Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/b3d9a224-be61-3e9a-846f-9711a193deed.roa
File:                     b3d9a224-be61-3e9a-846f-9711a193deed.roa (raw, json)
Hash identifier:          4thK+O6UBu1IOk34m3OeP87nI28C9a8WHGPiKZ2AkLg=
Subject key identifier:   BE:60:FF:3F:F1:39:7C:21:8F:7F:EC:8F:0A:8D:25:DA:FF:09:36:37
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F432858499829BE424302C0426E781ED0
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/b3d9a224-be61-3e9a-846f-9711a193deed.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     63360
IP address blocks:        168.225.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:be:42:43:02:c0:42:6e:78:1e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=ddbbf11d-69d9-4f1f-a20e-141181eb8fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a8:d6:11:a1:93:f8:ca:9a:a0:7a:2e:66:c7:
                    7d:25:19:62:0f:d3:ac:ec:94:90:ba:80:46:45:a2:
                    2d:81:ee:77:6c:36:29:3a:b3:ee:90:09:d6:b8:df:
                    7d:20:a1:2f:d1:1e:e9:7b:6d:17:ca:a3:61:fa:9b:
                    b6:88:1a:ab:77:ed:a1:41:21:d1:06:ad:25:1d:18:
                    4e:ff:98:c0:0b:14:11:5c:af:aa:23:b3:a7:e1:71:
                    73:71:85:fe:3a:13:22:91:8b:df:fa:cb:09:cb:2c:
                    0e:81:68:2f:d3:f9:8d:ba:de:77:08:53:65:15:6e:
                    cc:29:96:06:00:5d:2b:a6:cd:2e:fd:e9:77:6a:67:
                    a3:23:96:75:8d:da:ab:85:f0:00:0b:1f:60:f3:e9:
                    de:9e:17:f1:6e:12:44:32:4e:ec:19:f7:d6:91:6e:
                    62:0b:df:26:03:65:8e:de:b5:39:44:04:90:ba:ac:
                    cc:98:b8:1d:23:ef:ee:9d:b2:ec:4f:d3:5c:97:73:
                    aa:aa:94:c7:61:5a:30:6a:ef:ab:a3:96:af:a2:76:
                    16:61:6b:26:ab:b0:ac:5b:cd:8c:40:2b:3e:80:2b:
                    66:d8:79:01:7b:77:b2:71:bd:9a:e9:7c:27:67:d6:
                    42:6c:32:ae:56:99:5d:a9:5f:40:27:81:2b:62:fb:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:60:FF:3F:F1:39:7C:21:8F:7F:EC:8F:0A:8D:25:DA:FF:09:36:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/b3d9a224-be61-3e9a-846f-9711a193deed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:41:f3:38:b1:86:e4:48:f0:4a:49:e5:da:81:3e:58:b1:b6:
         be:a1:c6:95:8e:aa:b6:c5:69:9d:bf:4e:17:81:f5:fe:d5:4f:
         a9:26:cc:7a:4a:2d:f1:c3:ff:80:1d:cd:fd:18:40:57:c8:bb:
         12:13:af:b0:1f:f4:6b:c2:0c:7f:f4:62:42:1e:5b:e0:20:fe:
         4d:9a:46:4f:8d:06:70:1b:8e:b5:10:53:22:90:33:e3:38:49:
         01:3d:fd:32:d9:82:78:68:c1:bb:da:98:42:c5:1b:52:b0:54:
         2e:41:ba:6a:d8:c7:5c:16:60:20:87:4e:3a:23:5d:15:66:44:
         c8:c5:65:ab:30:38:ec:19:ec:b7:2a:68:b6:26:80:d6:31:49:
         c6:ee:44:49:cc:79:4a:5a:5e:7c:a2:29:df:85:5f:48:e9:b7:
         43:c3:b8:c5:24:00:ae:67:d4:fb:47:a9:28:67:12:53:90:d4:
         70:67:c7:05:4f:df:bd:7c:14:08:c9:ec:24:d0:c1:2f:75:44:
         ef:8c:04:fd:98:48:cd:6d:ad:4b:27:92:ff:07:48:e8:45:5a:
         a0:14:92:1c:7d:ad:df:b0:1c:87:a5:4c:af:d0:1f:d3:3b:7b:
         9c:80:c0:10:bb:9a:28:2e:2f:70:ce:89:8e:8d:33:6b:80:ef:
         9e:1a:17:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKb5CQwLAQm54HtAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl
YzhhMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk
ZGRiYmYxMWQtNjlkOS00ZjFmLWEyMGUtMTQxMTgxZWI4ZmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6jWEaGT+MqaoHouZsd9JRliD9Os7JSQuoBG
RaItge53bDYpOrPukAnWuN99IKEv0R7pe20XyqNh+pu2iBqrd+2hQSHRBq0lHRhO
/5jACxQRXK+qI7On4XFzcYX+OhMikYvf+ssJyywOgWgv0/mNut53CFNlFW7MKZYG
AF0rps0u/el3amejI5Z1jdqrhfAACx9g8+nenhfxbhJEMk7sGffWkW5iC98mA2WO
3rU5RASQuqzMmLgdI+/unbLsT9Ncl3OqqpTHYVowau+ro5avonYWYWsmq7CsW82M
QCs+gCtm2HkBe3eycb2a6XwnZ9ZCbDKuVpldqV9AJ4ErYvshCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL5g/z/xOXwhj3/sjwqNJdr/CTY3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy
NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvYjNkOWEyMjQtYmU2MS0z
ZTlhLTg0NmYtOTcxMWExOTNkZWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh
MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm
ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh
NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKJB8zixhuRI8EpJ5dqBPlixtr6hxpWOqrbFaZ2/TheB9f7VT6kmzHpK
LfHD/4Adzf0YQFfIuxITr7Af9GvCDH/0YkIeW+Ag/k2aRk+NBnAbjrUQUyKQM+M4
SQE9/TLZgnhowbvamELFG1KwVC5BumrYx1wWYCCHTjojXRVmRMjFZaswOOwZ7Lcq
aLYmgNYxScbuREnMeUpaXnyiKd+FX0jpt0PDuMUkAK5n1PtHqShnElOQ1HBnxwVP
3718FAjJ7CTQwS91RO+MBP2YSM1trUsnkv8HSOhFWqAUkhx9rd+wHIelTK/QH9M7
e5yAwBC7miguL3DOiY6NM2uA754aFzs=
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:44:39 2025 by rpki-client