Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cb639e0b-c1a3-3507-84e6-125bb5097244.roa
File:                     cb639e0b-c1a3-3507-84e6-125bb5097244.roa (raw, json)
Hash identifier:          FCjNwjbX9WAcJsT/MyYQEsfZg7f9p17Ej+CtR26f8mU=
Subject key identifier:   09:C0:41:79:D7:6F:2C:35:B3:1A:8D:08:7A:AD:2C:4B:08:BE:0A:EA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858483D1ADC254338A5A98FAD1C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cb639e0b-c1a3-3507-84e6-125bb5097244.roa
Signing time:             Tue 17 Dec 2024 17:25:19 +0000
ROA not before:           Tue 17 Dec 2024 17:25:19 +0000
ROA not after:            Mon 17 Mar 2025 16:25:19 +0000
asID:                     3356
IP address blocks:        104.252.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3d:1a:dc:25:43:38:a5:a9:8f:ad:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 17 17:25:19 2024 GMT
            Not After : Mar 17 16:25:19 2025 GMT
        Subject: CN=3e8d35b4-9ea8-478c-9525-e25bb0cfce7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:61:b9:ff:cd:bd:58:63:ea:c5:fd:1d:c7:29:
                    1e:a3:4c:7f:94:c9:a1:c7:a0:8f:e8:a3:de:d1:60:
                    5e:f4:95:eb:36:9c:03:1a:c6:11:61:a2:e1:5d:0f:
                    16:59:30:0a:d3:d1:69:82:16:d6:12:fe:1d:e2:dd:
                    30:26:67:b7:c5:a2:00:c1:1b:64:db:36:05:3f:40:
                    47:7d:c9:88:77:0a:63:04:79:c0:7e:16:d6:8d:ec:
                    6d:1f:77:74:b0:3a:dc:ef:1a:52:c8:1a:41:eb:eb:
                    41:69:b5:f5:39:ac:c6:5c:6c:42:7f:ce:ae:f0:73:
                    f7:e4:8e:c6:18:7b:9f:bd:fe:5c:01:9f:f8:56:34:
                    62:3e:36:55:1f:30:f6:30:d1:ee:5d:0f:be:78:23:
                    71:95:32:40:1f:c3:77:7b:ed:9d:71:d1:a3:8f:06:
                    d2:77:91:00:e1:b0:a6:9e:06:40:0a:0f:0c:53:ff:
                    16:d6:60:a0:44:c8:76:7f:e8:ec:66:c4:64:6e:59:
                    c8:d8:f5:3a:3f:16:29:79:59:00:cd:75:55:54:97:
                    1e:0e:6b:bf:51:8a:56:4c:63:7e:d0:97:a7:e4:b8:
                    df:7d:3a:93:95:3b:42:d8:cb:9c:f6:9e:d2:a3:17:
                    04:7f:7d:52:b8:4e:1c:af:9e:95:74:e1:9f:a8:fc:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C0:41:79:D7:6F:2C:35:B3:1A:8D:08:7A:AD:2C:4B:08:BE:0A:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cb639e0b-c1a3-3507-84e6-125bb5097244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:78:5a:e0:cd:a7:5f:61:df:38:d4:5e:8a:a5:50:97:27:29:
         bd:b1:51:2b:89:5e:28:3a:f7:31:4b:c4:b9:bb:36:68:11:5d:
         e1:45:fc:39:8c:d6:7d:b6:23:f2:14:e0:61:42:ac:e9:93:44:
         ce:f0:43:09:d7:71:d4:91:36:f5:41:51:eb:36:b6:0d:59:50:
         cf:e2:b3:6b:72:9c:af:de:a8:25:33:23:bf:cd:ec:54:37:9a:
         ce:de:b5:f9:52:54:43:49:df:8e:3b:1b:54:88:50:05:51:76:
         d8:bf:68:ce:ec:6a:73:bd:87:0f:ff:36:fd:e7:d1:5f:d6:87:
         78:d3:8b:82:81:6b:32:a9:4f:56:2f:e7:2a:96:ad:27:ae:cd:
         a5:ed:94:96:1c:d5:d1:e2:cd:ba:a4:58:1f:60:89:f9:09:c3:
         18:da:3e:e2:77:fa:6a:53:ea:d3:0f:5f:17:32:9e:66:91:3e:
         37:da:22:4e:67:b3:3d:f7:56:70:70:31:5e:87:6a:dc:51:d1:
         4f:16:d7:5e:ea:f7:b0:7b:c1:0f:a0:88:ae:0d:70:c9:14:c5:
         82:a7:6e:2a:0f:a0:b2:d3:5e:24:f3:ea:a1:64:44:9d:58:58:
         3b:7d:3f:e7:52:ae:df:d9:fb:f3:1d:a0:56:ab:1a:c9:0b:7a:
         67:b4:e0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:09:17 2025 by rpki-client