Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5b48fc5a-b9b2-3a80-b84c-f3ba0fe177d0.roa
File:                     5b48fc5a-b9b2-3a80-b84c-f3ba0fe177d0.roa (raw, json)
Hash identifier:          08JrsiNPVyU6ZkhIpaMyMxHmGioUqr1wf58mQU+lGcs=
Subject key identifier:   66:EE:E7:C5:DD:15:89:EE:C6:1F:1A:AF:C6:87:82:FF:8F:CF:CE:17
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847E10133DD7BDDEA14D2350920
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5b48fc5a-b9b2-3a80-b84c-f3ba0fe177d0.roa
Signing time:             Thu 14 Nov 2024 17:39:15 +0000
ROA not before:           Thu 14 Nov 2024 17:39:15 +0000
ROA not after:            Wed 12 Feb 2025 17:39:15 +0000
asID:                     5650
IP address blocks:        104.252.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:01:33:dd:7b:dd:ea:14:d2:35:09:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 14 17:39:15 2024 GMT
            Not After : Feb 12 17:39:15 2025 GMT
        Subject: CN=224565fc-274f-4279-994c-9392b832644d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9b:bb:bc:35:d4:0a:bb:58:01:ae:18:bf:cd:
                    50:b1:7b:03:7a:14:59:b6:d7:53:e7:3c:56:7a:97:
                    69:97:40:9d:6a:9a:c1:0a:5d:25:b9:71:56:39:36:
                    1b:bf:8d:35:a3:21:23:6f:db:05:46:58:08:9e:19:
                    6b:ac:7c:f6:c6:bb:e4:ee:0a:70:5e:7e:4a:99:0f:
                    69:37:77:4e:94:0b:8f:04:71:ca:23:7b:50:9b:65:
                    8a:10:3c:1f:ef:18:68:d6:1a:86:09:33:d6:ef:ee:
                    c9:27:71:10:1c:95:d1:18:e7:b2:97:d0:ac:ad:70:
                    7e:21:9b:a8:97:1b:78:5c:3b:5c:eb:17:43:a1:10:
                    ca:85:e2:9d:71:40:8b:1f:4b:a6:5e:19:fa:5c:d2:
                    e0:ae:9d:9e:49:4e:d7:f0:21:24:da:6f:ca:cf:6d:
                    de:b8:ac:dc:40:7b:36:79:98:1f:06:d9:ac:9e:d7:
                    5a:a2:1b:86:94:73:18:80:10:5c:79:8d:7a:73:57:
                    77:39:9a:cd:15:c3:5a:cf:18:64:76:7a:b9:fb:7e:
                    a8:0f:60:4f:07:56:cc:73:80:e8:3b:75:a6:85:17:
                    bc:ff:04:3d:cd:92:8a:4a:fd:98:bb:24:a0:76:12:
                    e3:e2:d0:61:c2:cd:5f:f4:a3:e3:f4:e6:77:a4:4e:
                    3a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EE:E7:C5:DD:15:89:EE:C6:1F:1A:AF:C6:87:82:FF:8F:CF:CE:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5b48fc5a-b9b2-3a80-b84c-f3ba0fe177d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:5f:40:1c:ab:c2:8c:ec:6a:a9:0b:ca:68:b1:e0:3b:fc:93:
         d6:0b:9a:6f:5b:4b:c2:e3:2a:66:c2:f3:93:67:09:5d:68:d6:
         a8:75:a7:9b:01:14:42:fb:fd:cb:8f:6e:89:ad:74:98:fc:bb:
         f6:a0:79:72:97:85:c4:88:51:b9:e9:7c:b1:eb:0b:ff:13:e4:
         98:07:04:0a:eb:79:17:02:23:64:79:60:fe:66:df:f3:95:23:
         89:77:36:fd:2e:91:ac:55:69:75:b8:a4:b8:2b:75:38:17:7f:
         90:ec:85:dc:93:6e:7f:8f:c0:12:5e:94:d2:d7:64:0d:79:1b:
         63:d9:ea:63:a8:96:20:b9:17:fc:71:10:11:30:2c:e4:78:47:
         91:a9:95:56:a0:71:cf:27:69:69:0d:b5:eb:a7:bc:2f:89:6a:
         dc:c8:01:b5:6d:2d:50:32:13:b6:7d:0f:b3:b8:72:2c:04:39:
         64:ba:8a:ba:24:4d:c8:25:d5:7a:7d:5e:6a:6e:b5:ac:06:dc:
         89:26:65:48:92:70:31:40:66:68:8a:c4:66:f2:dd:de:e4:11:
         f6:9e:2f:af:14:6d:78:1d:a3:3b:8e:19:94:09:b0:62:33:1d:
         fb:4e:cd:24:9e:df:52:5c:44:9b:f7:78:54:0a:58:98:53:df:
         e5:12:94:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:58 2024 by rpki-client on console-fra.rpki-client.org