Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fd5590dd-11f4-3b51-a2cc-1920010bb142.roa
File:                     fd5590dd-11f4-3b51-a2cc-1920010bb142.roa (raw, json)
Hash identifier:          JnkMYGoiP80Qh5jsX48E+EytvY7N5witHwjuTFzY4DQ=
Subject key identifier:   78:3E:3F:A8:4B:09:40:43:47:D8:4E:2E:50:D7:92:6F:3F:95:8E:6C
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285847E62A269FE3C9DB65C0338B80
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fd5590dd-11f4-3b51-a2cc-1920010bb142.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     31898
IP address blocks:        168.225.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:26:9f:e3:c9:db:65:c0:33:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=65916724-4c04-4748-84d6-6e05f0c5af42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c5:16:18:65:9e:e9:0b:dd:02:5a:ac:25:ba:
                    43:44:8b:e3:a1:93:fe:48:29:1c:77:86:8e:65:61:
                    82:6b:73:14:d4:d9:b0:51:4e:87:cc:b3:74:41:3c:
                    df:96:d1:84:76:e1:b8:28:c1:9c:e2:d1:b8:7f:ca:
                    00:c9:22:84:e1:42:cb:fc:bb:03:fe:bd:5c:93:c4:
                    71:d8:a6:7a:79:7f:75:65:f2:7b:53:b6:7c:c4:0b:
                    65:c0:bb:20:85:7e:48:63:4c:46:78:6b:b6:9e:5b:
                    bc:21:0e:77:6d:9e:ac:89:c0:20:c8:02:72:d5:a2:
                    17:61:32:28:0e:73:4a:28:3a:e6:c0:2b:ef:f4:f5:
                    7a:fd:ee:91:83:7a:dc:8c:a3:ff:c7:aa:a6:8b:9e:
                    f6:14:1c:a1:64:7e:1a:0d:ba:59:d2:bd:b5:28:63:
                    b9:83:0f:f2:d4:8c:07:00:be:0d:c9:ae:17:f4:e5:
                    01:cc:f2:26:fe:40:81:15:ca:19:7c:be:da:9d:fe:
                    0f:c0:da:83:8b:d2:85:da:73:e4:e2:dc:02:a6:a7:
                    4e:f8:10:22:82:72:c7:3a:58:14:8b:91:44:b1:2b:
                    84:11:f2:29:d7:8d:5b:bb:ff:9f:48:95:20:3a:52:
                    5b:33:51:93:25:f5:8d:71:03:9a:0b:e1:fd:9b:ad:
                    4b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3E:3F:A8:4B:09:40:43:47:D8:4E:2E:50:D7:92:6F:3F:95:8E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fd5590dd-11f4-3b51-a2cc-1920010bb142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e1:e8:7d:a2:a1:9b:4b:c9:49:0f:bd:98:ff:8d:c9:fc:64:
         38:ee:9e:1a:c0:c0:7e:44:db:2e:ba:b7:ea:45:6b:f6:26:69:
         07:2b:36:53:98:f3:af:df:fa:ba:b7:69:60:2f:75:19:9a:38:
         f5:30:1c:3e:28:c2:cf:05:a1:8b:c5:01:49:04:54:c2:6e:e8:
         bf:15:ba:1a:34:c3:11:ab:98:1f:ca:5a:a1:ee:a9:dc:61:2e:
         b6:ad:d1:1e:53:aa:3e:6e:a0:a2:89:92:5a:47:aa:52:98:2d:
         e9:2e:68:04:f2:ad:1b:c1:11:e0:92:36:7e:41:5a:dc:06:b7:
         69:59:0e:4f:38:59:f4:83:08:7f:32:08:4c:81:96:85:0c:65:
         70:19:bd:5e:28:49:4b:73:b1:3d:c5:82:70:3f:cf:68:5b:be:
         64:c1:c9:3c:06:c6:1e:d6:26:a9:7a:93:a5:b0:40:53:c3:ae:
         26:74:4b:46:06:7d:c4:26:7e:d3:af:96:65:40:6b:74:9c:39:
         a0:05:b7:18:78:8f:e0:50:10:9b:9c:0e:4f:46:39:29:0a:7f:
         b1:f0:84:0a:a3:d4:96:2a:25:0a:2a:10:07:6e:dc:66:ed:89:
         43:23:49:b6:39:19:60:7f:fa:a0:63:2f:93:e9:2b:92:b3:c3:
         bc:43:3b:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKiaf48nbZcAzi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl
YzhhMB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NjU5MTY3MjQtNGMwNC00NzQ4LTg0ZDYtNmUwNWYwYzVhZjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsUWGGWe6QvdAlqsJbpDRIvjoZP+SCkcd4aO
ZWGCa3MU1NmwUU6HzLN0QTzfltGEduG4KMGc4tG4f8oAySKE4ULL/LsD/r1ck8Rx
2KZ6eX91ZfJ7U7Z8xAtlwLsghX5IY0xGeGu2nlu8IQ53bZ6sicAgyAJy1aIXYTIo
DnNKKDrmwCvv9PV6/e6Rg3rcjKP/x6qmi572FByhZH4aDbpZ0r21KGO5gw/y1IwH
AL4Nya4X9OUBzPIm/kCBFcoZfL7anf4PwNqDi9KF2nPk4twCpqdO+BAignLHOlgU
i5FEsSuEEfIp141bu/+fSJUgOlJbM1GTJfWNcQOaC+H9m61LTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHg+P6hLCUBDR9hOLlDXkm8/lY5sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy
NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvZmQ1NTkwZGQtMTFmNC0z
YjUxLWEyY2MtMTkyMDAxMGJiMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh
MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm
ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh
NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfh6H2ioZtLyUkPvZj/jcn8ZDjunhrAwH5E2y66t+pFa/YmaQcrNlOY
86/f+rq3aWAvdRmaOPUwHD4ows8FoYvFAUkEVMJu6L8Vuho0wxGrmB/KWqHuqdxh
Lrat0R5Tqj5uoKKJklpHqlKYLekuaATyrRvBEeCSNn5BWtwGt2lZDk84WfSDCH8y
CEyBloUMZXAZvV4oSUtzsT3FgnA/z2hbvmTByTwGxh7WJql6k6WwQFPDriZ0S0YG
fcQmftOvlmVAa3ScOaAFtxh4j+BQEJucDk9GOSkKf7HwhAqj1JYqJQoqEAdu3Gbt
iUMjSbY5GWB/+qBjL5PpK5Kzw7xDO8E=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:12 2024 by rpki-client on console-ams.rpki-client.org