Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/5857a0a4-8042-3ccf-aa23-80ca8556bcbd.roa
File:                     5857a0a4-8042-3ccf-aa23-80ca8556bcbd.roa (raw, json)
Hash identifier:          YOlzWfxSAif7Ll6jmwTgL/EZfmwxy9fuJuKZ47wcFs4=
Subject key identifier:   2E:10:D2:7E:6E:60:0E:09:F5:8B:08:A3:9D:37:D7:0B:DA:5D:6E:36
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F432858454631BA61720A87B69AE80B4E
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/5857a0a4-8042-3ccf-aa23-80ca8556bcbd.roa
Signing time:             Wed 20 Mar 2024 21:12:51 +0000
ROA not before:           Wed 20 Mar 2024 21:12:51 +0000
ROA not after:            Tue 18 Jun 2024 21:12:51 +0000
asID:                     31898
IP address blocks:        168.225.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:31:ba:61:72:0a:87:b6:9a:e8:0b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar 20 21:12:51 2024 GMT
            Not After : Jun 18 21:12:51 2024 GMT
        Subject: CN=427a8816-dbe7-4e83-b6fc-a456da8dffc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:69:84:5c:17:03:32:bd:a5:4c:05:3a:c1:
                    30:ed:a0:5a:a8:88:dc:91:f8:76:a8:89:5b:a0:86:
                    fa:99:4b:6f:ff:27:ab:93:6a:ce:c9:36:82:da:6d:
                    e7:95:70:bc:0a:3d:8e:32:64:2c:9f:b8:66:ff:cd:
                    4f:58:a2:25:12:41:d1:a8:03:d5:d8:aa:e7:5a:d4:
                    67:81:19:f0:c0:8d:74:c7:42:a1:94:48:8e:52:75:
                    52:80:44:f7:df:bd:17:1e:4b:86:72:a4:d2:bf:ce:
                    68:4f:ad:a2:08:de:79:c6:60:a6:f7:17:0e:db:01:
                    ea:40:15:6e:8a:23:63:e0:0a:96:52:c4:74:96:3f:
                    7c:3c:da:6a:9f:4e:42:07:b0:f0:30:48:e6:75:72:
                    07:02:ac:0d:b0:03:a9:78:11:64:3a:0e:62:49:2e:
                    ca:c0:ab:ed:55:68:9a:c7:d8:52:a9:02:a6:46:da:
                    45:e3:66:de:dc:14:65:7c:99:32:bf:24:b9:5e:e8:
                    04:f3:01:86:ac:26:42:98:85:eb:eb:3a:00:8b:c3:
                    06:6c:c9:46:93:27:81:9e:cd:de:40:ba:c0:86:8d:
                    57:f9:1f:7d:d6:be:18:2b:85:88:99:d3:7e:02:57:
                    47:9e:ed:34:af:b1:95:40:f7:58:79:23:86:93:89:
                    27:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:10:D2:7E:6E:60:0E:09:F5:8B:08:A3:9D:37:D7:0B:DA:5D:6E:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/5857a0a4-8042-3ccf-aa23-80ca8556bcbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e0:cb:65:41:7b:31:fa:6c:71:d6:c1:63:d8:b9:b8:b1:28:
         3a:0a:a9:1d:66:fa:a7:12:be:2c:3c:80:d2:6d:ed:ba:cb:10:
         e6:b8:60:f6:c0:5a:99:a3:9e:73:73:1c:e6:13:1e:79:1f:1e:
         df:28:17:ca:8e:51:ae:97:d5:9c:ef:b2:4c:61:be:aa:6a:80:
         0f:66:8b:f1:9b:47:ff:29:96:a8:9b:66:f5:22:3a:3c:cf:75:
         03:c3:52:7d:df:90:69:fc:03:82:4b:c8:44:f3:81:48:bf:52:
         1a:6f:cd:cd:1e:8f:df:45:40:b5:db:28:3c:e4:84:bd:a7:03:
         35:2d:9c:40:e2:8c:b3:5c:82:02:ff:66:d3:7f:9c:45:db:04:
         0b:2a:fa:4f:f3:7f:d7:a3:9e:50:65:85:98:11:57:bb:14:cb:
         b6:81:82:26:73:b5:a3:0d:56:34:8f:f7:08:19:ef:92:b0:43:
         6c:86:2e:d2:ad:4f:5e:60:7d:82:7b:9d:ed:40:20:91:1e:c9:
         24:8d:c0:d0:2f:67:0a:8f:69:1a:87:c8:56:70:2b:65:51:34:
         be:a1:87:fd:7a:27:d4:31:82:f2:76:4c:d8:dc:98:32:e9:4f:
         7b:a2:c7:d4:e5:c4:f2:82:da:7e:30:0c:97:ab:23:fe:5f:63:
         7a:30:4c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:17 2024 by rpki-client on console-ams.rpki-client.org