Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a833fa42-656a-3d67-8a5b-c7deef4dbb42.roa
File:                     a833fa42-656a-3d67-8a5b-c7deef4dbb42.roa (raw, json)
Hash identifier:          9DmDJGtuucpp5313tN1SYob566KwrxsdCimeWAfT1gg=
Subject key identifier:   CE:DC:D4:8B:D0:26:58:21:72:E7:22:58:24:82:D6:7A:DF:F5:9D:FF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584949FEB312233A7DA3C06C71F6
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a833fa42-656a-3d67-8a5b-c7deef4dbb42.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     62160
IP address blocks:        104.252.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:b3:12:23:3a:7d:a3:c0:6c:71:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=d3f46494-19ba-4935-95b3-1d0ebf2d9ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:df:19:d7:04:5a:69:f5:45:5e:54:95:13:
                    c8:1b:84:61:07:41:78:9c:d2:e0:3b:10:21:9c:ee:
                    df:e1:99:3e:db:e4:7d:4c:91:78:a8:69:6d:8c:47:
                    91:99:80:a1:25:41:7b:cd:eb:9a:78:10:9a:85:51:
                    32:71:ee:e5:d5:ea:f2:f0:f6:06:1b:ea:8b:51:62:
                    cd:b0:9f:d8:d6:6c:8b:ef:80:28:d6:05:e5:1e:39:
                    d3:14:a7:61:bd:0b:bb:a2:34:03:82:85:eb:f1:6b:
                    12:49:c3:5c:a0:75:bb:2f:ea:5c:0a:13:0c:e6:4c:
                    7d:66:40:2a:8e:5c:04:bd:58:5a:48:a0:b0:3d:c6:
                    9b:fc:c7:11:51:a0:6f:8e:0d:f9:8e:ff:84:6f:f0:
                    2f:de:d8:9d:e7:4a:44:91:7f:7d:26:b8:b5:d2:d1:
                    53:17:da:d5:73:f5:8c:71:17:c5:82:08:16:d5:24:
                    db:2d:21:b4:4d:f6:d0:37:7d:94:6d:f0:0f:cf:0e:
                    ff:ee:bf:8c:58:b2:be:a4:4a:1a:d3:1c:fa:e1:c5:
                    9c:91:6e:f6:4e:fb:2f:36:d8:d9:b3:31:05:1a:1a:
                    9b:58:29:34:04:23:63:68:00:99:bc:98:26:a2:92:
                    5b:0a:93:28:ba:f7:2e:9d:bf:88:75:4a:2e:d5:7d:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DC:D4:8B:D0:26:58:21:72:E7:22:58:24:82:D6:7A:DF:F5:9D:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a833fa42-656a-3d67-8a5b-c7deef4dbb42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:de:74:5f:48:a0:34:e7:a3:fe:f7:dd:bd:fd:5e:34:fb:b6:
         80:1f:ca:cb:0b:05:f9:f6:05:9d:b4:55:e0:e7:d7:e2:f8:73:
         a5:de:ab:ac:fe:b0:2f:19:0b:a9:40:58:3c:e3:30:c4:2c:ee:
         91:d3:51:29:2f:40:75:16:2e:61:3e:9f:1c:38:bf:66:8f:f0:
         5e:5d:96:ed:0a:b3:e5:18:c8:d9:1c:a0:03:3c:63:58:f6:47:
         08:93:ec:1f:eb:ed:e9:f4:6f:d9:4e:61:c6:9c:4f:da:be:42:
         15:69:69:44:31:db:6d:68:b1:83:0f:04:79:1f:4b:1f:cc:f2:
         33:4d:9c:dd:d8:55:14:a0:dd:ce:ec:ff:e2:8d:58:54:bc:f4:
         0a:8f:de:06:6c:a3:95:59:5f:5e:8e:8c:2a:04:da:be:fd:0f:
         e1:54:1a:86:8d:b1:52:5f:97:ae:ef:6b:52:b1:2f:3b:6e:dd:
         a7:dd:ed:8e:19:ae:4a:d1:8d:74:fa:d9:51:6a:32:ad:79:a6:
         d6:e6:d2:0f:0c:e7:81:12:86:70:a5:30:f8:8b:65:bc:6d:6c:
         a9:b8:52:0c:f6:1e:7f:39:27:23:18:5b:3c:bd:ac:43:3d:bc:
         b6:7d:4a:21:de:d9:5f:fc:ef:14:53:8a:40:7f:f7:6b:84:12:
         ba:bb:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:50 2025 by rpki-client