Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f026e17b-1be3-36a9-b6cb-90cd61a22f51.roa
File:                     f026e17b-1be3-36a9-b6cb-90cd61a22f51.roa (raw, json)
Hash identifier:          SgV+ioNM2kXLphPXqaiPdEfnYxmyg7mrIVjSC41OegY=
Subject key identifier:   D5:30:25:B3:CF:A7:D4:47:EF:79:54:1D:9A:63:13:61:B9:74:F6:6A
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F432858454F02C2A36AE06B3001AA4A00
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f026e17b-1be3-36a9-b6cb-90cd61a22f51.roa
Signing time:             Sun 24 Mar 2024 01:00:24 +0000
ROA not before:           Sun 24 Mar 2024 01:00:24 +0000
ROA not after:            Sat 22 Jun 2024 01:00:24 +0000
asID:                     31898
IP address blocks:        168.225.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4f:02:c2:a3:6a:e0:6b:30:01:aa:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar 24 01:00:24 2024 GMT
            Not After : Jun 22 01:00:24 2024 GMT
        Subject: CN=b8bfef67-f2a4-41f0-a0dd-f04bbfb8e1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:30:78:05:6a:25:59:a7:c5:70:77:02:5a:e8:
                    b0:cc:71:00:0f:6f:0c:1c:2e:ce:41:f6:41:09:ad:
                    71:9d:30:79:06:ad:db:49:ef:19:51:c8:5b:9f:e6:
                    05:15:63:cd:c6:58:cf:4c:28:d7:d7:cd:68:bc:d4:
                    38:6c:ac:a6:e4:88:8a:29:3d:2d:22:d5:01:d1:90:
                    ca:10:b5:5d:b0:60:25:60:c1:6a:01:0a:dd:82:fc:
                    14:ae:0c:f6:85:b0:29:75:4a:76:9b:32:55:80:14:
                    13:9a:d6:ac:1c:b9:30:19:fd:5c:4f:47:71:a7:d9:
                    f0:5a:09:43:7e:d1:79:36:14:ac:68:69:37:5d:fe:
                    be:e0:36:39:d4:94:25:c7:f8:22:5d:2f:69:8c:dd:
                    8f:0f:09:b2:27:97:89:36:c1:94:ca:94:9c:ba:8a:
                    e4:7d:85:9c:86:24:bf:b0:a9:b9:d2:a5:1f:3a:38:
                    05:8d:cd:37:d6:68:61:20:39:f3:b8:33:b6:3d:22:
                    f2:66:1b:bb:ed:95:86:ec:0d:65:2f:8e:c6:17:7f:
                    1f:6e:2b:c5:ab:c6:fd:3f:0a:33:41:62:6d:83:5e:
                    a8:b9:d4:e7:5c:e5:04:ce:34:57:64:1a:0f:d1:f4:
                    b3:69:b4:f3:cd:57:63:1f:c6:f9:e2:9f:28:da:77:
                    a3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:30:25:B3:CF:A7:D4:47:EF:79:54:1D:9A:63:13:61:B9:74:F6:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f026e17b-1be3-36a9-b6cb-90cd61a22f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:29:c9:9c:8b:03:47:68:7b:e8:7c:00:69:54:28:5b:87:16:
         8e:d5:f4:78:49:24:f7:6b:65:0e:6a:8d:85:e4:63:1c:9c:ab:
         ea:a0:50:70:2d:9b:30:e1:a8:44:d4:c0:30:2a:f4:54:c1:b0:
         bf:49:38:0d:59:1f:e0:b4:cf:f3:78:4b:0c:e3:ea:4d:cd:4c:
         25:de:e7:41:1c:3f:92:e5:49:40:6e:7e:59:50:39:69:2a:74:
         4c:fe:3f:d3:09:20:81:90:38:2a:8f:2f:32:24:4b:26:03:c1:
         25:55:1a:31:69:49:6d:42:64:30:d2:c8:12:0b:84:45:3a:bb:
         17:0b:d5:7d:c8:67:bd:0b:29:84:7e:ae:89:ef:2e:f6:fb:e9:
         dc:ef:d3:5b:15:a5:00:45:ba:6b:4f:33:08:3d:d2:dc:28:b1:
         7d:a9:4c:af:32:47:6f:2d:52:fe:3d:56:52:72:07:27:2a:d8:
         ce:70:75:0f:7a:7f:2f:ce:f3:43:c3:59:24:4f:1f:d1:36:e4:
         1c:57:67:46:e7:53:92:64:bb:da:34:e5:87:cf:9d:95:44:91:
         43:c9:95:96:b3:76:2e:e6:f4:32:e9:e9:bd:f7:49:f1:63:d8:
         d4:19:cb:53:db:84:b5:cc:b5:3a:0b:db:1a:55:74:b2:2a:8f:
         2e:7e:66:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:26:39 2024 by rpki-client on console-fra.rpki-client.org