Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d489868b-fe00-3761-8b25-d507cb50c7e0.roa
File:                     d489868b-fe00-3761-8b25-d507cb50c7e0.roa (raw, json)
Hash identifier:          0KIT13JANxtIlH9wdFAhOta7wayuLLF0Vaa85TZODEs=
Subject key identifier:   27:47:DA:55:28:BC:BD:1D:BF:32:6D:78:44:91:61:06:7C:7A:B8:11
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285845460DFC822B6C2094B9D2C500
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d489868b-fe00-3761-8b25-d507cb50c7e0.roa
Signing time:             Wed 20 Mar 2024 20:00:50 +0000
ROA not before:           Wed 20 Mar 2024 20:00:50 +0000
ROA not after:            Tue 18 Jun 2024 20:00:50 +0000
asID:                     31898
IP address blocks:        168.225.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:0d:fc:82:2b:6c:20:94:b9:d2:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar 20 20:00:50 2024 GMT
            Not After : Jun 18 20:00:50 2024 GMT
        Subject: CN=c086a0f0-2798-4044-af25-3b1832d8e7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a4:ab:ff:68:05:81:47:4c:ea:d5:83:68:58:
                    a3:50:7e:e8:1f:82:44:23:80:b9:2e:6c:32:3a:85:
                    0d:dd:35:66:b5:5a:4f:b1:71:3e:b4:22:2f:3e:e1:
                    14:de:52:5a:19:a9:db:25:e5:8c:c3:8b:f0:41:05:
                    8e:3b:26:c0:dc:69:75:6f:5f:8b:89:29:af:2e:cb:
                    e7:bf:2e:63:5c:50:37:e2:ec:9a:3f:2f:f1:f3:ce:
                    01:c2:16:bf:11:78:87:01:ee:bd:8a:1a:b6:db:da:
                    f3:9e:2c:d1:10:c6:19:d5:51:fd:d3:5d:65:c9:89:
                    8d:6a:94:19:7d:98:98:0c:42:f5:de:33:66:32:52:
                    d2:34:db:20:bf:3a:d6:bd:dd:46:f2:41:df:51:19:
                    96:20:3b:97:ca:a7:7c:be:89:e8:b9:8d:5c:06:9e:
                    d7:ed:30:31:a5:ba:c3:b3:13:a3:b5:44:29:e4:74:
                    ff:4c:b7:f3:e0:d9:c2:e6:63:31:0e:3b:a3:31:ec:
                    4f:94:35:1e:d5:a1:90:7c:2a:42:03:60:3e:2a:be:
                    b0:39:0e:36:75:be:c6:0a:86:5c:82:c7:79:7b:31:
                    13:00:b0:f5:68:67:d0:fa:96:ea:26:84:b3:57:26:
                    df:91:09:43:b2:1e:7a:14:be:97:91:53:1b:b4:7a:
                    07:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:47:DA:55:28:BC:BD:1D:BF:32:6D:78:44:91:61:06:7C:7A:B8:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d489868b-fe00-3761-8b25-d507cb50c7e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a3:9e:d1:44:68:05:31:6b:aa:c9:82:16:8e:ea:d0:9f:01:
         3f:e2:4e:f3:c5:90:89:a5:c8:8a:50:53:7e:33:16:40:73:63:
         21:d6:f1:dc:6a:fd:98:ab:b8:fd:aa:e8:50:35:12:9e:2f:a8:
         2e:35:03:3b:2e:52:b6:d7:68:fc:29:04:8d:bb:45:ac:5b:a4:
         36:e4:2c:5f:e4:76:18:64:b5:17:1d:dd:9a:c2:ea:79:93:d0:
         ec:cf:d4:7a:30:d6:6e:eb:27:8f:05:04:c3:fc:f5:52:be:7c:
         02:52:81:7a:a9:c5:7d:11:a2:c9:c0:c3:78:73:9a:f2:36:65:
         3b:ee:d8:1c:9d:c8:c9:20:73:25:85:6a:7d:a3:6c:f8:22:31:
         26:d7:e4:cd:c5:8c:a7:64:9e:77:53:04:52:9c:2d:36:93:25:
         66:d0:bb:f5:af:e1:21:5e:51:4e:51:52:80:4c:4f:96:5a:ba:
         5e:67:14:35:2c:95:00:f8:15:af:67:2e:51:23:f7:6b:31:61:
         60:41:22:4a:8d:72:29:03:65:1b:71:17:3f:c4:a4:97:36:01:
         36:2d:59:67:57:47:0d:f0:3e:0d:e4:8e:58:94:d9:18:ae:36:
         08:4d:d2:3a:02:67:cb:ae:2a:3c:d6:08:37:79:6a:71:2f:42:
         13:41:ff:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:26:39 2024 by rpki-client on console-fra.rpki-client.org