Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/594356a4-e5f9-3f76-b273-c48e596fa7a9.roa
File:                     594356a4-e5f9-3f76-b273-c48e596fa7a9.roa (raw, json)
Hash identifier:          nZhyC0nSIzq8ST+wXx3L/wF2kN9Xqp94OK5PVMwT8z0=
Subject key identifier:   E8:A0:4E:29:30:6E:4A:3F:64:79:FF:7B:98:73:9B:6F:38:F7:D5:C4
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285845B7B38247CF72911EA61F3E80
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/594356a4-e5f9-3f76-b273-c48e596fa7a9.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     31898
IP address blocks:        168.225.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:82:47:cf:72:91:1e:a6:1f:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=6e17f5c3-83f4-489e-b5ad-cede4dcced7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:ae:4b:26:3f:36:91:19:43:34:36:48:53:
                    80:be:9c:cf:af:9f:34:df:59:cb:d3:e9:a7:a7:3c:
                    20:bd:68:94:70:b6:5f:99:d2:4c:86:a9:de:16:8b:
                    9b:a1:79:7c:6e:89:7b:33:81:d2:72:bf:01:c2:af:
                    e9:6f:1f:b8:62:45:02:20:22:7e:e3:ad:6a:ab:5d:
                    d0:fa:b8:06:92:4d:4b:54:d8:c3:18:42:7a:e0:85:
                    47:86:4e:d2:1d:98:a7:95:c1:ee:f9:99:74:75:f1:
                    eb:e7:9f:ef:e3:68:13:f4:4b:78:64:e9:0e:3a:66:
                    6d:23:57:f9:dd:15:30:00:53:38:ca:4e:e3:4a:a9:
                    08:4d:b2:65:54:b5:02:d8:5a:67:e2:d1:3a:c5:1e:
                    dd:a8:f8:2d:b1:b5:fa:5a:a3:f5:91:1b:12:a9:94:
                    c4:4b:e7:49:3d:f8:4f:f5:4a:0a:ca:a2:e2:ba:02:
                    71:19:14:27:e3:c9:1c:a3:09:6d:40:2e:a2:94:7b:
                    b7:f3:d5:18:2d:6a:ec:1b:21:bb:25:5e:e6:09:76:
                    4d:54:ee:8a:dd:20:d4:4c:b6:d1:33:1b:20:dc:eb:
                    03:9b:78:06:c4:7e:0d:a5:6d:47:cb:79:4c:ef:fb:
                    ef:f4:74:18:ed:3b:1b:d5:0a:11:2e:2b:a2:76:a4:
                    c2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A0:4E:29:30:6E:4A:3F:64:79:FF:7B:98:73:9B:6F:38:F7:D5:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/594356a4-e5f9-3f76-b273-c48e596fa7a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:51:85:f6:84:15:4d:f4:05:ef:b5:01:ff:b2:be:6f:da:00:
         5f:11:a7:ec:9b:9d:1e:9b:b6:2d:f0:62:e7:b7:96:d8:df:2c:
         09:89:e9:3f:7c:5c:de:cd:b0:b2:79:96:d3:b1:e4:47:e4:42:
         00:7c:0e:6e:07:a3:92:ae:77:9f:26:48:b8:c4:f7:16:95:ad:
         ff:2d:c3:21:7a:b8:11:d9:69:cc:ed:60:36:e5:2e:60:4c:19:
         d5:82:a2:35:47:4c:80:9c:38:0f:fb:49:d2:7b:cd:5e:aa:51:
         64:56:ec:7e:1d:e3:83:17:ee:48:44:18:02:e4:48:33:df:31:
         06:c5:97:c6:6e:da:a7:1e:16:97:ab:9c:15:d9:4a:95:6c:62:
         26:04:fc:ac:21:bc:d5:c8:d3:18:cb:bf:d8:68:7a:12:ef:00:
         dc:55:4c:10:1b:0b:10:7f:0c:fd:94:cc:9b:d9:e1:bd:eb:61:
         4c:c1:ae:99:ae:03:13:c5:2b:fa:78:d2:bf:aa:82:d2:db:88:
         43:4d:75:ec:35:6c:82:ec:e5:37:e7:fb:45:73:c9:fc:ec:3e:
         66:0c:2c:b5:70:47:f2:78:30:fc:42:34:01:79:a0:af:f1:1c:
         31:8f:0e:04:ed:09:7b:e2:f8:4d:7d:6c:c5:fb:a7:c4:9a:97:
         26:cc:bb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:26:39 2024 by rpki-client on console-fra.rpki-client.org