Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27d4f928-b538-3405-8023-16b36c925b1f.roa
File:                     27d4f928-b538-3405-8023-16b36c925b1f.roa (raw, json)
Hash identifier:          mRznIVndNhDN671TB+55qKRl2N7zjpXLTlGEInO662M=
Subject key identifier:   F7:DB:AC:80:11:BE:17:51:84:36:CE:F5:87:19:65:23:E0:D5:FB:0F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847E620D3F9414611F096274080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27d4f928-b538-3405-8023-16b36c925b1f.roa
Signing time:             Sat 16 Nov 2024 13:42:01 +0000
ROA not before:           Sat 16 Nov 2024 13:42:01 +0000
ROA not after:            Fri 14 Feb 2025 13:42:01 +0000
asID:                     10557
IP address blocks:        104.252.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:20:d3:f9:41:46:11:f0:96:27:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 16 13:42:01 2024 GMT
            Not After : Feb 14 13:42:01 2025 GMT
        Subject: CN=bf853f6c-55d1-4719-9590-e78c7e72a404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:a8:cf:fe:c0:ea:d5:73:11:58:9f:af:dd:
                    d0:bc:d6:0a:f2:7f:6a:aa:8a:94:6c:e5:5a:bd:c3:
                    80:61:d0:d1:8b:d2:fa:16:96:d6:9c:23:6c:77:bc:
                    88:f0:5f:57:03:86:72:4c:a3:27:b7:00:b3:90:04:
                    83:d8:b1:ad:9a:b8:34:3b:f4:a1:b6:38:8b:ff:e9:
                    4c:dc:ef:9a:08:0e:89:bd:ef:81:00:e1:68:ac:b4:
                    5f:37:3a:94:bc:a4:bb:4b:c8:49:3f:05:1f:b5:6e:
                    c0:31:91:c0:da:22:42:19:d2:eb:cc:84:c7:83:d8:
                    3c:cd:f5:a3:04:d8:f6:0e:d8:fc:42:89:97:39:06:
                    31:fc:ae:f6:68:fb:28:58:16:41:f6:db:ed:43:c7:
                    76:79:d4:7a:3e:4f:a8:67:4f:f5:db:d4:3d:dd:1c:
                    ea:16:c0:45:13:10:db:3a:f5:88:3c:13:23:41:65:
                    a9:28:7b:69:c6:7c:4b:39:a6:92:10:ed:e9:c6:7d:
                    ce:b5:0c:6f:8e:22:26:ed:3c:f2:e6:d4:ff:83:5a:
                    b9:d5:0b:73:31:5e:23:1e:fb:97:56:85:2d:19:34:
                    b5:eb:23:13:e5:6b:5a:6d:e9:df:0b:01:04:10:0c:
                    49:d8:8d:85:9f:97:3d:4b:a8:55:3e:1d:7b:51:fc:
                    be:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DB:AC:80:11:BE:17:51:84:36:CE:F5:87:19:65:23:E0:D5:FB:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/27d4f928-b538-3405-8023-16b36c925b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:65:12:ff:7c:fa:9a:ef:8c:b0:a6:49:6a:ba:2c:55:27:d5:
         b5:a3:48:4e:9a:ed:be:95:9a:37:db:04:1c:b9:f3:b6:55:a4:
         32:6f:dc:a5:ba:e1:76:92:0c:9c:4b:13:6f:9f:98:9e:0b:70:
         5b:4e:c4:d2:e8:a4:a2:cc:7d:00:57:b4:77:de:8d:cf:54:7a:
         66:e5:a0:2d:53:69:f3:c6:18:38:3c:cf:a4:c9:9d:e6:13:52:
         61:a7:04:38:d1:15:1b:dc:93:4d:26:22:b4:0c:76:66:2d:3e:
         12:e9:df:60:b1:68:84:56:98:7c:40:7c:6f:22:af:11:d5:98:
         cb:fb:00:ed:78:21:77:0a:a8:cc:8e:06:e0:10:72:22:66:f3:
         70:ab:41:66:94:09:25:c3:03:62:88:bc:76:9e:be:04:cb:f1:
         e6:81:0d:00:87:1f:44:85:d2:b5:22:00:4b:1c:d3:51:00:f9:
         a2:ee:c3:7b:a4:b6:b4:2a:25:c5:47:fe:76:05:2b:ad:d2:97:
         e0:89:80:50:d8:25:21:91:b2:08:a7:08:f2:24:cf:3d:71:a5:
         20:3a:3c:03:7f:fa:e7:ea:e6:68:51:38:06:9b:43:cc:83:f3:
         44:68:e3:f6:7e:90:b5:52:5c:2c:91:79:c4:71:65:aa:b4:db:
         fe:65:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:56 2024 by rpki-client on console-fra.rpki-client.org