Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/471e7554-71ea-3879-9fd4-c8afa996b253.roa
File:                     471e7554-71ea-3879-9fd4-c8afa996b253.roa (raw, json)
Hash identifier:          RwYmxYGhDvbj/Zgt7Bddry1ZZcecufN12Mm/0dXh7Uk=
Subject key identifier:   B2:22:C7:2F:4A:1F:2C:AF:F7:F1:87:11:74:FF:E5:8E:E2:8B:6D:5F
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584929B898CBE0FD8A7E686A3480
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/471e7554-71ea-3879-9fd4-c8afa996b253.roa
Signing time:             Wed 12 Mar 2025 11:33:54 +0000
ROA not before:           Wed 12 Mar 2025 11:33:54 +0000
ROA not after:            Tue 10 Jun 2025 11:33:54 +0000
asID:                     63360
IP address blocks:        168.225.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:b8:98:cb:e0:fd:8a:7e:68:6a:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar 12 11:33:54 2025 GMT
            Not After : Jun 10 11:33:54 2025 GMT
        Subject: CN=31c80757-bdaf-4dda-a2c6-3ec78fd41dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:75:8f:0e:36:ac:0d:2a:23:cf:7e:0b:33:78:
                    4e:49:6f:ab:6d:07:08:26:54:29:e4:c0:d6:27:20:
                    4a:e3:65:d6:1d:4f:93:85:eb:cd:6c:19:88:a5:3a:
                    e3:f6:f4:44:69:b4:99:0f:59:11:b5:91:ca:10:28:
                    b5:80:a0:fd:4a:10:c0:7a:1f:54:49:6f:eb:f1:fc:
                    20:88:c3:95:6a:7b:c7:de:3d:3a:b1:d4:a2:b9:71:
                    7b:01:9f:ea:cd:1a:ff:1b:e3:7d:df:2c:32:a7:07:
                    e1:dc:e5:9b:6d:35:ac:79:4c:f1:31:58:5d:47:46:
                    49:57:74:ac:0c:e7:f0:a5:95:34:e9:20:be:74:8a:
                    fa:81:32:36:71:12:df:e9:93:da:14:6a:d6:2d:f2:
                    56:46:a7:a2:df:d3:44:fa:f2:ea:22:e8:35:62:54:
                    6a:c2:3d:7e:97:2d:62:24:ff:18:05:9d:fa:2c:db:
                    c0:ec:5b:8e:6f:c4:b9:00:42:27:8a:6a:96:75:0d:
                    8c:22:52:d4:d6:7f:d3:65:85:c7:7f:82:3c:ce:1f:
                    b8:17:6b:67:67:5a:71:af:ba:c5:2d:95:49:89:a9:
                    f5:e2:c0:76:b4:e1:38:64:fe:a8:80:84:c0:3f:99:
                    36:32:11:6c:6f:26:5d:a1:db:e9:b1:a9:83:58:ee:
                    7b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:22:C7:2F:4A:1F:2C:AF:F7:F1:87:11:74:FF:E5:8E:E2:8B:6D:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/471e7554-71ea-3879-9fd4-c8afa996b253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b8:28:2b:6c:0c:1c:fa:ef:45:24:a1:c0:32:9c:7c:24:32:
         fd:2e:3c:1a:d9:ab:61:c5:c6:2f:b9:d6:52:a8:11:b6:c9:be:
         2b:19:46:af:ba:ca:2b:ab:b2:c8:ee:52:33:77:45:79:9f:af:
         8c:68:da:77:8f:81:3d:fd:2c:c7:12:31:39:85:7d:1f:40:19:
         89:4a:34:19:f3:fc:4a:19:9b:e1:ee:54:f0:84:2b:77:d0:64:
         3f:cd:8e:4c:8b:ed:9c:95:ad:36:1e:cd:d1:c0:57:66:e9:46:
         d9:e7:fe:b0:58:e3:3b:6a:87:df:73:27:0c:14:c2:34:05:dc:
         38:c9:eb:ee:1c:91:60:79:12:b9:35:b5:b5:6f:93:2b:d7:3a:
         6c:b2:1f:74:cc:dc:76:96:3b:c8:ea:85:78:34:12:11:c7:59:
         47:7e:46:b3:72:d2:fb:d7:bf:af:77:a8:21:45:22:a7:a2:ac:
         42:ef:06:80:86:85:c6:42:af:11:87:97:fe:e3:a9:a5:99:d7:
         6e:3c:ea:e1:b4:f3:67:b4:76:6a:db:05:56:bb:59:6b:22:b4:
         3f:1f:ef:c3:df:40:31:d8:5d:3a:6d:32:eb:67:64:07:87:7e:
         38:1a:25:5c:bb:ed:3c:07:1a:1f:d8:a3:61:7f:ca:b8:bb:75:
         59:2b:fd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:17:24 2025 by rpki-client