Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/add3d5a6-1410-3a84-ba24-b5d1dddd441d.roa
File:                     add3d5a6-1410-3a84-ba24-b5d1dddd441d.roa (raw, json)
Hash identifier:          LCZYvAfNKw/Qf1Y18dlcLEB/6jMbPVj/jr5yIbG3wkA=
Subject key identifier:   81:2B:7F:A5:74:A0:79:AF:1E:C7:CF:AB:ED:8F:CE:C4:2C:43:0C:B3
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584929BAF7650F266AE859B09480
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/add3d5a6-1410-3a84-ba24-b5d1dddd441d.roa
Signing time:             Wed 12 Mar 2025 11:38:41 +0000
ROA not before:           Wed 12 Mar 2025 11:38:41 +0000
ROA not after:            Tue 10 Jun 2025 11:38:41 +0000
asID:                     63360
IP address blocks:        168.225.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:ba:f7:65:0f:26:6a:e8:59:b0:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar 12 11:38:41 2025 GMT
            Not After : Jun 10 11:38:41 2025 GMT
        Subject: CN=4e62baa9-3bf9-4899-a242-7b519c629d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:7d:8e:69:e0:c0:71:41:ee:6b:ee:39:bc:
                    75:9a:da:a1:d0:e0:52:0f:e4:65:b0:20:3b:b6:a4:
                    11:24:66:d5:60:8b:e2:7b:91:f0:ca:8d:08:76:aa:
                    c5:09:8e:be:71:45:e9:48:9c:06:5d:52:06:45:d3:
                    2f:e2:da:60:4d:bc:5d:59:40:6a:36:d2:fb:c9:e0:
                    a4:70:e5:57:e2:9a:5a:94:81:11:80:9d:55:79:b9:
                    07:fc:e4:d6:69:4a:f4:72:0d:c7:f5:67:31:5d:38:
                    10:a9:53:c9:b0:04:86:28:3a:e2:12:31:c8:fa:cb:
                    78:8c:27:ec:d7:9c:ec:97:cc:e6:01:a7:e8:d1:a8:
                    8d:07:2a:3b:9e:5b:4e:a9:12:b1:85:87:6b:5d:17:
                    52:6b:d0:62:ea:d0:fd:d9:34:22:71:4f:e9:c2:7d:
                    b4:1c:1c:db:91:2c:2a:4a:3e:73:24:88:c2:b9:a0:
                    9d:79:42:98:62:01:e4:b0:65:01:87:7a:c4:30:30:
                    ba:a5:fe:1f:2e:cd:c8:89:ac:2c:5f:74:6d:08:42:
                    2c:36:37:d4:47:0f:0a:70:89:5c:9f:f1:72:d4:4c:
                    52:a4:6d:9d:b5:02:91:3e:eb:58:41:af:6a:9e:87:
                    3b:5c:21:11:ce:18:eb:dd:04:38:45:39:b3:09:08:
                    c9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2B:7F:A5:74:A0:79:AF:1E:C7:CF:AB:ED:8F:CE:C4:2C:43:0C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/add3d5a6-1410-3a84-ba24-b5d1dddd441d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:bf:34:b1:de:84:56:20:2a:57:ea:f0:66:4e:d7:60:ea:27:
         bb:6c:47:62:17:18:fd:31:5e:6c:fd:39:23:24:d3:fe:54:51:
         70:5f:71:bc:1c:fd:e1:43:9a:28:a4:d9:83:a0:c5:30:3a:da:
         c2:a4:5c:5d:34:0d:49:43:63:e7:5a:48:1f:36:5e:24:03:de:
         d1:bb:35:e1:62:49:ec:a5:e1:99:fa:b5:13:27:8e:01:e3:87:
         13:be:01:0b:c5:77:34:87:df:f6:38:6b:72:a9:ac:46:cf:24:
         35:d8:c9:58:04:1c:d8:a5:a3:d4:fa:9f:12:28:29:4c:cf:83:
         a5:83:02:2d:2d:5f:3e:0a:20:b9:a5:9e:e9:30:cc:6f:8c:5c:
         e8:ea:80:5d:e3:af:5d:41:07:75:4f:fc:7a:5c:f4:5d:4b:91:
         05:0c:7f:29:e0:85:20:0f:8e:27:fd:c0:11:cd:b4:b8:81:29:
         78:cb:b1:3e:41:5a:4b:6b:26:69:ab:f0:c4:63:97:01:71:56:
         f4:83:ce:d9:40:b0:53:d7:52:6f:05:c0:f6:15:97:b4:70:09:
         93:83:3a:d5:41:26:6d:95:f5:c8:c9:16:2e:ea:db:84:fa:b8:
         fb:ab:53:d0:e6:3e:ff:de:19:50:68:8e:56:e5:88:bd:70:bc:
         e4:9a:60:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:46:30 2025 by rpki-client