Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/650b271c-8bbc-3274-a6be-de541ad3cf0d.roa
File:                     650b271c-8bbc-3274-a6be-de541ad3cf0d.roa (raw, json)
Hash identifier:          iu22A/0sXwVi7eCx+/ngUvCnWt8E53TWX32Gr2MEx0M=
Subject key identifier:   59:43:05:5F:6D:30:C9:04:64:F0:94:B4:FD:4C:FD:EA:9D:30:1C:FE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858488DCA4B6E9A2C3C2611E45C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/650b271c-8bbc-3274-a6be-de541ad3cf0d.roa
Signing time:             Wed 15 Jan 2025 15:03:28 +0000
ROA not before:           Wed 15 Jan 2025 15:03:28 +0000
ROA not after:            Tue 15 Apr 2025 14:03:28 +0000
asID:                     202015
IP address blocks:        104.253.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ca:4b:6e:9a:2c:3c:26:11:e4:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 15 15:03:28 2025 GMT
            Not After : Apr 15 14:03:28 2025 GMT
        Subject: CN=0dfa8369-eae6-4171-aa80-5a448868d335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e2:73:7a:d0:28:63:48:eb:84:bd:8b:a6:2f:
                    d6:7a:57:a8:bb:4b:26:eb:ea:ce:8b:aa:af:3a:d1:
                    49:75:fd:4a:12:bb:7b:e2:da:ff:22:b1:f6:d6:f3:
                    3d:d3:eb:72:69:c1:ac:50:12:2a:34:52:c7:f6:24:
                    33:02:59:34:d3:2d:c5:c0:6b:ad:bf:e0:74:78:ad:
                    0f:11:c1:ed:9e:62:71:03:e6:e8:d2:28:a4:7e:e0:
                    b4:8e:f2:01:e7:6a:e1:90:90:0f:17:7e:d1:ff:1a:
                    46:a0:ce:c7:f8:7c:da:d6:f7:00:59:1e:42:55:cd:
                    e7:f2:8a:04:24:c8:ef:cf:46:1f:34:b0:46:fb:4b:
                    67:be:f1:44:0f:4f:4f:a0:48:ea:06:c9:81:ca:0b:
                    d0:d1:cf:cb:a7:3b:a4:ce:22:4f:39:a6:81:93:f4:
                    35:b2:e4:2f:7e:bd:93:d7:b9:f8:88:70:e0:e6:28:
                    5d:19:65:5c:eb:99:05:bb:a8:ea:11:61:d5:44:91:
                    74:51:02:ad:03:ca:20:69:4a:06:f6:c7:db:4e:7e:
                    26:36:0b:70:d4:b9:d9:8f:54:85:ed:8e:40:da:3b:
                    74:f0:a7:44:73:17:c9:b8:ca:95:55:b9:df:45:c1:
                    61:00:9a:7e:bd:7f:f1:8f:c8:fa:ba:b8:6a:65:51:
                    62:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:43:05:5F:6D:30:C9:04:64:F0:94:B4:FD:4C:FD:EA:9D:30:1C:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/650b271c-8bbc-3274-a6be-de541ad3cf0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:29:ee:ef:94:c1:c5:90:7a:15:e3:94:c2:c8:36:2e:86:c9:
         c8:1c:dc:85:63:fb:8d:c3:da:00:fb:5b:53:bf:cc:b9:d9:df:
         8c:02:a9:95:7c:0d:db:c8:de:ff:5c:55:93:8d:33:eb:47:c3:
         5b:3b:9d:01:ba:34:46:e5:eb:e9:a5:ea:58:55:26:75:17:c4:
         fa:e2:b1:4b:b2:0d:f6:0a:96:3b:00:63:41:fe:bb:03:ed:de:
         ad:e3:ab:7c:7c:a3:f0:79:cd:ce:87:28:d1:10:88:78:47:d4:
         82:9d:42:1b:2f:5e:21:d2:fd:eb:0a:a6:a4:e3:05:38:79:c6:
         1a:8b:17:42:24:06:59:01:22:96:81:8f:68:b7:79:1f:83:f8:
         e7:c8:84:75:ed:00:47:ba:a5:f5:41:a8:55:34:c3:ab:35:d5:
         74:ca:e7:3b:b6:85:fd:26:63:ff:16:5b:41:cb:23:8c:fd:89:
         f7:ab:94:2c:37:ba:4c:0a:71:13:d1:8f:f4:a6:c4:52:36:31:
         1d:79:5f:ec:7e:4c:c1:a4:9e:ae:8c:90:7e:e2:96:70:2c:19:
         39:03:50:74:3b:9c:b4:92:48:0d:e2:de:b1:2d:73:df:2b:07:
         19:1b:82:20:a7:ec:5a:ff:02:ce:3b:a8:70:2c:04:5f:de:d9:
         72:b1:8b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:47 2025 by rpki-client