Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2bf59a5f-a5cc-3bfc-b893-4ba4eb20d0dc.roa
File:                     2bf59a5f-a5cc-3bfc-b893-4ba4eb20d0dc.roa (raw, json)
Hash identifier:          VE1yUT9Gwz8Py/9uNI4VQAJINa1o/LIpVz16FArCSz0=
Subject key identifier:   69:B6:9C:68:FE:16:16:A4:38:EF:75:98:7D:89:83:F0:E3:D9:EA:E9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584949FEB2217606334F9D839EC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2bf59a5f-a5cc-3bfc-b893-4ba4eb20d0dc.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     25160
IP address blocks:        104.252.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:b2:21:76:06:33:4f:9d:83:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=2c48b821-b2fa-4601-b76c-9858967df1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:57:29:9b:56:e4:bb:63:e7:f1:16:34:60:0b:
                    be:6f:b7:c3:65:6a:83:eb:fe:98:3f:b4:c1:7d:cb:
                    83:c4:2d:9b:94:9d:bf:e7:97:8b:5e:da:8d:4c:64:
                    f7:61:47:9b:d9:12:a5:a5:f6:36:72:2c:d0:1e:0e:
                    fb:c8:30:af:ba:da:d3:fb:e4:b6:a7:68:16:ea:df:
                    7f:cd:11:c8:db:2d:4c:fb:cb:a9:b4:8f:8e:42:d9:
                    38:87:cb:ed:ce:63:6b:af:a6:8f:2c:18:a6:d3:61:
                    e0:98:98:b2:60:1e:18:1b:0b:e5:c1:46:73:42:ce:
                    01:c6:91:ef:8b:82:e3:21:d8:4d:3d:19:a7:73:84:
                    eb:01:8b:27:2c:d7:91:9e:7b:66:54:6f:76:32:06:
                    c4:59:16:7c:69:56:1e:08:11:42:58:31:37:8e:c6:
                    0b:25:3e:18:9c:ea:a8:c6:52:9a:4c:4b:4d:1e:d7:
                    3d:f5:69:92:02:97:21:5b:52:7f:18:13:4f:26:ad:
                    ec:c1:ec:b8:f1:e3:5a:8d:00:2b:7a:d8:a9:e7:c6:
                    1f:6e:2f:b3:b2:74:ef:59:54:f5:5f:51:a8:76:76:
                    a7:c9:42:1b:28:35:3b:bd:ad:8b:dc:28:02:ae:e4:
                    de:50:a6:8d:52:fc:3d:3a:b9:e7:20:73:7d:ae:c5:
                    11:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B6:9C:68:FE:16:16:A4:38:EF:75:98:7D:89:83:F0:E3:D9:EA:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2bf59a5f-a5cc-3bfc-b893-4ba4eb20d0dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:fa:c1:f4:7b:1d:07:a3:15:62:5f:ba:ed:86:cc:db:f2:2e:
         d4:a0:99:63:d3:14:db:c5:ff:92:2b:b7:8f:bc:59:c0:5a:0b:
         23:ea:40:b5:6a:f0:26:32:f5:e4:31:93:d0:d2:ec:9d:5f:63:
         c1:8d:d6:31:2e:17:99:e4:28:08:cc:c5:3a:b9:b4:52:6a:fc:
         7b:c7:fa:6c:e3:6e:55:fe:f8:8e:40:79:f2:3b:93:b0:e1:37:
         2c:8c:46:b2:81:41:54:73:42:55:5a:0d:73:2f:d1:2e:f3:fe:
         ca:3c:f9:b7:ee:60:99:7a:fe:42:f6:ba:6a:29:db:cf:2e:52:
         51:7f:ab:40:d0:85:61:49:c7:a5:97:e1:47:73:5f:9a:95:0f:
         53:65:f8:85:3c:c3:df:19:9b:a9:0d:20:10:3a:f1:f6:ce:14:
         ff:b1:cb:3b:ee:ea:5d:03:cf:9e:21:74:8e:20:10:48:03:91:
         a8:97:d6:60:c1:2d:5f:80:6d:ab:f6:b8:02:a3:c9:ac:44:9a:
         fa:ca:db:79:9e:43:c6:5c:11:d0:07:4d:ae:bc:5f:a9:9e:a5:
         e3:4c:e6:99:9d:ed:60:90:d4:2f:79:c1:0f:3f:ac:66:d0:a8:
         17:67:a9:b0:a3:d9:53:58:46:a8:a8:3c:15:b8:c0:57:1b:48:
         4c:48:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:25:19 2025 by rpki-client