Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/6638d6da-3a03-34e9-84ec-395fcbe3f335.roa
File:                     6638d6da-3a03-34e9-84ec-395fcbe3f335.roa (raw, json)
Hash identifier:          jN+Y28A5oKlynRStHhF4wdgPGzmWKOimjit9PvB20o8=
Subject key identifier:   12:7A:48:5D:9F:A5:33:9E:47:AA:19:85:75:5A:92:3B:BF:17:C3:D4
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285848C5B7B16E92E22EF018384500
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/6638d6da-3a03-34e9-84ec-395fcbe3f335.roa
Signing time:             Tue 04 Feb 2025 15:51:15 +0000
ROA not before:           Tue 04 Feb 2025 15:51:15 +0000
ROA not after:            Mon 05 May 2025 14:51:15 +0000
asID:                     63360
IP address blocks:        168.225.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:b7:b1:6e:92:e2:2e:f0:18:38:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Feb  4 15:51:15 2025 GMT
            Not After : May  5 14:51:15 2025 GMT
        Subject: CN=06838ffa-8265-469e-ada8-291d00a59152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a1:c1:7d:a5:76:b4:4d:43:ef:f9:7b:54:f6:
                    63:87:fe:24:bb:2b:63:fe:fd:cc:db:a9:4e:0e:c5:
                    f5:80:b5:5b:9f:d5:79:7a:09:9b:20:38:01:07:bc:
                    44:af:b8:ab:71:99:f1:0a:18:92:98:20:76:53:c3:
                    8b:84:29:5e:f7:78:b5:a7:3b:97:b8:f4:b4:ea:6e:
                    bd:b6:13:c1:a2:9f:bb:60:d8:02:82:06:60:70:fe:
                    23:ad:cc:50:6b:93:e2:5b:70:3c:96:6f:fb:5f:20:
                    f3:98:00:78:5a:f9:36:cb:36:74:4c:ca:63:2a:74:
                    a9:9f:ad:61:6f:a2:e4:db:81:b6:05:45:da:b2:fd:
                    77:13:af:72:3b:89:23:c7:8b:85:d3:f6:23:91:e0:
                    37:48:ed:85:98:6d:22:e7:02:bb:1e:0b:e9:6b:fe:
                    90:b0:42:e3:c1:26:66:cf:55:d5:c0:37:05:83:9b:
                    d8:b8:7c:28:f2:61:b3:9f:eb:2a:99:13:d3:e4:3a:
                    ca:69:b7:b4:20:69:69:d2:09:17:40:a1:95:7d:74:
                    35:90:28:d2:7e:64:da:b1:a7:de:c5:c0:31:1b:54:
                    8a:62:a3:de:c2:eb:14:b1:58:a3:f0:cd:91:d2:85:
                    28:a7:38:7f:88:31:8a:eb:a7:77:de:f4:66:95:13:
                    db:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7A:48:5D:9F:A5:33:9E:47:AA:19:85:75:5A:92:3B:BF:17:C3:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/6638d6da-3a03-34e9-84ec-395fcbe3f335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b4:61:63:ee:91:03:3f:0a:74:9d:a2:5f:88:bd:c9:62:fc:
         98:1c:37:64:85:8b:8e:3d:1f:7e:d3:e8:5a:ea:b2:e5:30:94:
         8c:8c:a3:bd:81:50:e2:66:48:ac:e4:1e:97:73:fe:34:08:28:
         ed:8d:e5:a9:9e:c9:cb:75:d1:86:bc:c9:8e:b7:13:03:7f:e6:
         f8:d8:2a:dd:50:1f:67:07:61:61:f7:12:52:28:c1:b1:7b:23:
         a6:c3:3c:36:eb:05:ff:8a:72:76:52:1b:54:3d:ca:89:be:0a:
         7f:26:33:27:bc:a7:b3:9b:9b:94:7e:6a:b7:44:70:53:e6:76:
         45:62:d5:07:f4:5e:81:44:49:ea:92:d0:b1:10:ca:70:32:ec:
         f6:de:30:9e:de:32:46:f7:48:10:e8:5b:23:c4:ce:ae:7c:5e:
         aa:c5:0f:75:22:f9:54:cb:37:5c:02:a8:17:59:1d:30:36:d6:
         09:07:40:e7:bc:e4:85:79:24:9d:1a:c9:b1:6e:b5:3e:82:2c:
         36:7a:d4:5a:9c:c7:90:f1:eb:ea:3c:d8:bb:22:2d:57:3c:89:
         79:26:65:ce:a1:49:d1:87:12:e4:d1:21:91:19:f7:07:39:5c:
         ad:ec:08:53:01:3c:40:bc:5f:18:63:c1:4b:f7:1d:e1:7f:48:
         f0:63:52:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:01:02 2025 by rpki-client