Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b199b99-25c9-381a-8b6d-c9da67ae59e3.roa
File:                     8b199b99-25c9-381a-8b6d-c9da67ae59e3.roa (raw, json)
Hash identifier:          qB/hBdvNG2nga+2KV9kUqDFfwftOzlm8HYybN8U+ZhA=
Subject key identifier:   42:95:E2:6F:3C:73:55:1D:B0:7F:CB:96:CB:7F:2A:F6:F7:BA:79:E1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858492CB0B6934041BE4FA61DBA70
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b199b99-25c9-381a-8b6d-c9da67ae59e3.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     400759
IP address blocks:        172.252.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:b6:93:40:41:be:4f:a6:1d:ba:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=d868b6ac-f91e-47f8-981e-00e93051ee6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:41:0a:45:ce:06:c4:51:e3:fe:44:24:0a:d0:
                    eb:72:fc:39:11:9a:ae:66:fe:c4:f1:d6:2e:c5:9d:
                    a5:39:24:8b:61:82:70:59:ee:b6:cf:f4:56:ff:a7:
                    8b:c9:48:40:5f:4a:87:da:f1:fa:10:d3:16:07:6f:
                    bf:eb:56:e9:de:3f:e0:45:18:36:a5:59:15:ec:0a:
                    a0:7a:84:7b:99:c4:8a:77:27:89:54:c5:66:c1:d4:
                    8e:49:7f:ac:39:8d:06:5c:3a:c4:5c:fd:ec:56:d3:
                    ee:49:e6:f6:a4:98:5d:42:02:90:e5:f7:b4:57:5a:
                    01:ab:2c:13:1e:5f:e8:52:95:b6:1c:2a:3e:43:f4:
                    c4:b1:96:0d:b0:45:65:6c:fb:00:28:e5:cb:dc:2a:
                    5d:9d:8f:e5:60:28:cd:71:19:35:85:8c:bd:5f:49:
                    cd:20:87:fe:b9:80:64:09:0f:36:2b:81:32:a3:50:
                    b0:ae:ef:44:b9:54:3b:bd:9c:19:07:72:c9:90:4d:
                    09:6c:c3:8c:48:1e:e4:91:c2:74:43:c8:af:cc:c9:
                    74:28:78:43:9b:ec:42:b9:9f:81:22:56:e6:50:ce:
                    ec:4e:8c:63:37:f6:41:78:ef:b5:65:49:fe:85:53:
                    6e:fe:2a:52:cf:6e:e3:41:d8:65:59:e7:99:59:c5:
                    62:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:95:E2:6F:3C:73:55:1D:B0:7F:CB:96:CB:7F:2A:F6:F7:BA:79:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b199b99-25c9-381a-8b6d-c9da67ae59e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:63:84:5b:dc:fd:27:0f:92:0d:9d:61:30:ca:49:7b:92:49:
         22:a8:52:ed:0d:25:a5:e6:a8:77:0d:65:73:9b:06:90:65:f3:
         f1:54:e7:fc:db:e5:b2:de:80:72:f6:d1:84:43:07:85:7d:6c:
         45:54:4f:ba:cd:1d:04:eb:3f:20:07:ea:aa:aa:d2:27:5a:59:
         49:f1:41:c8:1e:26:c6:76:c1:ba:cc:3f:5c:de:05:e8:24:da:
         ab:24:17:43:db:8e:5a:d3:0f:a4:a2:35:3a:9b:d2:f6:5e:08:
         15:45:49:54:de:fc:a9:4f:b4:d9:d0:d2:28:b2:69:f3:67:f2:
         5a:01:af:2b:43:f5:f4:da:0f:9b:0b:6f:12:13:65:8e:77:ae:
         eb:12:0a:7e:0c:cf:db:dd:5b:12:a9:e8:b1:00:79:22:05:f2:
         14:90:f2:b4:d8:12:e1:bf:b9:90:0a:2f:e7:74:43:56:38:5b:
         3c:59:d1:6a:87:14:e7:b0:c1:b9:4d:9f:21:e0:27:39:9b:3a:
         83:0e:8a:15:b9:b6:d1:28:78:53:ba:f3:7d:3b:8b:25:c0:f3:
         c4:68:11:4b:1f:20:df:f9:46:32:cb:be:be:a2:3e:d1:4c:be:
         f5:26:e8:e5:dd:95:6b:a2:8b:9c:ae:76:0d:30:7b:82:2e:c0:
         cb:82:48:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:35 2025 by rpki-client