Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/c4c950bc-58d0-3309-b185-2fe14b41d9c2.roa
File:                     c4c950bc-58d0-3309-b185-2fe14b41d9c2.roa (raw, json)
Hash identifier:          XxFHrBWDthvjgWjQI2f2bwyd/9nf5v8oOJjdWOf6jzQ=
Subject key identifier:   7B:2E:82:83:AC:28:9C:2B:15:CC:63:F8:9F:10:73:04:B9:F4:5C:68
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285847E62A273C04BAC1DCEA300980
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/c4c950bc-58d0-3309-b185-2fe14b41d9c2.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     31898
IP address blocks:        168.225.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:27:3c:04:ba:c1:dc:ea:30:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=a59b5903-4c6e-43a1-a514-4dbddd4e06d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:58:6a:a9:b3:5d:c5:2f:39:3e:f1:e5:22:8b:
                    e6:fc:07:01:26:52:22:27:f7:35:ac:df:46:5f:80:
                    a2:fd:58:1f:11:af:03:3d:e3:a4:6d:1d:c1:2a:d5:
                    a1:cb:15:fb:e6:c0:47:5c:6a:a7:7c:4d:af:f7:8f:
                    11:10:b5:6f:72:9d:9a:85:84:ab:32:15:9e:b7:8f:
                    82:d6:2e:2d:2f:6d:a6:53:5b:1c:d0:db:48:1b:16:
                    99:51:46:d9:ca:c7:10:2a:9f:f0:4e:7c:41:f3:7c:
                    55:36:11:d1:1e:5e:20:da:e0:d3:ca:25:db:cb:63:
                    0d:01:6e:5b:48:32:6e:8a:cb:8e:af:fb:1b:37:4b:
                    f4:45:a3:73:23:e9:c7:59:df:fb:e6:43:c3:dc:3d:
                    97:03:98:82:be:2e:77:ff:85:71:57:98:f1:b1:79:
                    1a:34:d1:e8:c9:87:5a:5c:44:bf:c6:50:a5:20:29:
                    c4:e0:06:50:4f:2a:52:37:0f:2d:02:cb:7b:98:d6:
                    ef:da:47:07:e2:f9:63:79:8b:cd:7f:b3:ab:26:7f:
                    1e:8c:df:48:c6:95:69:02:c1:ed:48:f6:91:1b:b4:
                    cd:b8:49:d6:b6:aa:44:02:83:67:4e:39:7b:a1:c0:
                    39:12:b4:bb:2e:9d:41:2a:1b:cd:47:26:15:23:f4:
                    06:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2E:82:83:AC:28:9C:2B:15:CC:63:F8:9F:10:73:04:B9:F4:5C:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/c4c950bc-58d0-3309-b185-2fe14b41d9c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c0:fe:12:01:62:4f:60:07:3a:b8:e9:60:d9:a3:24:c5:b3:
         77:38:ab:0a:c6:9a:af:d2:0a:59:e1:40:b2:b6:fa:dc:d8:53:
         7d:b4:61:bf:be:98:a6:6a:02:3f:94:9c:95:eb:61:a4:2e:30:
         3f:58:34:bd:64:48:5d:36:e3:9f:52:32:10:5a:4a:08:05:af:
         a2:b2:4c:c1:45:63:8a:a1:23:76:99:28:12:cd:3d:1c:ac:af:
         9d:64:49:ba:ea:ea:c0:95:9d:33:45:24:29:bf:6e:dd:76:2f:
         5a:69:4d:03:ce:a2:27:67:7c:46:12:39:30:53:4d:4f:e4:f1:
         99:0f:31:5f:8c:8b:49:c6:c0:3d:64:76:70:bd:d0:24:5e:f5:
         37:17:00:96:b2:02:8c:64:5f:2f:46:07:8e:3f:05:be:86:bc:
         72:e3:4c:ee:03:11:75:6b:43:13:46:78:18:87:f2:4f:cd:95:
         c4:23:8c:03:35:a8:22:f1:b9:cd:6c:40:8f:c9:1d:1c:a2:4a:
         20:47:b0:0c:50:2e:63:58:c5:5f:41:19:54:08:eb:6d:45:1c:
         0f:16:24:b5:07:85:64:e5:27:3b:37:66:c7:c8:db:a2:fd:3b:
         f3:d8:52:01:e1:07:f7:e4:39:73:4e:67:49:ed:56:f3:12:99:
         bd:38:ef:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:05 2024 by rpki-client on console-fra.rpki-client.org