Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/28e4bbb0-7e28-3af1-97e6-c310a0e726a3.roa
File:                     28e4bbb0-7e28-3af1-97e6-c310a0e726a3.roa (raw, json)
Hash identifier:          AEM1vGqERIJSEOaIy+PYEdtn+9hPwQ3hpPpg3KRgmC0=
Subject key identifier:   D4:63:94:92:02:DE:C7:7D:8B:61:E1:2E:8B:42:A5:5B:3C:00:3A:CD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845AADAD06F2240B789D6C74AA0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/28e4bbb0-7e28-3af1-97e6-c310a0e726a3.roa
Signing time:             Thu 25 Apr 2024 22:34:23 +0000
ROA not before:           Thu 25 Apr 2024 22:34:23 +0000
ROA not after:            Wed 24 Jul 2024 22:34:23 +0000
asID:                     48031
IP address blocks:        104.252.144.0/24 maxlen: 24
                          104.252.146.0/24 maxlen: 24
                          104.252.166.0/24 maxlen: 24
                          104.252.168.0/24 maxlen: 24
                          104.252.169.0/24 maxlen: 24
                          104.252.170.0/24 maxlen: 24
                          104.252.176.0/24 maxlen: 24
                          104.252.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:da:d0:6f:22:40:b7:89:d6:c7:4a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 22:34:23 2024 GMT
            Not After : Jul 24 22:34:23 2024 GMT
        Subject: CN=067844f8-c13b-4d74-9ca2-db030a7ad947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:4d:61:8d:d3:f1:ae:4a:f2:1b:40:d2:86:
                    99:19:ef:96:bb:9d:c9:14:d7:0e:fe:41:4b:fe:53:
                    ac:c0:2e:6d:98:44:56:ba:4c:37:79:2a:7e:61:d4:
                    7d:56:eb:db:18:b6:14:75:f0:e8:23:39:66:3a:c8:
                    f6:d4:56:8e:fc:8a:f9:d7:c1:a0:35:77:5c:be:6c:
                    1e:2d:83:3a:55:05:5a:f2:6f:de:63:75:5f:7f:d2:
                    70:de:c9:fd:6a:83:f6:dd:e3:88:24:62:05:7b:75:
                    dc:5b:12:99:20:a6:5a:eb:9b:cf:c8:73:df:1e:8a:
                    25:a4:a8:98:2f:23:6a:68:1a:93:65:12:74:56:fb:
                    77:f4:30:26:06:5d:08:eb:7a:cc:d8:75:6e:a1:ff:
                    a1:eb:69:84:ea:1a:a3:fc:93:5e:74:c0:16:a6:2c:
                    83:08:77:1a:bb:0c:9f:4f:fc:f0:87:24:d9:86:a0:
                    1f:b5:f2:1e:4d:05:78:9e:74:12:b9:81:89:ad:1b:
                    1d:f7:37:a8:85:6c:19:2f:ee:fe:ee:e1:96:9c:05:
                    0e:ff:5d:8b:c2:5b:3b:e9:aa:c5:84:e0:63:f6:f8:
                    27:1d:9e:b9:01:2d:78:93:10:ed:6b:bc:75:40:96:
                    1a:0c:b5:37:b1:89:d2:62:c5:65:dd:c1:ff:49:dc:
                    cc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:63:94:92:02:DE:C7:7D:8B:61:E1:2E:8B:42:A5:5B:3C:00:3A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/28e4bbb0-7e28-3af1-97e6-c310a0e726a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.144.0/24
                  104.252.146.0/24
                  104.252.166.0/24
                  104.252.168.0-104.252.170.255
                  104.252.176.0/24
                  104.252.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:12:ba:06:cb:e6:49:98:0a:95:da:94:1e:a3:06:4a:0e:eb:
         af:3f:b5:d0:64:20:8a:7d:1d:c2:fd:a5:37:9f:62:c9:2c:5c:
         cc:ad:04:05:48:4b:53:c6:63:6b:27:e1:7c:0c:2a:9f:18:ce:
         3f:0c:91:93:10:6c:eb:07:b7:bf:b3:0d:41:ab:81:09:e2:36:
         2f:0a:5e:0c:a6:26:04:70:14:eb:4e:db:e0:68:0e:a8:e6:18:
         76:2f:68:9e:c0:fc:df:b1:a2:4e:3b:eb:f8:ff:14:a5:4a:08:
         d4:bf:7a:3d:e0:6f:68:c0:29:8f:ea:c7:c6:2e:f2:35:32:39:
         33:91:74:1a:c9:f5:65:47:f7:2b:ac:0c:f1:57:7b:d6:28:29:
         72:89:6e:c8:6d:28:92:52:1d:3f:6b:df:ac:8a:34:7d:0e:fa:
         67:73:39:8f:e6:0f:30:4e:c2:db:2f:3b:79:9c:5e:5c:0f:77:
         5c:e6:0d:ad:ed:55:9f:ae:c6:24:02:c8:b1:6b:cd:e7:70:9f:
         36:25:8e:6f:df:ad:9c:69:b9:44:99:07:1c:c4:78:ae:fe:d0:
         8c:76:a0:3d:cc:01:e4:35:bf:f0:99:eb:0f:27:20:9f:64:b2:
         22:55:d4:6a:db:38:96:b0:10:b8:80:31:57:89:ca:5b:4d:e1:
         51:be:dc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:54:33 2024 by rpki-client on console-ams.rpki-client.org