Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/e2693b35-4954-3b54-989c-1d5875b48104.roa
File:                     e2693b35-4954-3b54-989c-1d5875b48104.roa (raw, json)
Hash identifier:          uyaQkYIGk1USBSv7yqXxT06a/lbrw9GAaiKihduur7M=
Subject key identifier:   7A:7D:04:56:C7:A8:D3:C7:CA:B7:4E:B8:58:FC:A3:03:3B:CB:90:33
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285848B7A585F8141DC52230C59300
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/e2693b35-4954-3b54-989c-1d5875b48104.roa
Signing time:             Thu 30 Jan 2025 14:53:19 +0000
ROA not before:           Thu 30 Jan 2025 14:53:19 +0000
ROA not after:            Wed 30 Apr 2025 13:53:19 +0000
asID:                     63360
IP address blocks:        168.225.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:a5:85:f8:14:1d:c5:22:30:c5:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Jan 30 14:53:19 2025 GMT
            Not After : Apr 30 13:53:19 2025 GMT
        Subject: CN=149f70c4-872a-468d-8b96-17df786966a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a1:fc:58:61:d4:94:c1:3b:99:07:2c:21:3d:
                    0b:51:e6:4a:b6:81:13:38:1d:c9:82:5d:d7:73:95:
                    7f:0d:9d:ff:ce:8c:44:1e:cc:a5:7c:3d:19:ec:17:
                    41:f1:16:6b:d8:a8:df:86:62:ab:e3:17:51:96:30:
                    0f:d5:0a:39:e3:8a:7b:bb:d1:6d:5c:61:eb:0b:23:
                    0a:8a:56:75:78:cb:0c:f7:a6:36:d9:1b:7a:8b:0f:
                    54:df:f1:e6:16:a5:45:67:3e:91:34:f2:fe:97:0c:
                    83:58:57:5f:ec:96:a8:b5:08:24:74:8f:b6:a6:77:
                    c9:c2:35:e4:5c:53:6a:74:45:bb:33:6a:a6:b9:1c:
                    4f:88:7d:9c:24:87:04:68:ba:a6:a2:a6:89:5f:80:
                    ff:ba:73:24:44:eb:3c:a0:9c:25:2b:75:69:d1:9b:
                    95:a0:91:68:f5:c4:53:fb:4d:00:7d:80:5f:f8:c7:
                    2b:28:66:20:03:1e:72:27:a2:9b:08:f6:19:f0:60:
                    33:72:23:50:21:2e:7f:37:e9:a0:49:70:94:cb:18:
                    b5:6d:34:57:84:08:6a:b8:9f:7f:6c:48:20:9b:41:
                    8f:20:6b:ed:6a:39:9c:35:cd:68:56:df:01:f0:58:
                    fa:e4:64:f5:21:dc:36:c2:ba:82:11:2d:90:3d:f8:
                    d8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7D:04:56:C7:A8:D3:C7:CA:B7:4E:B8:58:FC:A3:03:3B:CB:90:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/e2693b35-4954-3b54-989c-1d5875b48104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:86:9e:d3:6c:a3:d4:38:76:f6:e7:d3:19:5c:f1:bf:c0:8e:
         af:00:21:5d:30:0b:5d:7a:98:63:12:61:bb:dd:61:fd:7f:06:
         45:fd:1a:98:13:36:c0:6b:fe:31:a5:37:d1:24:fd:14:79:ae:
         12:27:4f:8e:a9:10:c9:c7:91:43:48:1c:b7:ef:9e:dd:9b:cd:
         a8:3a:b2:37:ab:7b:d6:d9:bd:86:c6:e5:86:92:1f:5b:1e:07:
         76:1d:13:5e:d3:4d:7f:7e:87:d0:6f:a6:89:9e:62:ea:1a:61:
         ec:b7:90:61:59:10:80:88:cc:14:09:c6:15:7d:10:81:df:8d:
         4d:c6:24:f1:5d:1d:20:ec:95:8b:69:cc:54:72:8c:04:26:94:
         e7:c6:bf:f0:99:27:91:4d:6d:7b:b7:b8:f8:82:38:80:64:4f:
         5b:95:7d:52:86:da:96:f4:fc:1c:06:ba:14:ad:04:6d:66:a5:
         4d:58:e5:9f:86:44:af:61:85:4c:f7:98:00:c6:c9:38:f7:b0:
         93:55:09:ab:d5:eb:78:3e:7e:63:fd:d3:52:b9:9d:97:71:30:
         09:a3:f3:79:f5:ca:a0:a1:62:58:e8:7a:3e:82:6a:5a:16:a0:
         27:ae:0c:ce:f1:bb:44:c0:6e:dd:fb:c7:44:59:61:1d:f1:4c:
         0e:bd:73:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:03:27 2025 by rpki-client