Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/49f74cc5-d833-36d6-8312-947b4e67b36e.roa
File:                     49f74cc5-d833-36d6-8312-947b4e67b36e.roa (raw, json)
Hash identifier:          I8eW/jk6m0c/5slQfHRLLXXzYMluEDmFj2bVx0CROTc=
Subject key identifier:   80:D8:C8:2E:DF:01:4E:1E:27:9E:E0:5C:AA:A8:5E:83:16:A9:2C:12
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584908EF1C1A704019F1DBA65260
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/49f74cc5-d833-36d6-8312-947b4e67b36e.roa
Signing time:             Fri 28 Feb 2025 17:42:04 +0000
ROA not before:           Fri 28 Feb 2025 17:42:04 +0000
ROA not after:            Thu 29 May 2025 16:42:04 +0000
asID:                     174
IP address blocks:        104.164.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:ef:1c:1a:70:40:19:f1:db:a6:52:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 28 17:42:04 2025 GMT
            Not After : May 29 16:42:04 2025 GMT
        Subject: CN=f97c8581-1c21-41e8-9023-2c9fb0f5467a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c4:52:46:55:c8:bf:ed:9e:37:ea:d3:e8:1a:
                    d0:fe:77:10:f8:1b:42:ac:c1:30:d4:15:f3:36:4a:
                    00:75:42:74:92:47:a9:d1:e2:a4:93:13:cc:ad:ff:
                    4f:80:23:cc:ce:ea:dd:bf:67:c1:39:fe:26:e3:ed:
                    da:c1:71:1d:72:06:b5:9a:4c:cf:42:0a:8c:27:5d:
                    64:b3:45:f6:d5:fc:0e:8c:6f:83:80:8d:8f:4e:69:
                    43:76:9a:d5:aa:52:f3:48:22:6e:72:b1:80:f0:15:
                    db:0f:a4:cc:20:5f:5f:c2:ab:06:fe:40:dc:53:0b:
                    f5:11:07:41:8d:01:1c:8e:e8:a9:84:69:d7:26:75:
                    7c:75:68:a4:14:ab:e7:e1:94:e1:fd:fc:7c:e0:98:
                    50:78:c0:81:8c:dd:6e:d2:b5:bd:fe:27:7b:87:d4:
                    3c:60:d4:18:b1:33:14:36:6f:20:c1:9a:1a:8e:0f:
                    4b:a0:d3:09:d8:7b:ae:2f:2c:8b:83:37:06:d1:21:
                    43:b8:5a:b5:25:b5:a3:3b:23:e7:5b:58:a2:b2:8b:
                    65:22:a2:52:c7:6f:a9:85:94:f4:fc:3a:0d:ff:1e:
                    7c:15:bf:96:78:27:42:06:aa:9d:38:fb:2c:c5:a8:
                    ee:02:8f:2e:00:08:84:e5:3e:61:79:a8:c2:7a:7e:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D8:C8:2E:DF:01:4E:1E:27:9E:E0:5C:AA:A8:5E:83:16:A9:2C:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/49f74cc5-d833-36d6-8312-947b4e67b36e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d2:ab:7c:95:df:3d:2f:de:46:32:6a:dc:c8:d8:df:78:a6:
         22:db:d9:4b:65:cc:61:ca:01:5a:8d:65:b9:11:1c:17:51:fa:
         c5:30:64:da:11:6f:f2:4e:39:4e:f8:46:d8:dd:d5:f9:44:8a:
         89:12:c8:88:ee:58:d3:35:bb:ef:29:d2:8d:68:57:4f:68:ea:
         7d:b9:76:c0:b7:d4:7c:78:8b:8f:3f:96:98:f9:2f:79:c2:11:
         31:e0:96:2b:72:8a:11:bd:b9:71:71:34:d2:c2:b6:e5:3d:30:
         60:f5:23:1e:fe:21:89:f0:98:1c:7b:3c:88:de:c9:e0:1f:4d:
         b8:48:40:35:ac:4c:95:a2:8e:82:78:a8:8a:98:f4:a5:ab:07:
         5a:39:fb:7f:07:e7:9d:86:d5:3b:10:8e:57:1b:7b:51:f7:ab:
         84:ef:1e:ee:e9:52:3f:0a:cd:1e:08:59:52:4b:e8:77:dd:b6:
         7e:27:74:57:77:3b:4f:ea:d9:1d:b4:47:dc:e9:eb:79:3c:a0:
         f8:aa:43:22:e9:71:fa:02:1d:b1:95:b8:3c:bc:0d:53:be:f3:
         6a:92:e6:ae:42:f6:c3:8a:8b:1f:9b:5a:e7:bf:75:6d:8b:ed:
         6c:77:31:7e:ec:a6:1a:ba:2f:f9:29:3a:c8:4c:a4:20:12:79:
         39:c0:7f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:53:28 2025 by rpki-client