Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2dcc38cb-6f26-3a4c-823f-d61407133060.roa
File:                     2dcc38cb-6f26-3a4c-823f-d61407133060.roa (raw, json)
Hash identifier:          0Fer2l5ZY2dG65QNFivowy08IMoeWdLIkuC+3HV5WdA=
Subject key identifier:   CE:13:B4:EE:1F:BD:CA:5A:5A:B3:EE:AF:6D:B4:40:7F:7E:7E:BA:A0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858492E13B4EB943E0FA1EE1B4480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2dcc38cb-6f26-3a4c-823f-d61407133060.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     212238
IP address blocks:        104.252.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:b4:eb:94:3e:0f:a1:ee:1b:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=d733b5dd-d218-4605-9773-51fe76ea1020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ab:8f:37:71:03:a8:c8:17:d4:ca:92:b3:a1:
                    7e:29:37:ae:fe:f2:d5:6f:18:65:f4:56:14:56:58:
                    13:ad:36:69:c9:e5:2b:30:99:84:4c:7a:60:26:a4:
                    7e:84:af:61:15:b2:e2:9b:1f:1a:c0:a9:2f:d2:c8:
                    ff:ad:84:29:bf:1e:90:9b:61:91:23:87:c5:a3:99:
                    90:91:74:ea:e4:96:54:eb:16:9f:fd:56:7d:65:da:
                    07:bf:9b:34:6f:34:94:0b:c2:3d:3c:b4:72:60:09:
                    57:63:2c:51:be:6d:a3:1c:6b:eb:cd:66:6d:17:7f:
                    46:62:8c:20:59:66:40:f0:ea:ec:63:a1:99:b7:83:
                    66:e4:cc:e6:49:b3:33:09:cb:71:46:28:7d:e0:8d:
                    33:30:ee:ef:41:ef:97:79:23:6b:b1:c4:d7:1a:b6:
                    50:6f:79:3d:c7:23:31:ac:af:20:5d:e8:13:e2:6c:
                    c2:1f:cb:f1:5a:39:40:8d:07:c4:55:0a:fd:80:21:
                    34:99:87:3e:f3:2a:a1:e9:32:10:a3:da:36:93:55:
                    6c:20:e9:b1:e4:12:66:5f:d5:29:4d:2e:96:55:5a:
                    ff:eb:50:c1:06:c1:04:48:a5:59:a8:7f:b8:77:88:
                    a7:3a:4c:df:b2:cd:52:9e:5e:2c:1f:67:3b:5b:d9:
                    c8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:13:B4:EE:1F:BD:CA:5A:5A:B3:EE:AF:6D:B4:40:7F:7E:7E:BA:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2dcc38cb-6f26-3a4c-823f-d61407133060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f6:21:4f:dd:82:f6:ae:ce:a8:74:5d:21:46:95:37:d5:2a:
         92:98:83:e0:22:c5:dc:4d:fe:ec:a4:69:f1:55:a7:5b:3d:b3:
         82:7a:cf:28:07:29:d2:c8:1a:2d:66:31:37:a2:f3:ee:02:7a:
         f7:df:51:b4:60:6a:83:d8:c9:b0:21:a2:ef:43:3d:65:a1:ab:
         e7:8e:01:84:c8:5c:b1:4c:61:d1:1a:e1:82:d0:37:80:a7:fb:
         5a:01:51:86:73:88:2c:29:3b:7b:07:d5:b8:ea:12:0e:bc:7c:
         49:6c:ba:59:3e:a3:22:04:be:a6:3f:01:d0:92:17:b9:37:e2:
         5d:10:c6:77:be:a3:9f:76:15:ab:82:c0:ba:2b:e1:3d:7e:3d:
         d8:69:55:a2:cd:7e:80:a7:4d:ec:45:e8:99:07:5e:b4:4d:f7:
         93:b2:fe:3e:2d:e9:48:6e:88:ad:b3:dc:fe:58:35:7f:88:a1:
         da:0b:9d:8f:2d:29:20:e7:c4:b1:8c:dc:5a:aa:f9:b5:e4:b2:
         59:71:0b:8f:ce:9d:d8:81:bd:c2:2a:f7:d8:cc:cb:da:cd:9a:
         69:9a:15:11:af:0e:cc:f7:e3:1d:9f:39:a1:61:37:c4:c6:aa:
         51:2c:b7:52:37:f0:28:af:3c:c3:7e:c7:16:57:38:7f:90:f4:
         7c:58:2c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:13:53 2025 by rpki-client