Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e5671e4-bf6b-3b7f-9b3b-5b578ed0443b.roa
File:                     4e5671e4-bf6b-3b7f-9b3b-5b578ed0443b.roa (raw, json)
Hash identifier:          w3UNfjcoq3/IDCk49fxSs0Kcj8VfyiFBIAvV9DGiicU=
Subject key identifier:   FD:9D:B7:45:2A:D2:13:AE:25:AE:44:F8:C4:03:54:AF:BB:BC:F9:AA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D6412F512403831DA2AE90C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e5671e4-bf6b-3b7f-9b3b-5b578ed0443b.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     400536
IP address blocks:        172.252.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:2f:51:24:03:83:1d:a2:ae:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=7085e0da-c5a6-4963-9d4d-5621203d55c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:43:60:dc:69:58:42:1f:64:ec:b3:3e:32:dc:
                    3e:3d:6f:1c:95:c2:09:0b:c1:a4:ec:4b:f0:c2:0f:
                    2e:4e:49:8a:e1:48:9b:3d:73:2f:3a:ab:29:1d:37:
                    db:84:1a:10:7d:1c:f5:f2:7a:6e:da:c4:82:ef:fe:
                    23:4c:0b:9e:3e:3c:d5:b1:f2:1f:1f:2e:c3:4b:63:
                    1f:e8:b9:b4:b7:1c:82:65:06:05:86:d6:4b:33:cc:
                    e2:90:18:8a:13:cb:f1:ed:2b:f8:cf:ac:ba:ce:bf:
                    c7:6f:52:5a:14:d6:6a:22:e3:77:76:25:f9:25:f0:
                    29:77:83:30:62:d8:2f:c1:8e:6f:0a:ad:31:fe:21:
                    d2:e6:44:87:dd:c4:66:cb:f4:fe:69:5e:5e:9d:41:
                    7e:99:38:78:13:bc:8a:2b:c9:9f:b1:79:31:ed:f9:
                    ed:7b:a6:0b:79:34:64:32:0f:44:a9:8b:ee:e1:3b:
                    01:f5:65:2c:54:0b:d6:8d:b4:eb:9c:40:aa:02:ed:
                    cc:8c:3c:d2:c4:f1:72:66:6e:26:7e:a4:85:2c:cd:
                    fe:2e:ec:bd:1b:b2:26:78:fa:30:0f:89:30:4f:35:
                    c9:01:9f:af:23:95:26:42:c7:e2:f4:83:cc:46:69:
                    45:12:7a:02:8d:52:c4:79:fc:a7:fc:69:08:c4:22:
                    2d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9D:B7:45:2A:D2:13:AE:25:AE:44:F8:C4:03:54:AF:BB:BC:F9:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e5671e4-bf6b-3b7f-9b3b-5b578ed0443b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:34:69:10:48:e7:ac:92:e9:84:8b:15:9f:d6:cf:19:83:03:
         92:88:e9:29:a4:b2:6c:e4:03:17:ef:fc:f3:03:f3:72:f1:bd:
         4d:e0:f8:93:8b:2c:24:c8:89:aa:e8:67:8e:81:e6:09:aa:4d:
         ba:4f:d5:81:58:6c:06:17:2a:a2:9d:ba:51:03:08:5f:dd:d2:
         3f:da:5b:65:a2:ae:1b:5b:ee:18:63:25:22:4c:13:06:13:62:
         f3:fe:bd:ea:dc:8d:0b:4b:83:fb:bb:5a:74:b9:a8:81:c7:40:
         ef:e4:64:e4:50:b5:23:8f:aa:df:d1:5c:3a:b9:96:2b:9a:fd:
         28:44:a6:83:a0:6f:21:ce:0a:e6:9e:46:c9:b7:5e:9a:90:11:
         2e:d9:af:02:83:a0:a1:2a:b0:71:d9:6f:9a:1d:59:a3:46:d9:
         11:b8:9b:c7:6b:f1:6d:c7:df:2c:a7:d9:56:3b:c9:4d:e9:86:
         df:1a:90:84:dc:75:85:f1:02:57:07:66:81:8f:ff:92:61:b6:
         b2:a1:de:6a:07:11:18:fd:5a:67:77:87:97:b4:2b:63:24:c7:
         e9:c2:d8:09:08:d0:83:21:ed:8a:80:6c:45:b8:87:52:1d:71:
         21:44:99:96:4f:77:dc:00:42:7a:37:21:d5:ed:37:a3:b8:77:
         47:fa:98:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:17 2025 by rpki-client