Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa
File:                     ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa (raw, json)
Hash identifier:          oVNEBrjYq/Paar8ErSXaIBFhwki+2o4v61CQqL8molQ=
Subject key identifier:   7D:C7:9D:28:B8:00:95:55:67:68:08:4C:88:21:8A:40:E6:5A:C7:5C
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584A093A9A52575023513BB4B960
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     63360
IP address blocks:        168.225.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:9a:52:57:50:23:51:3b:b4:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=21a029aa-c5d5-40e1-8b14-6300f807cf80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:be:48:84:b0:4d:21:9c:a0:39:a5:a2:8b:9b:
                    f0:7f:1a:33:cf:36:f0:e6:c9:d2:8b:aa:27:31:b7:
                    31:57:dd:7e:d3:ef:f2:a1:36:4b:79:cd:1a:71:81:
                    02:ab:45:67:8f:c9:2b:7c:07:3d:56:73:1d:c0:ff:
                    fd:6d:23:b5:a4:6a:6f:f7:de:4f:d7:d9:40:84:f4:
                    0d:bc:9e:69:e6:6b:ed:14:7e:ad:23:6f:c9:05:e3:
                    c8:d8:1c:fc:29:07:33:3a:2c:72:9f:29:14:57:40:
                    f0:a5:8a:e8:04:cb:1b:4e:b6:48:c1:fc:6e:7e:00:
                    2a:3d:f1:f2:ea:cf:ca:49:8d:45:83:7b:f5:a0:5a:
                    76:bb:85:45:7f:09:73:96:34:7d:c8:b0:15:b8:1a:
                    69:20:54:d4:7f:87:4a:67:6e:2f:4d:45:36:fb:95:
                    f0:b8:65:1d:3c:62:22:c8:a7:12:dd:36:2b:8b:9f:
                    07:5a:84:93:62:cf:6e:93:79:5a:ca:d4:d5:d1:3c:
                    05:7d:31:12:dc:cf:31:1a:93:d1:1d:15:41:ca:ab:
                    1a:0e:42:4f:ea:40:6b:95:09:a5:49:2a:13:1f:9b:
                    df:cb:22:1b:53:65:fe:be:19:66:4a:a6:d1:9c:8f:
                    9d:60:19:a2:2b:c6:ed:b9:26:c3:27:a4:95:93:e9:
                    a2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C7:9D:28:B8:00:95:55:67:68:08:4C:88:21:8A:40:E6:5A:C7:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:9e:be:c0:a9:3a:c1:ef:35:42:54:d9:ce:57:8a:8e:69:db:
         df:1c:4b:27:af:00:e2:9f:0a:ef:62:f4:fd:3c:5e:71:13:cc:
         b1:89:e9:92:c0:86:5a:7b:d7:5b:b6:92:35:dc:17:1c:53:89:
         a3:f0:4e:9e:32:50:38:a7:3d:1e:66:db:39:55:d9:70:80:a5:
         af:c6:5b:ad:2e:01:6c:00:07:44:c0:b2:14:46:18:22:a9:36:
         44:dc:00:c8:d4:55:31:0b:d4:85:46:e4:36:5d:b2:6a:b5:a1:
         51:a7:4d:c3:f8:22:d5:de:2b:39:51:09:6b:97:60:79:8a:10:
         1a:dc:f1:42:27:0d:46:61:ad:16:f6:14:94:3d:d2:3b:fb:92:
         1a:89:b2:37:36:6f:af:3f:05:ff:3a:e3:62:69:7b:63:8f:1e:
         0f:92:4f:17:03:7f:31:3b:eb:a3:30:b4:f4:48:0f:11:e8:44:
         fb:7c:a1:6e:46:87:d3:cb:c6:09:c6:11:72:77:01:75:2b:ed:
         92:79:01:d9:3a:29:f3:61:70:4d:0c:54:96:50:b4:4e:6b:1d:
         d3:02:0c:91:f8:d3:c0:1d:87:d3:0c:a9:1c:99:f2:6a:f1:77:
         15:45:70:9d:41:e2:aa:79:30:1f:94:a8:72:9a:4d:8b:8f:44:
         85:e8:10:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:59 2025 by rpki-client