Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17c12f83-56ce-3a5e-973a-f2b04088e58b.roa
File:                     17c12f83-56ce-3a5e-973a-f2b04088e58b.roa (raw, json)
Hash identifier:          9CbUh0rv8H4ywPlaBN8OMJ0iMM6KwbHw4DYORwB3OZ8=
Subject key identifier:   08:68:53:76:06:1E:EA:F5:83:7A:8E:69:78:82:48:43:86:92:2D:ED
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848F1FB0025F6B0C3B833AFA300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17c12f83-56ce-3a5e-973a-f2b04088e58b.roa
Signing time:             Thu 20 Feb 2025 12:22:26 +0000
ROA not before:           Thu 20 Feb 2025 12:22:26 +0000
ROA not after:            Wed 21 May 2025 11:22:26 +0000
asID:                     18779
IP address blocks:        104.252.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f1:fb:00:25:f6:b0:c3:b8:33:af:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 20 12:22:26 2025 GMT
            Not After : May 21 11:22:26 2025 GMT
        Subject: CN=67cec9c0-9fb3-4b7b-9114-09ab93d76403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:b3:ca:30:c5:a2:fd:6a:03:e8:d7:84:cd:
                    bc:88:b5:0b:19:ed:e1:19:2b:43:4e:bc:e6:f5:ce:
                    59:24:4b:a0:ad:94:78:00:aa:29:87:e3:75:f4:94:
                    85:d3:af:9d:8b:e7:fd:a7:05:97:eb:ca:01:c8:46:
                    66:12:fb:d3:56:34:e2:72:0a:51:8f:5b:04:ed:a0:
                    51:7c:94:dd:05:4c:1a:4d:e5:cf:a1:c0:52:1c:5a:
                    cd:ea:6d:e0:17:ed:95:56:04:dc:34:e6:12:ce:ee:
                    29:63:f2:37:be:b0:45:6d:65:c2:41:b7:59:64:c1:
                    a2:24:01:a4:99:f4:bd:6c:74:36:2c:33:10:25:dd:
                    11:ab:68:e6:1d:4b:00:74:8d:cd:47:98:88:56:80:
                    a9:4e:21:70:61:69:b6:3d:ce:85:cb:94:04:2e:a8:
                    00:52:e6:8b:ff:25:35:b6:0b:6a:e8:ce:4e:90:4a:
                    cd:2f:d0:19:af:f5:44:51:d8:cf:49:af:37:e4:8f:
                    a4:a2:8d:83:49:b4:7f:6d:a7:46:5b:89:c9:0f:f9:
                    80:21:29:b0:50:a9:a4:f7:60:a0:a3:a7:d5:13:e7:
                    19:59:12:cb:48:33:5f:d4:d8:d5:c2:8d:7d:ee:25:
                    37:6c:80:84:05:79:fe:00:29:e6:f8:85:82:e0:66:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:68:53:76:06:1E:EA:F5:83:7A:8E:69:78:82:48:43:86:92:2D:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17c12f83-56ce-3a5e-973a-f2b04088e58b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f6:00:6f:00:bc:13:07:d3:7d:42:80:2a:d5:ce:bd:2d:f2:
         cb:7a:bc:f9:f0:5d:74:93:2b:04:1e:73:b9:17:83:d5:a2:33:
         2b:cd:e8:37:35:d5:7c:84:17:3a:06:cc:75:f1:24:00:31:ec:
         80:ad:73:5c:e9:09:18:8a:e9:0e:d2:ec:27:bd:5c:fa:ef:de:
         0a:44:b7:3f:9f:82:a2:b7:b5:bd:44:42:ce:49:14:28:42:91:
         90:92:b6:46:5c:b8:58:3c:71:dc:ed:69:49:76:52:27:55:e5:
         0c:24:ff:4f:f8:94:4e:31:27:03:61:19:c3:3f:dd:d1:d7:19:
         2b:1e:f2:28:aa:7b:00:a9:5c:b7:5c:be:eb:d1:a6:73:2c:40:
         9a:0b:00:9e:29:82:fe:a4:60:16:da:6f:ef:28:cd:74:3a:94:
         eb:97:49:d8:0c:92:aa:f4:2c:81:27:5b:4b:a1:28:9b:34:35:
         98:65:90:97:82:d1:f6:42:55:c3:2b:72:54:e8:36:b7:cf:1a:
         7b:aa:70:75:79:24:b9:68:42:e2:4e:74:e6:2e:bf:b5:be:c6:
         48:50:10:4e:cb:54:2c:5b:74:06:95:c7:85:03:7e:ab:53:f0:
         82:ea:bf:52:fd:f7:a0:01:00:ae:73:49:48:9c:dc:20:eb:a6:
         6c:57:90:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:58 2025 by rpki-client