Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f827d7b8-4916-3638-b708-9ba86ac9a4b2.roa
File:                     f827d7b8-4916-3638-b708-9ba86ac9a4b2.roa (raw, json)
Hash identifier:          dJP2drBq5psz/ye+EjSFnjW8cUgLi3uPVYpwXiaf/w8=
Subject key identifier:   FF:E0:8D:C5:50:F2:C1:03:D0:79:11:38:11:BB:06:15:D6:CA:82:D3
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584929B72664A3D5D55431221800
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f827d7b8-4916-3638-b708-9ba86ac9a4b2.roa
Signing time:             Wed 12 Mar 2025 11:30:59 +0000
ROA not before:           Wed 12 Mar 2025 11:30:59 +0000
ROA not after:            Tue 10 Jun 2025 11:30:59 +0000
asID:                     63360
IP address blocks:        168.225.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:b7:26:64:a3:d5:d5:54:31:22:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Mar 12 11:30:59 2025 GMT
            Not After : Jun 10 11:30:59 2025 GMT
        Subject: CN=0ab52786-6d05-4a98-b724-d1b5502da40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7f:7b:cc:99:68:78:c1:28:69:69:a0:e6:85:
                    94:07:3d:37:68:ba:6f:42:61:20:f3:76:4c:cf:da:
                    0b:8d:ef:b2:95:3e:5b:d6:78:90:87:ed:d9:8c:3c:
                    45:43:07:7c:6d:c3:78:c0:b1:f6:69:b0:83:2f:5b:
                    a9:4b:a3:29:89:80:fe:11:6b:a1:c3:3e:c5:f5:59:
                    1f:c8:b4:77:c8:3a:b3:67:35:cf:c9:a0:a6:5a:f7:
                    4e:ef:c9:b5:23:b7:98:28:68:10:bf:a5:ab:bc:7e:
                    a9:8a:35:95:2d:8e:ef:60:92:ad:5e:e6:c6:a7:5f:
                    a1:fd:1a:c6:9d:65:71:d7:87:65:ea:52:6e:95:0c:
                    56:87:50:6f:6f:7d:2b:20:a8:a0:52:16:ad:96:16:
                    12:eb:ac:06:17:b3:de:6f:9d:22:b5:35:c9:cc:4a:
                    21:82:60:58:d4:84:6a:a6:46:d0:c3:19:1e:ae:ff:
                    bd:53:0b:20:6d:db:93:48:9f:d4:1e:65:88:2f:00:
                    83:23:6c:7f:d7:1f:5d:a3:c6:74:01:ae:71:d7:f0:
                    91:5a:c3:bf:fc:79:f7:af:2a:dc:a5:ff:04:5c:1e:
                    e0:00:ae:dc:56:1f:20:7a:76:f4:a0:53:95:fa:25:
                    4c:38:29:8b:88:24:c7:aa:25:b4:9c:ee:22:6b:e7:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E0:8D:C5:50:F2:C1:03:D0:79:11:38:11:BB:06:15:D6:CA:82:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f827d7b8-4916-3638-b708-9ba86ac9a4b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c4:6b:26:d9:52:95:37:5c:85:f5:7e:98:4c:f0:1d:f9:b7:
         b2:c3:9e:1d:1c:60:bb:af:2a:7b:6b:a1:ef:d4:fd:16:5e:a1:
         1d:69:29:3a:b8:84:4a:5e:db:32:fb:fc:92:a6:00:ca:9e:f2:
         d8:a0:f5:86:5c:9b:c0:2d:d8:54:c4:32:2f:6e:0b:40:1f:bb:
         3a:00:00:fc:eb:a2:ab:bf:4a:0d:47:c7:fd:92:56:e7:b1:f7:
         6b:89:76:f6:55:ac:af:e8:a6:08:70:09:10:4a:dc:1c:b3:d4:
         8c:e2:ea:74:29:d9:21:ba:ad:f0:99:5d:f0:97:8c:d2:23:2f:
         d7:2d:1f:7d:e1:13:c5:de:b8:b2:d8:79:d2:90:51:8e:1d:a4:
         a0:a0:ed:ce:dc:4f:9f:f3:46:69:c7:34:c5:55:fd:54:61:e9:
         dd:9b:9c:d8:3d:a9:51:f1:d9:e4:da:51:d7:73:60:94:17:84:
         41:60:c9:70:c9:51:b5:c6:d6:bd:d0:94:4b:9e:21:03:c4:0e:
         ea:93:66:b7:c8:15:f2:48:a5:79:cf:cd:35:2e:58:28:7a:ef:
         2e:ca:10:d3:e4:16:22:b2:50:43:ac:0c:2d:55:08:cb:cc:d0:
         2c:f2:2f:b0:a8:60:c6:4e:36:23:51:8b:02:6d:58:11:98:4e:
         cd:d9:29:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkptyZko9XVVDEiGAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl
YzhhMB4XDTI1MDMxMjExMzA1OVoXDTI1MDYxMDExMzA1OVowLzEtMCsGA1UEAxMk
MGFiNTI3ODYtNmQwNS00YTk4LWI3MjQtZDFiNTUwMmRhNDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6n97zJloeMEoaWmg5oWUBz03aLpvQmEg83ZM
z9oLje+ylT5b1niQh+3ZjDxFQwd8bcN4wLH2abCDL1upS6MpiYD+EWuhwz7F9Vkf
yLR3yDqzZzXPyaCmWvdO78m1I7eYKGgQv6WrvH6pijWVLY7vYJKtXubGp1+h/RrG
nWVx14dl6lJulQxWh1Bvb30rIKigUhatlhYS66wGF7Peb50itTXJzEohgmBY1IRq
pkbQwxkerv+9UwsgbduTSJ/UHmWILwCDI2x/1x9do8Z0Aa5x1/CRWsO//Hn3ryrc
pf8EXB7gAK7cVh8genb0oFOV+iVMOCmLiCTHqiW0nO4ia+evWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/gjcVQ8sED0HkROBG7BhXWyoLTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy
NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvZjgyN2Q3YjgtNDkxNi0z
NjM4LWI3MDgtOWJhODZhYzlhNGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh
MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm
ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh
NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvEaybZUpU3XIX1fphM8B35t7LDnh0cYLuvKntroe/U/RZeoR1pKTq4
hEpe2zL7/JKmAMqe8tig9YZcm8At2FTEMi9uC0AfuzoAAPzroqu/Sg1Hx/2SVuex
92uJdvZVrK/opghwCRBK3Byz1Izi6nQp2SG6rfCZXfCXjNIjL9ctH33hE8XeuLLY
edKQUY4dpKCg7c7cT5/zRmnHNMVV/VRh6d2bnNg9qVHx2eTaUddzYJQXhEFgyXDJ
UbXG1r3QlEueIQPEDuqTZrfIFfJIpXnPzTUuWCh67y7KENPkFiKyUEOsDC1VCMvM
0CzyL7CoYMZONiNRiwJtWBGYTs3ZKdA=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:01:53 2025 by rpki-client