Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/af9cc7ab-71da-3af3-888a-3d44ca106c7f.roa
File:                     af9cc7ab-71da-3af3-888a-3d44ca106c7f.roa (raw, json)
Hash identifier:          V+DIq0dkzDcIJIjV4RIFmO8j3QNR6a7v331Xm/BRMI0=
Subject key identifier:   60:53:F8:51:67:5A:03:2F:8E:D3:60:83:64:A7:4D:9D:D1:9F:7D:58
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584546370E9D3CEA834718BEE880
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/af9cc7ab-71da-3af3-888a-3d44ca106c7f.roa
Signing time:             Wed 20 Mar 2024 21:23:36 +0000
ROA not before:           Wed 20 Mar 2024 21:23:36 +0000
ROA not after:            Tue 18 Jun 2024 21:23:36 +0000
asID:                     31898
IP address blocks:        168.225.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:37:0e:9d:3c:ea:83:47:18:be:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar 20 21:23:36 2024 GMT
            Not After : Jun 18 21:23:36 2024 GMT
        Subject: CN=e8fd5a20-a678-4f8f-b845-0b50accb434c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:b6:f0:86:b8:45:e7:68:76:4f:02:d8:02:
                    56:90:09:d4:87:b9:5b:00:8c:4b:e5:e7:86:a4:2a:
                    c6:ae:6a:ba:53:2f:de:4d:d6:45:96:a8:cd:7f:73:
                    fd:a1:22:12:f1:52:93:7a:d9:ce:2a:6b:56:b2:65:
                    78:06:0f:d5:25:74:d8:ba:1f:4d:9c:01:dd:b4:37:
                    61:7d:21:93:37:78:27:15:e1:c0:04:1d:ed:78:ae:
                    26:10:dd:65:a3:3d:9c:37:d9:c2:69:32:42:01:6b:
                    38:cc:20:3f:74:71:c0:df:ca:bd:0f:01:75:c6:27:
                    2b:75:2e:42:c6:36:31:a0:02:bf:0c:c4:dc:ea:e5:
                    7e:c6:94:49:f7:dc:c9:ac:46:af:b1:5f:0a:47:c9:
                    44:33:d7:b6:eb:97:53:37:ac:45:b5:cd:9b:b2:49:
                    2b:89:57:3f:24:13:c6:50:d5:e6:04:e4:2e:94:3b:
                    17:22:56:6e:6d:02:6f:9a:18:36:83:94:a5:ae:40:
                    2a:c9:38:70:df:20:55:c6:e4:8b:3d:35:16:ce:c0:
                    f4:d5:21:fd:d7:09:69:4e:4b:db:14:9d:41:85:06:
                    c0:45:a0:b4:70:b2:64:b0:c5:7e:8d:39:6d:56:51:
                    97:e6:ca:44:14:a7:ec:e9:d9:fc:6a:26:20:87:f1:
                    93:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:53:F8:51:67:5A:03:2F:8E:D3:60:83:64:A7:4D:9D:D1:9F:7D:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/af9cc7ab-71da-3af3-888a-3d44ca106c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:aa:b0:4b:4c:85:d6:56:b8:a4:25:e3:2c:12:3a:bb:4f:b8:
         70:97:0a:eb:e8:21:0d:37:6a:8c:e2:7e:ac:4a:c2:17:ef:57:
         62:e3:96:2c:a8:f4:d7:81:3a:8f:41:dc:4b:2a:7d:50:27:de:
         04:86:cf:e1:33:04:b5:ba:71:b8:91:ec:80:f0:78:be:10:e0:
         d6:2e:ad:f1:71:0e:90:e8:10:40:88:a3:1d:6d:f5:d5:54:eb:
         b0:50:ad:30:4a:84:04:79:5f:92:41:43:19:2f:63:69:97:cb:
         24:4a:4d:b2:f0:59:f8:c6:42:a5:2c:ce:c3:a5:fd:73:d9:8c:
         4d:41:4f:ba:19:bd:7c:d6:15:a7:99:af:9d:1f:a2:c1:df:d1:
         35:cc:5a:26:f7:fd:58:bf:2d:c9:21:b6:27:1a:92:41:6b:a9:
         35:4b:41:a1:fa:20:4a:21:ad:88:e5:fb:85:67:93:df:43:8f:
         76:b0:a5:85:59:e4:56:f9:a3:8e:e8:a9:39:28:b8:74:04:84:
         77:3d:df:ee:56:f8:a3:6a:f7:1b:d1:ca:20:9d:c5:08:10:17:
         ac:46:87:00:f5:9b:81:af:92:cc:4f:a1:46:32:59:c9:80:88:
         aa:4f:3a:62:ef:30:6d:9b:55:54:64:9f:69:39:66:da:0e:3e:
         29:f4:b8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:26:39 2024 by rpki-client on console-fra.rpki-client.org