Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/90cd7e8b-e337-33fc-b23a-8e623ca7aa82.roa
File:                     90cd7e8b-e337-33fc-b23a-8e623ca7aa82.roa (raw, json)
Hash identifier:          ZdzQiTWDXinaRwDlfQGUCiTvTGehydTWuG4KpQ/2CpU=
Subject key identifier:   74:2D:50:A4:95:64:74:D7:88:4C:93:F8:39:F0:7B:EC:5D:50:F7:08
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848C41B799D2F54C14D31054D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/90cd7e8b-e337-33fc-b23a-8e623ca7aa82.roa
Signing time:             Tue 04 Feb 2025 02:00:40 +0000
ROA not before:           Tue 04 Feb 2025 02:00:40 +0000
ROA not after:            Mon 05 May 2025 01:00:40 +0000
asID:                     7029
IP address blocks:        104.252.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:1b:79:9d:2f:54:c1:4d:31:05:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  4 02:00:40 2025 GMT
            Not After : May  5 01:00:40 2025 GMT
        Subject: CN=d3e1e844-4898-49bd-bbfe-12ac11187c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:47:3f:85:b6:8e:49:a1:20:51:b0:44:fc:
                    b1:24:7d:76:54:ea:ed:36:32:cd:d0:e5:cd:c1:5c:
                    85:f0:2d:8c:34:49:90:67:00:88:b4:c7:0e:9b:ec:
                    b1:da:89:61:88:4e:b5:90:cb:08:21:16:06:9b:ef:
                    a9:bf:16:c8:a0:2d:09:7c:4c:40:29:6f:d4:77:42:
                    d4:fb:1b:48:e4:bf:a5:eb:1f:c3:9a:a6:42:5f:cc:
                    f4:e2:3b:41:99:c9:ac:a1:85:36:fa:bd:90:bd:9a:
                    10:4a:9e:ad:8c:ca:07:62:54:28:e8:ba:17:1f:89:
                    47:d2:72:57:24:7a:2f:6c:35:fe:5a:2b:78:ff:a1:
                    8f:08:b5:68:5c:2c:65:2a:42:76:0e:67:58:db:8f:
                    8b:8f:43:97:2d:53:0d:0b:b9:aa:6d:be:46:1d:8f:
                    7d:74:3d:9e:f8:0f:99:de:de:1e:8f:c9:17:25:bb:
                    92:3a:f2:e3:2f:31:b4:89:ec:dc:33:30:b5:78:a0:
                    73:22:d3:88:f6:ec:a0:f1:26:49:1e:84:14:5a:c0:
                    26:ce:3b:11:69:49:15:cc:eb:9e:51:a9:47:12:d3:
                    31:9c:ba:a2:23:a3:3c:cf:3f:0d:dc:29:fb:02:54:
                    a4:ee:af:e6:c1:d6:9d:d9:9b:8d:9e:23:97:f3:56:
                    69:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2D:50:A4:95:64:74:D7:88:4C:93:F8:39:F0:7B:EC:5D:50:F7:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/90cd7e8b-e337-33fc-b23a-8e623ca7aa82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:fe:46:74:e5:60:8c:0b:58:73:12:e9:86:5b:ac:30:55:19:
         3e:c9:4f:bd:8c:d5:6c:69:6d:ce:66:38:83:d2:4d:e2:a0:6c:
         c8:9a:86:7e:0f:22:d8:7a:4c:ac:68:f9:87:ce:1e:54:29:50:
         0e:7b:3b:79:b8:d1:fc:0d:59:d6:2b:1e:89:5c:ef:a2:1c:fa:
         81:56:fc:42:12:68:c6:02:9c:7f:c6:fb:73:21:2a:82:57:68:
         6f:48:88:fe:2f:1b:5f:42:8d:4e:dd:ca:70:62:25:40:de:a9:
         65:e4:76:c9:df:de:70:b5:c0:8f:84:cd:77:13:54:b4:89:a5:
         5d:52:b0:fc:10:00:f7:ce:be:2c:33:8e:78:f3:34:7e:02:c6:
         0a:ac:72:ca:4b:62:05:ea:58:e1:7c:3b:27:48:ff:5d:72:6c:
         4d:bf:16:9b:94:f9:1e:cf:63:99:1a:f6:c4:11:67:4e:3a:1f:
         b4:12:92:f0:a2:b4:53:f0:5e:1f:f4:50:fd:a8:a8:c2:5d:20:
         57:9d:55:8b:ab:a0:e1:44:19:5b:10:05:5a:e1:90:c6:9b:70:
         d4:0c:9a:39:86:0c:40:43:b4:69:b7:1b:34:1e:d4:31:f5:d3:
         44:f8:a2:82:a5:68:47:e9:7c:8b:c5:5c:41:ac:a8:b0:57:b2:
         aa:d8:0a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:00:38 2025 by rpki-client