Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a549f076-5065-3130-ab93-2647b95c1466.roa
File:                     a549f076-5065-3130-ab93-2647b95c1466.roa (raw, json)
Hash identifier:          9OWi1hC5ideryNILAW6z0jnrUmJwjE88rbGxk8dxrek=
Subject key identifier:   07:E9:BF:22:52:64:33:96:AB:70:EE:FD:15:33:2D:05:09:E6:D6:C9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A0D6A92689AA2174EE3BD5700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a549f076-5065-3130-ab93-2647b95c1466.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     396356
IP address blocks:        104.252.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:92:68:9a:a2:17:4e:e3:bd:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=620d7913-7a8e-4140-9aca-315c93396123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:23:e7:86:de:be:66:0e:f4:17:c8:31:f8:
                    13:6e:ad:62:b7:02:70:26:10:30:ef:0c:54:02:a5:
                    3e:d1:62:b9:57:23:ef:5e:fa:9c:9f:80:df:a1:d0:
                    15:bf:72:64:db:6d:c4:c0:4a:31:17:db:d9:03:eb:
                    58:c1:33:91:be:2b:9f:54:8f:70:9b:7d:38:e2:d4:
                    cd:80:45:1a:c3:6c:27:10:5a:f3:45:cf:90:6b:0f:
                    a4:2c:3a:ff:e5:01:1d:ce:65:92:80:44:b8:29:d1:
                    e4:f8:de:f0:71:00:26:86:a9:e0:b0:2c:c5:4d:93:
                    0c:5b:72:ca:b8:b6:3d:00:74:ee:81:6d:d8:b6:b1:
                    e3:f2:c9:53:0b:de:31:89:73:a9:30:a1:8f:ad:81:
                    fb:71:a5:2f:24:4f:b7:2e:3b:ba:ce:2c:91:a0:6a:
                    d2:e0:0e:d6:84:5f:df:70:27:4e:4c:9a:6f:2e:d9:
                    a7:00:f9:91:6b:72:56:e5:29:98:18:a9:6f:89:3e:
                    1f:06:18:a5:4e:46:01:ad:9d:9b:bc:a4:17:d8:f1:
                    35:7f:35:b3:0a:b3:b7:fe:d7:51:0a:a6:4d:42:bc:
                    22:7d:69:4b:3e:23:43:1c:f0:34:1f:3c:98:12:f9:
                    bc:b6:97:48:dd:25:13:77:8c:2e:43:c4:f8:77:1e:
                    cf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E9:BF:22:52:64:33:96:AB:70:EE:FD:15:33:2D:05:09:E6:D6:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a549f076-5065-3130-ab93-2647b95c1466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:a4:30:eb:d1:4d:55:47:13:c1:b2:a9:f9:ef:2e:a4:a5:8d:
         20:b7:5e:ac:65:70:f4:ee:f3:a5:eb:c2:36:27:83:bf:32:f8:
         2a:78:04:bf:cc:18:a9:8b:4c:02:b4:9a:1b:da:d4:9a:2f:3e:
         4c:74:34:a7:5e:96:fd:6c:fd:db:36:10:42:e8:ab:0f:d4:ed:
         98:7f:1f:d7:70:67:89:68:d2:c7:95:2e:8c:80:42:9a:f5:2f:
         cb:a4:23:99:86:e6:50:9e:94:e5:ea:11:d6:fd:ef:ec:ba:73:
         f4:0f:67:be:05:22:56:38:22:a7:09:32:bf:44:14:bf:89:43:
         3c:72:dc:24:16:ed:71:32:f0:10:24:df:3f:01:2a:53:9e:09:
         7c:81:ce:c1:07:9a:33:e2:f8:49:98:e9:9f:8f:49:75:36:09:
         d0:73:85:11:f3:5a:44:5a:d2:6b:05:8e:39:29:dc:a2:64:00:
         8a:09:58:6c:1f:aa:21:80:bc:b2:0a:de:ec:f2:ac:93:29:e4:
         5d:6f:46:00:d2:08:ed:b4:9a:3e:69:ad:58:0a:5b:90:a3:f4:
         64:ec:e5:22:73:cf:48:72:bf:5c:b2:42:a1:58:c2:d9:2f:39:
         5d:3d:e0:8c:a8:15:6e:97:a1:34:ab:3d:00:12:0c:23:dc:99:
         8a:8b:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:50:59 2025 by rpki-client