2HkMSbdAbuzd5vY21Nm7+t82jDlJe1
FSAvCRpdI4+Q30oVNF/NeqVLkVFQ0kXvSK21KXviM+iaDI0M/wn6llb3Zer2eXK2
SV/d957tf6rZDDto9OVgOlAySaLAz9mc4pPrqPLQicwSBSJe+7XDFtqq2F4bXGbg
XVWY/7Cu6cyY87V2MkDgvrh1omS8dD0=
-----END CERTIFICATE-----
Generated at Wed May 1 20:51:17 2024 by rpki-client on console-ams.rpki-client.org