Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/6ea3d598-2986-3e19-91cd-cc291f8a3222.roa
File:                     6ea3d598-2986-3e19-91cd-cc291f8a3222.roa (raw, json)
Hash identifier:          p3wVI+9Cycf12MkNMeHM01iBSTj6lY46Yz3/kA4lk6s=
Subject key identifier:   44:03:7D:1F:1D:29:92:21:AC:12:26:7D:89:9E:4A:90:FA:7E:D5:37
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285849A784C439936F916AE4E19980
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/6ea3d598-2986-3e19-91cd-cc291f8a3222.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        168.225.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:c4:39:93:6f:91:6a:e4:e1:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=b6606490-5930-413a-a67b-bc39fefb62fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:2f:6a:b5:b7:cd:f8:73:5b:3f:2a:b5:09:
                    11:85:68:15:e5:7b:dd:a0:df:45:76:de:02:c0:ea:
                    25:77:86:fe:cd:0b:0a:34:45:4e:0a:6d:2b:bb:9f:
                    de:86:02:c9:b1:07:ba:78:d2:32:c7:75:ca:f6:df:
                    57:7c:f2:62:16:d3:ea:d6:5a:bf:3e:cc:d5:81:1a:
                    52:29:69:77:7d:47:36:54:2d:24:3b:d1:84:07:77:
                    fa:9d:1a:87:88:89:39:d1:c6:c0:b7:93:da:bd:b5:
                    af:a2:1c:a1:13:89:5c:d4:b8:2a:5a:88:42:20:34:
                    87:30:43:74:6c:5d:28:4b:89:94:c4:c9:e8:67:52:
                    6f:38:5b:89:b9:41:89:37:eb:dd:c4:55:c3:6c:7a:
                    b8:3f:7e:71:3c:19:c4:39:a3:e2:7e:b3:b5:b0:a2:
                    64:18:a9:51:64:c0:2e:87:9a:72:90:4d:d1:5a:57:
                    97:12:d3:79:b2:09:67:dd:9c:3f:82:6d:2d:68:20:
                    7f:31:ac:18:00:83:06:cc:1a:92:17:a4:1d:aa:c0:
                    c2:72:e8:62:f2:1f:e2:45:97:29:58:30:ab:f8:64:
                    f9:29:52:db:58:8a:28:c2:8c:24:00:33:bb:51:92:
                    5a:96:a8:85:9a:e7:a9:cf:fb:17:2f:99:a7:a1:a7:
                    f3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:03:7D:1F:1D:29:92:21:AC:12:26:7D:89:9E:4A:90:FA:7E:D5:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/6ea3d598-2986-3e19-91cd-cc291f8a3222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:76:9b:00:77:59:32:9e:9f:ce:73:33:9f:fc:30:e7:0b:9d:
         1c:0b:09:69:c8:a8:05:07:3b:c1:5f:3a:4e:ee:42:95:58:df:
         df:e9:de:64:31:d5:e0:9d:00:9c:2c:92:a8:28:c8:75:f3:34:
         3a:df:79:56:27:7b:3e:22:dc:42:aa:17:0f:d0:c9:49:53:16:
         d6:a5:bd:12:3d:d9:ce:98:12:4d:d3:2a:1c:a5:af:34:cd:99:
         ef:10:35:98:32:4d:64:d5:c3:4a:42:d7:40:61:fa:9a:a2:cd:
         ae:b6:ef:c5:4f:0a:1b:67:dc:11:b0:ec:db:5a:58:11:03:59:
         37:0b:32:ad:81:7e:c6:02:84:9d:4d:dd:fc:7b:65:47:67:eb:
         34:22:f6:85:45:83:78:6b:c9:87:4c:08:58:a0:81:76:0a:49:
         17:aa:a7:50:c0:ab:53:c0:3e:b3:24:23:ed:55:b8:94:1c:70:
         35:de:08:4e:0d:dc:97:26:84:36:c3:f3:e5:5e:e0:82:a7:8c:
         13:d1:2b:7a:bb:1a:48:6d:28:66:39:90:81:7f:f6:60:af:ad:
         fb:71:d9:26:54:43:86:46:32:2b:c3:43:e7:f2:d1:f5:b9:7e:
         a5:f7:f4:00:00:e5:af:03:07:b7:44:2e:63:40:a4:be:92:45:
         a0:76:5a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:32:08 2025 by rpki-client