Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/594356a4-e5f9-3f76-b273-c48e596fa7a9.roa
File:                     594356a4-e5f9-3f76-b273-c48e596fa7a9.roa (raw, json)
Hash identifier:          wLw7WOttWfs/UqEdMAdNgQQjk1qQQFGSlTzH5e4KduM=
Subject key identifier:   EE:29:10:82:92:3E:26:47:E0:55:0E:89:B7:7D:38:16:D5:EE:B0:0D
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285847766108AE075EC4C7ED9D2B00
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/594356a4-e5f9-3f76-b273-c48e596fa7a9.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     31898
IP address blocks:        168.225.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:08:ae:07:5e:c4:c7:ed:9d:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=b6127587-15a6-485b-8c3d-ef579d9b1aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7c:cb:4f:6f:99:cd:f3:22:57:bd:e7:ca:e8:
                    e0:8d:09:10:ee:66:b0:07:d5:c2:d6:17:b1:c4:6d:
                    61:10:10:bb:ea:3f:66:55:29:af:e5:64:fd:4f:2d:
                    9d:c8:f8:89:93:a3:10:9a:96:56:bd:35:8d:7a:7f:
                    9c:c1:23:04:72:ba:b9:1e:a6:03:10:0d:81:4d:77:
                    25:04:ed:a5:d2:17:d6:83:f5:db:fe:7f:f8:1a:62:
                    4e:63:ac:35:ba:de:8f:e4:ae:e2:62:dc:14:86:52:
                    25:c9:b1:c4:37:51:82:92:36:59:6b:aa:cf:01:3a:
                    f4:bb:d0:34:df:11:8c:2a:ac:87:34:70:f7:17:28:
                    e6:6e:d3:c4:ab:81:05:cc:a9:f3:16:5d:53:02:b6:
                    3d:da:2e:b4:3e:ac:0a:64:57:ca:46:ab:1e:df:ac:
                    7a:e9:3d:65:31:c9:00:b4:a4:89:41:17:a8:37:32:
                    dc:0f:7d:3f:80:54:8f:e0:f6:b6:2e:f5:fb:16:38:
                    37:62:cc:31:00:51:41:9d:bc:ca:b8:62:12:8b:69:
                    1f:9c:00:69:eb:4b:99:c0:70:94:4a:a7:38:41:8a:
                    a5:02:14:f6:ae:30:eb:e7:d2:52:66:09:e8:bf:bf:
                    9a:c7:26:73:b6:96:e1:47:aa:50:85:66:fe:ba:ce:
                    1a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:29:10:82:92:3E:26:47:E0:55:0E:89:B7:7D:38:16:D5:EE:B0:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/594356a4-e5f9-3f76-b273-c48e596fa7a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f3:38:2e:db:e3:ae:81:24:ef:2d:6b:63:7f:aa:f3:87:a1:
         81:85:4d:22:f4:c5:e3:ac:8f:86:91:67:1d:d1:eb:ab:f4:bd:
         34:5e:aa:ac:0d:f0:8b:da:52:fb:67:69:1b:b4:1d:35:f1:7c:
         4c:3a:76:8a:2a:77:71:8a:74:8b:e9:0a:33:be:52:c4:dc:d6:
         b8:c3:ae:bb:71:ca:07:e3:9d:a1:a1:54:85:cb:18:7c:88:01:
         46:1a:eb:a1:26:db:b1:63:67:06:d6:08:23:bf:13:43:a9:87:
         7c:8c:89:33:ee:78:27:cd:14:3c:12:ec:ca:17:c9:45:97:3f:
         2b:25:97:f0:7c:8f:49:d4:0d:f0:b3:02:b5:aa:39:76:ea:94:
         bc:35:69:fe:a5:1b:a4:47:fb:93:05:9f:ae:b9:80:7c:7b:fe:
         b4:26:e7:09:80:e1:4c:a5:ee:c7:5a:9a:f8:5b:b9:32:b5:6f:
         59:ee:94:9d:48:f0:6d:a0:fe:c8:fe:c0:c8:a2:e1:2c:e5:8d:
         71:38:76:88:a0:85:03:a8:06:66:b7:54:29:6d:3b:e8:15:1c:
         d6:c8:a6:6e:5e:20:4c:b5:41:e6:0d:13:8d:2c:be:9e:1e:69:
         81:04:df:71:dd:5c:d0:14:c1:25:f8:af:17:fa:5a:9d:20:2e:
         cf:dc:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:12 2024 by rpki-client on console-ams.rpki-client.org