Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b0f030e-1afd-3365-902a-71462e426a1d.roa
File:                     1b0f030e-1afd-3365-902a-71462e426a1d.roa (raw, json)
Hash identifier:          +at/DAU6UHci4c+CqGrrzmEkf9y9aW5lVOYCitRVXpg=
Subject key identifier:   70:AE:E2:4C:49:9D:49:72:85:36:63:41:9A:BB:62:5D:4B:2B:A3:CC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849631EBC7E6E3935EB34970D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b0f030e-1afd-3365-902a-71462e426a1d.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     59253
IP address blocks:        104.252.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:bc:7e:6e:39:35:eb:34:97:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=0d28ac7e-3c5d-46dd-b779-99f72fee907e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8a:2d:83:af:da:ab:70:a6:b6:32:6f:a0:60:
                    39:55:12:3a:c3:17:b8:1d:91:dc:56:cc:c4:11:47:
                    9e:ef:d9:07:05:66:49:95:80:5e:65:14:de:12:59:
                    8f:0c:ee:67:15:26:95:ef:ef:f0:1b:26:90:ba:6a:
                    e4:8d:a1:31:28:af:7e:2d:d5:ed:28:35:bb:ac:6a:
                    52:59:87:04:61:92:ae:60:f2:e2:ac:98:bf:cc:cb:
                    c7:dc:18:be:91:71:69:7c:82:61:9c:4a:b4:71:99:
                    3b:85:43:e4:66:43:8a:10:05:98:f3:80:b1:d8:41:
                    98:41:ca:04:54:ef:c0:0e:bc:50:4c:76:86:23:78:
                    37:45:6c:5b:23:e7:cf:64:24:b1:f7:11:22:18:de:
                    22:b8:7a:1a:4c:fd:8a:f1:df:00:3f:cb:40:dc:37:
                    2c:96:b4:f7:34:13:cb:63:12:c7:4b:50:58:44:6b:
                    cd:b9:54:35:5e:0b:96:1c:3e:5b:e3:28:1f:8e:7c:
                    be:35:1f:f5:a8:ed:0d:ea:09:92:bf:77:85:5b:ee:
                    f0:77:4d:03:d0:e4:b3:a7:7d:e5:25:cc:1f:92:1e:
                    99:f5:cb:71:ed:23:2a:41:cf:5a:e8:22:a5:f2:48:
                    0d:5b:d3:a5:b8:e7:8b:61:21:a1:aa:59:ff:ed:9f:
                    85:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AE:E2:4C:49:9D:49:72:85:36:63:41:9A:BB:62:5D:4B:2B:A3:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1b0f030e-1afd-3365-902a-71462e426a1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:80:1f:0f:31:d8:11:10:52:8c:0e:71:fd:63:06:58:f0:20:
         a1:7c:f0:31:a1:ff:52:08:06:65:96:5f:1a:b3:3a:d6:aa:8f:
         b9:f7:9f:2b:b5:82:15:cb:15:e3:d9:78:2b:80:e2:14:07:52:
         81:ee:cc:8b:33:23:fe:52:af:da:cd:ed:d5:3a:f5:00:66:ce:
         21:a3:b1:29:92:5e:0e:f3:2e:07:39:03:d5:8a:a3:66:56:7b:
         74:e2:17:45:cb:e2:45:30:8b:65:2f:62:93:31:0e:d1:65:9b:
         fd:75:78:7c:06:68:c2:98:99:59:78:03:a5:58:fb:6a:a5:e9:
         a0:6b:6f:0e:df:b4:09:f2:b3:60:1a:0a:95:77:a8:35:85:1e:
         2c:68:d6:f4:ba:91:34:e1:f4:8b:3b:42:b1:11:8f:65:04:e2:
         f8:10:8b:3e:89:37:02:5f:0c:80:b6:4a:1a:fe:47:85:b1:99:
         d6:b8:6e:0f:7f:f9:60:38:dd:d9:87:5b:97:96:80:aa:6e:8c:
         d6:93:2f:1f:4c:fd:4c:eb:85:ab:1f:56:96:38:50:93:ad:34:
         9e:73:53:01:e6:7e:64:22:32:48:ce:2b:e6:a7:df:80:74:63:
         7f:59:5e:d2:f6:5a:6b:1e:e5:9d:33:d8:4b:d3:6d:ed:ea:ac:
         15:56:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:47 2025 by rpki-client