Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdae9e84-cb98-3d50-8eae-b47498b37816.roa
File:                     cdae9e84-cb98-3d50-8eae-b47498b37816.roa (raw, json)
Hash identifier:          8lKBTp7GqlbTbYNHLUhWi7PMEXTn+Bef0wnRR81snZ4=
Subject key identifier:   05:A8:24:CF:F3:8D:ED:E2:74:EC:FF:22:C9:5B:6D:90:3E:3F:59:BA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858492E13B1FF7ABFCA8650531280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdae9e84-cb98-3d50-8eae-b47498b37816.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     262287
IP address blocks:        104.252.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:b1:ff:7a:bf:ca:86:50:53:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=931e3830-f9d0-40bc-b664-368753913bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:6e:9f:7b:1e:90:6b:a9:29:83:3a:1e:53:
                    60:f0:9d:8d:5c:e4:48:86:7f:09:75:2b:35:a8:dc:
                    6e:33:56:53:26:bf:b1:dd:7d:54:29:65:cf:ed:62:
                    7e:f2:09:1e:2c:17:9c:57:48:05:fa:8c:ec:83:91:
                    6e:90:19:a3:2b:14:94:64:57:8c:3c:02:ca:e7:d9:
                    33:90:0f:67:85:01:99:97:ad:e5:59:96:72:77:ef:
                    f5:e1:4c:e5:65:e9:58:fd:9a:93:2a:94:b7:1d:aa:
                    80:f6:61:70:68:1e:ff:7c:62:18:73:83:dc:48:02:
                    45:c9:81:b7:09:e8:75:91:aa:ef:8e:16:13:6b:5d:
                    ae:c8:45:35:63:12:c5:05:46:99:32:29:7b:f1:b6:
                    9e:65:d4:7c:87:9f:3a:01:86:47:72:a8:70:d7:a4:
                    fd:fe:84:ac:0d:98:2b:76:2d:ae:21:12:78:24:15:
                    a1:16:8a:f0:43:36:cb:21:4f:17:bd:46:7d:12:64:
                    1b:49:65:dd:6b:72:be:b8:ed:0d:01:73:a3:73:3a:
                    48:a0:3c:2b:59:07:12:6b:50:b5:e7:0c:1c:c8:05:
                    3a:ed:58:12:e4:0b:00:e1:dc:09:08:bb:3c:a2:20:
                    28:4e:f2:da:79:fe:67:d5:2a:3b:1c:9b:65:16:1a:
                    24:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A8:24:CF:F3:8D:ED:E2:74:EC:FF:22:C9:5B:6D:90:3E:3F:59:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdae9e84-cb98-3d50-8eae-b47498b37816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:72:5f:ce:68:d0:fa:4c:57:4b:8c:fb:af:4b:c9:9f:50:2f:
         3e:88:2a:bc:9b:94:3c:78:57:39:fa:54:c7:73:ae:a7:55:51:
         51:66:bf:4b:c2:15:dc:f4:d4:e3:86:5e:57:0e:db:89:b4:8e:
         9f:fb:51:07:df:d8:0b:27:45:49:49:54:06:32:86:c1:76:83:
         85:b3:4e:18:17:a7:2f:67:bc:82:f6:60:84:f3:0d:0d:42:95:
         a7:d5:0e:a7:a5:65:1a:09:99:31:4d:df:96:5e:0e:6c:6f:91:
         6d:c6:47:01:c6:f0:bd:04:01:82:44:2a:32:27:f7:92:3b:7f:
         1b:da:bc:a1:60:a9:df:0f:0f:04:c6:4a:37:11:8f:8f:39:20:
         f3:ce:99:96:9c:06:a3:cd:35:d9:47:ca:a8:5a:d7:51:7e:f2:
         10:ba:1e:77:14:31:3c:4c:58:b3:49:d4:e1:ed:1f:b1:d1:bb:
         f6:b6:08:d9:78:49:1c:72:2e:a3:e7:9a:8d:17:fb:cb:64:04:
         02:2d:dc:33:18:d2:32:e5:bd:78:89:0f:f1:c2:15:22:be:31:
         18:97:5b:be:f8:56:ca:ab:47:12:d1:e7:90:f5:6e:2c:88:28:
         04:da:5d:06:7c:f4:f4:eb:f3:dc:cb:e6:03:d7:06:6b:49:36:
         ee:5f:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:58 2025 by rpki-client