Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4258d067-5697-331d-9a93-d5b46432ce8f.roa
File:                     4258d067-5697-331d-9a93-d5b46432ce8f.roa (raw, json)
Hash identifier:          DFUWDcniOQ4uG98wLAeyVBKxG0yeIQuO6/q1vd9PWQw=
Subject key identifier:   9F:19:BD:95:01:96:09:5E:FC:B4:65:7F:74:C4:EB:18:55:33:19:22
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847B67F5C369E9345C41998CABC
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4258d067-5697-331d-9a93-d5b46432ce8f.roa
Signing time:             Wed 30 Oct 2024 12:13:41 +0000
ROA not before:           Wed 30 Oct 2024 12:13:41 +0000
ROA not after:            Tue 28 Jan 2025 13:13:41 +0000
asID:                     44477
IP address blocks:        104.252.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:7f:5c:36:9e:93:45:c4:19:98:ca:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 30 12:13:41 2024 GMT
            Not After : Jan 28 13:13:41 2025 GMT
        Subject: CN=29c67f85-e448-4a5b-b4a9-3d5c69ec3c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:56:3a:aa:13:94:57:44:fa:03:1e:9e:69:ea:
                    2e:61:a0:d6:10:aa:74:cd:35:3f:b9:d9:55:51:39:
                    26:7d:bd:18:a9:56:9c:9d:6e:80:e4:e0:3b:27:63:
                    61:bd:51:8a:a6:18:65:29:85:3f:a8:05:2f:ac:d6:
                    9b:7f:95:a9:77:23:8e:ff:f3:51:69:05:48:c7:de:
                    03:f4:45:6d:bd:30:c7:e7:89:73:e0:30:6a:89:51:
                    12:fa:81:83:0c:9d:98:64:64:4b:53:65:1f:47:2e:
                    df:b0:50:e9:17:ac:03:da:5f:55:d5:4b:12:f1:b9:
                    45:af:7e:cd:37:5b:f1:65:bd:c9:48:20:2e:6e:75:
                    03:58:20:60:01:4a:aa:7a:4f:50:d0:03:d5:02:51:
                    03:5a:85:ac:c6:d3:49:bf:5f:5d:a5:04:b8:26:dd:
                    e9:6d:26:51:8b:d1:82:e0:fa:1a:d4:9d:a7:2d:95:
                    7c:8b:07:04:30:34:67:b2:91:97:1f:6e:2c:56:48:
                    fc:2b:ea:30:f1:39:e7:8f:7c:b6:e6:d8:fb:3b:72:
                    02:3e:af:ff:6b:dc:48:c6:dd:c9:79:23:4b:2f:d3:
                    2f:dc:94:c2:15:c4:0f:ec:db:ab:bc:87:64:0c:4e:
                    b3:26:93:62:f2:07:f2:ff:b8:bc:60:1f:00:e4:1c:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:19:BD:95:01:96:09:5E:FC:B4:65:7F:74:C4:EB:18:55:33:19:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4258d067-5697-331d-9a93-d5b46432ce8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0f:e3:5e:89:1b:7c:c8:fc:7c:f2:86:5f:08:e9:21:1f:c8:
         7a:74:eb:a0:00:91:01:89:1c:94:6e:d9:9f:2d:87:03:7e:cc:
         ee:94:54:16:97:81:08:8e:cc:9e:82:4f:87:65:5a:61:a3:f2:
         f2:7f:c1:ec:b1:49:a5:e4:5a:dd:3d:83:5a:de:7b:1a:f2:28:
         c4:35:05:9d:a9:bb:40:38:6a:01:f9:07:9a:a2:dd:f4:48:e7:
         0f:d4:7e:05:67:b4:52:d7:df:a5:d2:d6:2c:96:a1:18:1d:a0:
         ca:d0:ab:74:fd:bf:d0:3a:1b:0a:a4:41:03:46:6f:64:e4:78:
         9f:61:43:69:1d:55:81:c8:da:9b:38:75:e8:bf:44:00:9a:b9:
         8f:23:a3:78:d5:8c:3d:71:93:f2:00:ba:cf:fa:c2:e1:b5:70:
         27:4e:02:5e:23:d6:c8:5d:ef:4f:ae:5a:fd:c6:8d:57:c4:ac:
         a9:4c:43:c2:43:b8:0e:cd:cc:79:d1:50:38:4a:d6:3f:3c:68:
         ce:f3:75:80:59:7a:28:02:51:fa:5f:64:4b:47:8d:b8:43:74:
         73:00:87:f5:b7:c6:9b:7f:06:d6:fc:15:3e:b5:f9:ec:95:a6:
         6c:3b:eb:93:fa:3b:d9:1f:5f:29:b6:4a:ca:23:30:96:44:ce:
         fa:bc:6f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:43 2024 by rpki-client on console-fra.rpki-client.org