Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/3ac7bb73-928f-3277-9b2f-6b396667d16e.roa
File:                     3ac7bb73-928f-3277-9b2f-6b396667d16e.roa (raw, json)
Hash identifier:          VIjsKSw3sB1LQ7QPYosEqQ0rLdU4HaQqFMtcPgXbXSM=
Subject key identifier:   05:67:AC:61:67:B7:27:AE:AE:5A:0F:EA:C8:8D:D1:EF:AE:D8:DE:D9
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285847E62A26C31E007AE00C91B300
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/3ac7bb73-928f-3277-9b2f-6b396667d16e.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     31898
IP address blocks:        168.225.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:26:c3:1e:00:7a:e0:0c:91:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=fe6dea06-7cb3-4fe6-a010-d08b12a4d64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ff:87:b6:84:23:d3:5f:2a:dc:e4:b5:e1:fb:
                    90:38:9d:39:69:31:91:4b:a7:fb:19:11:97:d7:e6:
                    cd:08:0d:41:95:d8:32:90:14:a8:5e:ce:cb:88:ed:
                    b1:14:92:9f:1e:3b:2a:6c:db:42:7b:d6:b3:35:5f:
                    88:92:7b:39:32:66:07:0e:9f:bc:ef:2d:7a:3b:4a:
                    77:97:55:64:36:17:75:93:a2:6f:f3:bc:e1:4e:a8:
                    b5:55:95:18:4f:0c:7e:75:f8:87:b9:90:60:2e:5e:
                    fe:30:57:f3:70:86:14:16:70:fc:9f:bf:e3:6f:8f:
                    3c:2a:e3:80:c4:c1:cd:be:bc:f9:59:81:7a:76:17:
                    93:27:a2:9e:0b:2f:ed:ad:22:21:38:e8:94:4c:e6:
                    52:ad:29:ca:e9:2a:0b:ac:5d:2f:65:8e:23:eb:44:
                    4f:59:02:2e:ae:37:47:6f:4f:0b:a7:98:18:a3:ab:
                    a3:12:cd:a4:5f:5a:91:f1:26:c0:2f:d3:60:9a:f8:
                    6c:0b:ae:a5:ae:5e:c7:45:b8:12:6b:fb:53:8d:38:
                    d7:a7:58:0c:ea:6b:e0:95:2d:90:65:38:59:77:d3:
                    1e:32:11:a6:00:87:20:73:d5:f7:93:d5:dd:53:f4:
                    71:94:52:f6:03:25:2c:c0:50:9a:f2:78:54:e9:d7:
                    aa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:67:AC:61:67:B7:27:AE:AE:5A:0F:EA:C8:8D:D1:EF:AE:D8:DE:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/3ac7bb73-928f-3277-9b2f-6b396667d16e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f8:32:00:2e:c5:70:dd:bf:24:e3:10:b3:3e:f9:7c:a5:2e:
         48:d9:a7:4c:f5:35:83:4e:23:14:10:29:1f:f8:65:e3:e8:f2:
         41:71:94:cf:68:48:1f:dd:64:35:1c:9b:6c:37:9c:ba:8c:c2:
         a5:79:c2:0e:7c:79:40:11:75:32:43:ae:89:36:a6:8e:b9:e8:
         8a:d1:a7:d1:6d:88:e7:87:34:be:e0:ef:70:02:ed:18:6e:4a:
         4c:05:a8:c7:f5:82:4e:36:1a:e7:86:48:a1:7c:6b:39:1a:fc:
         fb:ed:83:03:65:73:d9:e0:a2:10:f4:6c:45:d9:dc:d0:20:ff:
         91:d9:b2:2b:8a:26:f3:68:ce:57:02:e2:b6:84:98:19:3d:38:
         0b:d3:5d:a1:63:8d:84:59:19:c9:a8:3a:6f:b4:e6:0b:63:6e:
         b6:8a:0f:05:84:37:37:e1:d7:a8:2c:bc:1b:04:65:a5:bb:55:
         fc:d8:8e:7d:50:92:fa:d1:e2:47:62:96:55:2d:3b:f4:c8:ed:
         de:45:94:f5:c9:73:67:39:2a:fa:0f:c6:d6:dc:63:0b:c8:11:
         83:f9:22:bc:79:d4:87:86:a1:44:b3:1d:e1:c5:67:16:83:05:
         4c:af:63:f7:16:fc:27:34:6a:c8:7a:60:a2:a3:35:45:16:fe:
         1a:72:16:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:05 2024 by rpki-client on console-fra.rpki-client.org