Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c78b3625-c223-32b6-b9a8-f1b2e0a92783.roa
File:                     c78b3625-c223-32b6-b9a8-f1b2e0a92783.roa (raw, json)
Hash identifier:          nGXsFjDYfItbb04m/nDMqhb1hkKW2ScH0wkSyi5AblE=
Subject key identifier:   03:1A:90:EA:58:C3:22:53:C0:24:9F:E6:3C:AB:EE:00:6E:0C:09:9B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AADAD07FF154721C250693C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c78b3625-c223-32b6-b9a8-f1b2e0a92783.roa
Signing time:             Thu 25 Apr 2024 22:34:23 +0000
ROA not before:           Thu 25 Apr 2024 22:34:23 +0000
ROA not after:            Wed 24 Jul 2024 22:34:23 +0000
asID:                     48031
IP address blocks:        104.252.188.0/24 maxlen: 24
                          104.252.226.0/24 maxlen: 24
                          104.252.238.0/24 maxlen: 24
                          104.252.247.0/24 maxlen: 24
                          104.252.250.0/24 maxlen: 24
                          104.253.4.0/24 maxlen: 24
                          104.253.11.0/24 maxlen: 24
                          104.253.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:da:d0:7f:f1:54:72:1c:25:06:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:34:23 2024 GMT
            Not After : Jul 24 22:34:23 2024 GMT
        Subject: CN=cd330eee-5b56-4feb-854a-a37795f7b67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:a4:85:9b:80:45:ff:32:2e:11:d6:94:37:
                    8e:22:b3:91:1c:33:e0:08:e4:e6:14:a0:0a:fb:49:
                    e5:5a:33:c8:38:98:55:37:f7:aa:48:ca:0d:5d:db:
                    59:89:5f:3a:89:28:f0:45:af:f8:0a:80:01:b9:ac:
                    0a:bb:0d:94:21:97:fb:a3:86:f9:49:a1:c1:74:f7:
                    68:70:8f:99:38:d2:49:48:15:fc:4f:5b:b4:b3:a1:
                    7c:b1:73:9b:4b:c6:a7:9b:16:5d:4d:d9:51:18:78:
                    18:de:e3:99:d0:2c:a0:be:40:85:64:4c:fb:2c:83:
                    d4:85:bb:88:43:8c:65:d0:ca:25:20:89:27:d7:b0:
                    6b:5d:40:60:70:10:6d:14:a5:7a:e1:12:13:1e:58:
                    0e:33:d0:d0:2d:67:68:1e:27:80:29:6f:99:3a:c3:
                    be:f2:6a:22:ea:4a:5a:66:e8:10:ae:c1:89:77:bd:
                    45:c2:1b:81:ea:dd:ab:26:e2:28:de:41:c0:2d:e9:
                    14:ce:c1:25:a3:9d:60:65:8b:0d:8a:a5:e9:67:2a:
                    bb:11:23:7e:55:39:fb:4e:38:f2:dc:c9:e7:0c:c0:
                    1f:97:a4:8a:72:52:04:aa:64:e2:80:1b:67:c3:00:
                    1a:66:ae:1a:20:9a:aa:33:91:4d:e3:75:13:47:27:
                    61:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1A:90:EA:58:C3:22:53:C0:24:9F:E6:3C:AB:EE:00:6E:0C:09:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c78b3625-c223-32b6-b9a8-f1b2e0a92783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.188.0/24
                  104.252.226.0/24
                  104.252.238.0/24
                  104.252.247.0/24
                  104.252.250.0/24
                  104.253.4.0/24
                  104.253.11.0-104.253.12.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f1:61:01:f9:06:58:65:2d:64:c2:be:3a:12:ca:62:a3:48:
         fe:6b:40:a6:31:f2:f0:cf:31:2b:2d:92:85:8c:60:5e:4e:dc:
         4f:5b:7b:c6:66:ce:99:63:7d:f0:43:56:4b:28:69:9f:52:db:
         9b:ec:f2:70:c5:b0:42:5e:e1:13:f9:07:29:c0:7f:dc:f4:8a:
         53:6f:47:b1:17:9c:81:1f:d5:7e:98:25:0c:3c:fe:df:47:bb:
         17:35:fe:45:20:e2:c9:3c:b7:00:3b:0a:6d:6a:68:5a:93:de:
         44:e4:eb:4e:40:74:d2:e4:6a:15:bd:ae:5d:bd:f6:90:64:21:
         fc:fd:21:82:c7:e9:5d:69:58:c9:ba:f2:79:c1:ce:f0:66:f3:
         ce:72:d2:e9:f1:ce:d0:c3:0b:35:f3:c4:0c:d5:f7:e1:9f:46:
         89:06:1e:58:48:27:42:28:0e:89:94:34:a8:62:cd:7a:50:5b:
         1f:85:27:b8:f3:63:47:0c:77:b8:3c:7f:94:a5:80:58:7b:23:
         5d:01:1c:51:69:c8:8f:65:7b:fe:ad:7d:e7:c5:61:e2:7a:8f:
         80:f7:15:35:ff:36:61:78:54:2e:42:3b:1c:86:ca:38:04:40:
         32:e9:fb:78:e1:ed:93:80:bb:1c:47:2f:7f:98:d8:e8:60:82:
         10:55:6b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 19:56:36 2024 by rpki-client on console-fra.rpki-client.org