Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f7c64320-d4d7-3163-8a7e-4ab6fed6afbe.roa
File:                     f7c64320-d4d7-3163-8a7e-4ab6fed6afbe.roa (raw, json)
Hash identifier:          RKd2u6Koo3ONQVWwMb2dUDzWC7ZgrGZZoH8Kr8PoiGY=
Subject key identifier:   B0:BD:4E:91:41:34:D7:C1:EC:02:EB:71:5B:37:8C:CE:FB:B9:23:C9
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F4328584A49705D7EE5A92332B3C2AF80
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f7c64320-d4d7-3163-8a7e-4ab6fed6afbe.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     63360
IP address blocks:        168.225.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:5d:7e:e5:a9:23:32:b3:c2:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=1df47ab8-6bd9-43f0-811c-dc98276b9d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:aa:27:4c:cc:40:b8:b9:08:f7:41:60:02:99:
                    b5:6a:68:64:0b:4f:dd:85:25:1d:0f:c1:40:4a:4f:
                    90:a3:62:a0:61:c8:11:7f:b1:31:15:ec:2b:ce:a7:
                    12:13:a6:c9:9b:93:bb:8a:08:76:8c:2f:b5:05:c5:
                    a0:66:23:f7:03:6c:da:48:09:69:1f:20:79:30:00:
                    b1:f8:9f:ab:17:95:55:15:1e:2c:69:47:6c:39:a1:
                    2e:75:81:68:ce:ca:5d:78:07:f4:fc:5e:49:ba:eb:
                    15:af:9a:48:03:3f:70:1f:9f:d3:7a:de:51:b3:36:
                    cb:b1:29:81:7e:01:38:41:e0:d7:f9:f0:34:ad:b8:
                    de:56:d3:9c:e2:fd:15:b4:ff:0d:b4:83:f8:43:88:
                    72:70:af:ce:e6:18:14:43:17:a7:20:bc:09:83:bd:
                    5b:bf:5d:b6:36:c5:17:52:45:ac:5e:88:d0:43:ec:
                    65:f6:c6:a9:f2:41:df:07:7a:87:da:33:b7:0f:da:
                    8b:b5:b2:33:f3:60:2d:4f:5e:8e:5f:d7:28:47:75:
                    82:ff:ed:36:af:93:2d:88:76:59:b4:26:57:1e:09:
                    88:c5:e3:d0:8f:15:4e:2b:1e:b6:cc:24:b3:b7:96:
                    7d:b7:09:39:0b:8f:0d:d4:a0:21:4d:46:b1:e5:a9:
                    f1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BD:4E:91:41:34:D7:C1:EC:02:EB:71:5B:37:8C:CE:FB:B9:23:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/f7c64320-d4d7-3163-8a7e-4ab6fed6afbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ba:fc:95:3b:17:22:4f:b8:ba:98:98:74:73:71:a0:d5:59:
         b4:83:ef:9e:41:b2:cc:65:a5:48:9c:b3:04:0a:76:e9:97:dd:
         5a:36:37:75:99:f5:45:24:72:10:fb:48:c2:66:0a:5f:54:25:
         75:9b:c0:2a:9c:73:19:09:2c:1b:ed:04:31:88:c1:00:59:a9:
         37:14:f1:59:14:a7:dd:e6:69:ab:93:e5:e9:3e:84:87:ef:2a:
         ab:a2:d9:d1:44:76:48:31:b3:e5:a4:dd:f7:2c:3d:a7:23:2d:
         b2:cb:5b:b6:0b:d3:59:e4:8a:8e:2d:f5:d5:d2:f6:75:18:f7:
         3c:04:d5:d3:fe:40:59:3b:89:ad:59:ed:a5:cd:3f:7a:08:50:
         52:6e:51:69:40:ad:32:b9:ae:ea:59:da:45:14:76:b4:69:f3:
         30:75:d5:6e:73:52:4a:f5:5b:ca:eb:11:96:9e:52:46:77:f9:
         5f:45:37:f6:04:d6:36:0a:7d:a7:22:b7:8f:80:f5:33:f3:20:
         67:1d:75:04:cc:df:72:20:fa:44:c1:f6:0b:29:8e:75:d8:11:
         e1:71:cf:b6:fa:a9:45:67:84:af:41:ba:a2:d7:47:7d:35:5d:
         9a:f9:ad:05:e4:86:c2:89:69:23:bd:42:4f:24:e8:8a:af:e2:
         b6:23:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:27:50 2025 by rpki-client