Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/49f13dac-1d78-3fa4-8182-68eccaa3318a.roa
File:                     49f13dac-1d78-3fa4-8182-68eccaa3318a.roa (raw, json)
Hash identifier:          lESH/YMf1YA7znC/q0moak+dY3anaYmTHxd8PT8/G0M=
Subject key identifier:   F0:A0:76:30:27:BD:27:0B:99:CF:7C:10:EF:57:41:BA:D3:01:69:E5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848F1FA0C2438D886FD63F35E80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/49f13dac-1d78-3fa4-8182-68eccaa3318a.roa
Signing time:             Thu 20 Feb 2025 12:20:31 +0000
ROA not before:           Thu 20 Feb 2025 12:20:31 +0000
ROA not after:            Wed 21 May 2025 11:20:31 +0000
asID:                     18779
IP address blocks:        104.252.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f1:fa:0c:24:38:d8:86:fd:63:f3:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 20 12:20:31 2025 GMT
            Not After : May 21 11:20:31 2025 GMT
        Subject: CN=b52cfec7-982a-4c4f-bc40-a0c3915dbbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:83:1e:ec:f3:ab:4c:f4:02:bf:0b:03:a5:
                    6a:19:88:cf:e3:1e:46:5b:6f:a6:79:8a:89:e4:d8:
                    96:e0:11:d1:f0:c4:c0:85:5f:ad:99:5f:95:a4:cf:
                    f7:a7:c1:bd:a6:8d:8f:57:2d:b0:60:e4:96:c5:7d:
                    c9:4d:b2:f6:73:f8:b8:d5:9c:30:3c:98:bf:6b:c8:
                    98:07:dc:ad:22:d2:63:68:38:2a:80:5a:e9:3b:f2:
                    36:1e:13:29:bb:13:77:0f:4d:c7:d8:42:8c:c5:8e:
                    cd:71:54:9b:e6:76:b0:b4:08:8a:3e:93:9e:b4:b4:
                    85:21:07:b4:1f:15:5f:07:a1:d4:cc:fd:43:a5:48:
                    f8:65:32:df:22:64:65:99:08:63:66:d5:c0:d4:c5:
                    bc:61:45:d6:b1:f8:6e:96:8d:76:d3:16:07:bb:87:
                    7f:21:95:bb:19:e5:59:33:12:7a:41:3d:5b:81:b2:
                    24:3e:c1:3d:17:29:14:c5:94:13:18:4f:a2:1f:e2:
                    d4:6a:08:ae:c8:2a:7a:1d:7d:93:9e:e9:20:82:8d:
                    2f:84:f8:14:b8:ad:03:9f:a7:2c:20:18:8f:3d:a6:
                    d8:68:dc:61:1e:51:64:63:f8:67:86:d5:ca:63:bc:
                    4b:66:b8:90:eb:fa:45:55:96:25:16:09:48:5a:34:
                    e5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A0:76:30:27:BD:27:0B:99:CF:7C:10:EF:57:41:BA:D3:01:69:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/49f13dac-1d78-3fa4-8182-68eccaa3318a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c9:93:6f:c2:f7:fa:e5:84:58:1e:10:4f:c0:9a:b3:69:da:
         f6:88:70:7b:c1:0f:02:76:96:17:79:e5:85:d8:ce:5c:48:28:
         f2:e4:65:d4:53:de:20:3f:77:45:e8:bc:3c:b0:75:42:da:bd:
         0e:22:ca:3c:90:8f:48:79:bc:df:79:3f:07:ca:1d:18:ea:2f:
         b3:8a:64:2e:8f:76:7f:a7:9a:e3:93:5e:50:eb:c9:b3:74:f8:
         e7:c4:25:ca:e2:ef:32:dc:3d:06:9d:2d:85:00:79:8d:3f:78:
         4b:48:da:86:ca:9c:00:40:be:24:f9:39:fa:0e:78:f8:2c:df:
         9b:4f:4b:1e:5c:5c:58:ac:da:9c:c5:16:79:2c:42:d2:fd:71:
         e5:18:7f:ed:74:ef:56:a3:6f:3d:45:ec:e3:e0:10:00:be:e9:
         71:5d:98:8c:24:b7:e9:ca:b2:14:f7:84:e6:63:3a:a3:ea:24:
         f9:d8:62:40:41:1f:e5:af:0c:be:c0:1e:07:76:13:b1:2a:d8:
         9b:91:65:82:9f:1b:57:af:bf:5e:5d:63:da:c2:10:30:d6:80:
         ca:f0:49:02:6c:52:5d:76:55:83:ab:d7:e4:b0:03:03:c0:4f:
         75:a8:02:47:0e:03:be:dd:1a:0e:63:ef:18:1f:2d:3a:12:1f:
         15:16:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:50 2025 by rpki-client