Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d489868b-fe00-3761-8b25-d507cb50c7e0.roa
File:                     d489868b-fe00-3761-8b25-d507cb50c7e0.roa (raw, json)
Hash identifier:          ekLvT2enVYNy39iw08O3qmH5tnlRHglvpOVClO0v2tY=
Subject key identifier:   6D:F9:83:E9:7F:AB:17:01:73:E3:9E:93:97:F0:98:31:ED:0A:CA:1F
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285847E62A26B022287D0BA87A3180
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d489868b-fe00-3761-8b25-d507cb50c7e0.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     31898
IP address blocks:        168.225.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:26:b0:22:28:7d:0b:a8:7a:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=045d3d33-84ff-41a6-81e1-1847bfde60d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:d9:9c:2f:9e:db:66:5b:c9:b9:0f:48:3e:
                    af:98:17:fb:75:49:97:01:49:4a:fb:1d:77:1a:3b:
                    e2:58:73:ea:76:5b:c7:71:0b:49:c1:87:cb:57:47:
                    40:df:68:2e:84:dd:54:4e:56:1a:35:f3:a0:89:4d:
                    5c:9f:35:c4:44:ec:97:33:09:62:7c:6c:60:29:ea:
                    56:d5:2c:91:05:bd:84:41:e9:ba:8e:9b:b1:ba:d7:
                    40:4c:eb:65:11:b8:f8:fc:e3:18:25:42:7f:12:32:
                    a7:24:1c:13:79:5e:ef:86:f6:d0:04:a6:ad:d6:db:
                    e5:6e:0a:18:6d:03:c4:4c:5b:e3:44:6a:f8:ad:19:
                    95:cc:99:e2:44:b5:52:99:dd:9e:1e:ef:43:54:3e:
                    e6:80:3a:b0:71:3d:28:0d:31:e3:43:28:2d:81:60:
                    8c:fb:fb:dd:ef:6e:f8:59:6f:3c:c9:17:df:ef:af:
                    e9:6b:f8:26:0f:f4:a5:25:11:8d:f7:b4:30:eb:be:
                    43:6a:ff:6c:38:87:74:3d:50:b4:98:7d:27:4c:31:
                    e3:32:b1:c6:e4:af:f6:ea:84:62:60:80:cb:96:16:
                    49:1c:0c:d5:95:51:6e:58:4a:c8:14:e1:34:6a:49:
                    49:c0:df:e4:56:47:e2:51:06:84:72:79:58:f0:25:
                    fa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F9:83:E9:7F:AB:17:01:73:E3:9E:93:97:F0:98:31:ED:0A:CA:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/d489868b-fe00-3761-8b25-d507cb50c7e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:6b:63:a3:f9:18:fb:29:7b:47:c7:c6:1e:d3:06:b7:22:10:
         7a:83:ce:4d:c2:56:8f:bd:d6:b4:42:60:8d:24:28:cd:06:cb:
         61:6e:cc:b8:a5:7c:33:ba:da:7a:e9:14:b2:3f:f6:fc:4f:97:
         ae:c2:b6:1d:32:f3:b0:48:e4:d4:2e:78:d5:96:80:f4:46:30:
         45:e2:a3:b2:97:00:54:18:eb:62:bf:95:0d:74:15:3a:a2:63:
         11:67:c5:cf:cb:10:5c:64:08:ef:e0:57:ff:49:97:6e:10:b3:
         45:a7:51:97:a8:47:ab:1b:7e:f5:8e:56:88:a7:83:b3:34:ce:
         ba:50:81:bf:5a:da:28:9f:b5:ef:c0:84:31:c7:56:fa:9a:71:
         20:d6:d5:ad:e9:20:83:f8:8f:c3:5f:c1:dc:92:d5:0e:49:d3:
         b8:df:76:52:be:c9:2e:68:11:bc:38:2a:07:ab:85:35:3d:35:
         b8:41:82:c9:f3:9b:08:87:33:b7:fe:63:b4:89:70:c2:65:ef:
         55:92:7b:bc:84:36:91:19:60:ce:bd:fb:61:eb:72:bf:1c:09:
         58:d9:fb:3e:19:be:e9:1a:16:b5:fb:c4:ec:c2:32:7b:52:b7:
         bc:aa:ad:5e:f2:30:75:fe:12:40:59:d7:8e:89:40:18:1a:cb:
         f0:8a:c9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:12 2024 by rpki-client on console-ams.rpki-client.org