Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/833f5f93-724a-3c22-a00b-700ea32b586a.roa
File:                     833f5f93-724a-3c22-a00b-700ea32b586a.roa (raw, json)
Hash identifier:          rONKooVt7fu+2H+GDLsX9qjo/4QPJ6DGNhVElh+GXbs=
Subject key identifier:   CB:1C:53:59:28:BB:AB:48:2F:45:1A:0C:1B:60:F0:EF:25:05:46:63
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584929B9ADBFA402CCE688104E40
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/833f5f93-724a-3c22-a00b-700ea32b586a.roa
Signing time:             Wed 12 Mar 2025 11:36:05 +0000
ROA not before:           Wed 12 Mar 2025 11:36:05 +0000
ROA not after:            Tue 10 Jun 2025 11:36:05 +0000
asID:                     63360
IP address blocks:        168.225.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:b9:ad:bf:a4:02:cc:e6:88:10:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar 12 11:36:05 2025 GMT
            Not After : Jun 10 11:36:05 2025 GMT
        Subject: CN=cea143d7-51af-49a5-99c3-eb79b9cf4be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:26:33:50:35:b1:63:39:dc:8a:3e:49:95:dd:
                    af:7c:fe:99:b7:9e:9f:82:87:0b:bd:04:c2:e5:38:
                    bf:e4:69:44:a7:0a:bb:09:ef:e4:ff:c4:98:79:e3:
                    a7:99:d5:55:ad:5a:be:fb:c4:36:f9:96:64:7d:c8:
                    e5:b8:5c:62:f0:15:45:98:b1:6b:07:c3:a7:5e:21:
                    7a:cd:95:78:9e:4a:c9:3d:99:64:b8:41:d0:b4:88:
                    4d:45:c4:da:b3:df:1e:0f:05:0d:d7:42:59:9b:ef:
                    64:87:1a:85:fc:cc:74:0d:3c:13:6a:35:18:20:ec:
                    1e:d2:aa:92:c7:75:78:46:c5:a2:26:c7:ee:58:f1:
                    23:3a:bd:de:e0:f0:2d:6b:86:4e:18:78:bc:16:7b:
                    04:70:75:68:4b:1a:49:a3:ba:e7:32:ec:5d:3e:b1:
                    76:7e:81:12:34:c7:9e:e4:58:a2:d8:e5:e3:32:25:
                    a0:ae:35:76:5e:25:7c:b0:6d:45:a8:46:56:38:cc:
                    b4:ad:80:d4:a8:36:f0:a5:98:bc:df:f4:b2:d6:52:
                    3c:2b:08:5e:b7:22:1c:ef:c9:e9:28:ff:e8:42:9b:
                    37:3f:b2:e9:01:e8:62:9a:bb:91:31:08:12:f8:3a:
                    c2:82:fa:d2:3a:85:75:f8:fd:f4:78:fb:6b:bc:0c:
                    25:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1C:53:59:28:BB:AB:48:2F:45:1A:0C:1B:60:F0:EF:25:05:46:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/833f5f93-724a-3c22-a00b-700ea32b586a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ff:fa:77:1b:55:a8:d1:3a:5c:a6:ca:54:57:ec:50:68:fa:
         d3:18:73:f9:3f:a9:b1:a5:97:63:d0:87:ba:f7:b2:20:0b:8a:
         45:10:87:fd:2e:fd:d4:78:a3:2d:2b:01:c0:ee:15:27:82:23:
         72:0d:e1:75:ac:d0:f4:c7:b8:5e:ca:a1:77:24:65:b7:27:c7:
         79:9a:33:eb:e2:d3:2b:c5:42:c8:eb:d3:c3:b5:77:ff:77:b3:
         a0:92:03:0f:52:1e:46:5a:50:5b:f3:96:fa:8a:a3:e2:00:b8:
         5b:c5:14:2c:92:08:67:f8:e6:d9:72:51:ad:02:29:03:6e:dc:
         58:36:52:92:d2:56:83:74:18:7e:94:62:4d:f2:6b:9c:92:85:
         4b:12:a4:50:a3:9b:6c:fe:f3:6b:ee:c8:d8:ba:85:33:bd:a2:
         44:86:cb:7a:f7:bb:ec:57:5c:ff:a4:7f:f9:49:7f:c2:da:9f:
         27:2b:33:4f:fe:3c:31:fd:47:87:2d:9b:9a:ec:15:c4:2a:d4:
         25:a6:2e:ca:aa:a4:05:d5:1f:66:67:83:0c:16:05:71:9d:0b:
         93:c0:ef:f7:eb:68:ad:67:32:54:3e:ab:b8:c9:08:4b:34:bf:
         50:5c:e7:1d:e3:fc:ab:6b:99:41:5d:41:ba:7b:4a:91:6b:70:
         6b:4a:14:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:49:44 2025 by rpki-client