Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa
File:                     ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa (raw, json)
Hash identifier:          7dXaPMBvORsJRh4UD5jOPU6kysM1K+pCytW64M1MkCo=
Subject key identifier:   F6:E1:BC:CE:87:AB:0B:0D:59:5E:91:9D:BF:A8:2D:97:65:18:1E:77
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584929BCA6566FBDC0961B793180
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa
Signing time:             Wed 12 Mar 2025 11:42:04 +0000
ROA not before:           Wed 12 Mar 2025 11:42:04 +0000
ROA not after:            Tue 10 Jun 2025 11:42:04 +0000
asID:                     63360
IP address blocks:        168.225.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:bc:a6:56:6f:bd:c0:96:1b:79:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar 12 11:42:04 2025 GMT
            Not After : Jun 10 11:42:04 2025 GMT
        Subject: CN=bc2ec668-7673-4b90-a898-d6cf081cb66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:70:81:a5:1f:90:23:6c:f3:58:23:ae:da:32:
                    5a:50:cb:d1:0b:2a:7e:33:fb:53:89:29:19:70:3d:
                    f0:84:ac:36:70:6e:64:47:a4:44:80:2b:80:4d:44:
                    ba:5c:fc:c4:ae:f4:e0:e9:c6:9d:ed:0b:a9:3a:c3:
                    7a:5b:33:c8:19:57:87:e5:d4:c3:99:49:d3:09:e1:
                    dd:1f:25:2b:b4:48:ee:02:3a:c8:4b:91:b0:28:5e:
                    0e:d6:2f:71:dd:10:23:a1:8c:fd:b1:53:b5:85:7b:
                    a2:39:8c:06:11:ac:93:3a:94:03:04:2e:3b:4b:11:
                    f9:36:71:fd:4d:c2:41:e8:ee:59:b0:42:b1:75:3e:
                    3b:de:1f:b7:98:d0:0e:d8:51:15:bb:d5:d1:c5:1b:
                    76:75:58:7c:a4:7a:1f:c9:f8:50:b0:69:c2:c6:6f:
                    8a:f6:51:74:4b:98:05:8a:60:04:6a:1c:72:23:13:
                    77:d5:f9:c7:36:51:eb:bb:46:c7:0d:dd:71:57:81:
                    36:62:86:43:b7:2a:22:d0:bd:a1:df:7e:30:43:cc:
                    34:ac:c0:21:ff:c9:8b:41:c0:d1:65:7d:a9:dc:fb:
                    60:9d:60:af:09:62:f0:db:0f:0a:87:a4:05:65:46:
                    08:b8:49:99:c2:9f:a5:b2:ad:96:b4:a5:de:8a:d2:
                    7a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E1:BC:CE:87:AB:0B:0D:59:5E:91:9D:BF:A8:2D:97:65:18:1E:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ac236550-cf71-3a77-a6b1-4eed39d2ae23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:11:7c:06:13:46:fc:da:15:c8:49:a6:42:b0:85:53:14:1a:
         85:0a:3e:85:89:ab:30:43:ad:a8:89:18:fc:b5:c0:0f:34:dd:
         2e:cd:a7:50:87:fd:e1:e3:b1:bd:74:80:da:8c:bf:d3:a0:70:
         86:ec:fa:50:31:13:1a:63:64:9e:18:f9:a5:10:fa:e6:25:ff:
         fe:ef:af:6c:6f:04:a8:ad:e9:76:1a:fd:e7:cd:68:8a:57:1c:
         21:58:97:20:ce:5f:d0:6b:1a:02:c5:dd:76:a0:c5:98:af:d0:
         d3:d1:a8:a5:93:ea:80:6e:8d:20:02:cb:d5:c6:52:94:9f:f6:
         b8:de:33:a7:94:33:8d:92:af:01:5a:35:d4:d5:24:0c:02:2e:
         48:34:fb:a5:2d:16:9b:c0:84:e4:7e:98:6e:b8:4c:aa:25:4e:
         cd:a5:32:1b:e9:53:94:b4:26:06:d7:66:e6:7c:eb:eb:93:c7:
         2d:2c:78:dc:93:6d:d6:09:3b:2d:5f:7d:fd:46:a1:3f:a5:42:
         97:9f:45:e6:6b:c6:1b:00:27:04:34:dd:f8:3f:6d:1e:19:00:
         ff:02:9d:f7:e5:53:ed:44:17:92:30:e5:41:42:91:7c:66:8e:
         a1:6e:11:9c:20:af:f8:eb:d2:bf:a5:59:6f:20:c1:d1:78:59:
         fd:f9:24:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:50:38 2025 by rpki-client