Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e8e67950-aad1-3d21-920b-646677885828.roa
File:                     e8e67950-aad1-3d21-920b-646677885828.roa (raw, json)
Hash identifier:          xLTjGGOv2jIJGSGewV6TSAsc0MPEEzOHi6VKC5PiYoY=
Subject key identifier:   24:42:74:77:CA:CA:7A:DD:9D:FF:84:11:F7:BA:7E:C8:72:6F:F6:C4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849674EF63EB04920FEC5909D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e8e67950-aad1-3d21-920b-646677885828.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     57043
IP address blocks:        172.252.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:f6:3e:b0:49:20:fe:c5:90:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=51fe0c29-3042-44e4-8323-1b3ae114672c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:17:8e:2e:c7:4f:66:20:a4:68:75:ab:6a:
                    1f:f1:84:a5:78:e3:8b:6f:b7:0f:58:0c:48:7b:af:
                    40:9d:35:02:a7:af:2a:1b:25:c1:06:39:06:bc:c5:
                    b9:74:16:44:c3:d4:e9:4c:22:be:c5:0a:38:89:2f:
                    d0:af:be:81:46:de:23:a2:b5:fb:ee:ad:b9:bb:6a:
                    c7:bc:97:38:52:02:20:a0:db:86:16:4c:f8:86:4b:
                    a1:45:d2:8c:4a:a2:73:8a:a5:48:a4:78:d4:12:50:
                    dc:ce:8f:b9:4e:e5:79:17:a7:b6:cc:da:2f:67:4c:
                    00:aa:b5:bc:41:c9:e8:17:21:f9:2f:b2:f4:f8:83:
                    0f:ea:e1:c9:b4:d7:e5:5a:7d:24:c1:0b:7f:05:aa:
                    e3:4f:76:88:6a:9f:ea:64:77:a2:94:4a:46:1b:b0:
                    f2:bd:18:3f:09:ba:8b:15:45:68:fe:87:2b:5d:a3:
                    bb:fb:ba:73:19:b7:37:54:5a:a7:b7:01:31:47:2f:
                    27:25:76:7b:9b:92:81:eb:d7:b2:50:33:27:77:70:
                    aa:d7:3e:95:67:68:13:d4:e5:dc:58:60:42:5f:db:
                    6b:18:c0:49:43:a3:dd:b3:16:bc:96:e1:52:91:fe:
                    29:c7:80:3b:2b:3a:74:e7:a8:a9:f1:5f:65:8c:91:
                    d6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:42:74:77:CA:CA:7A:DD:9D:FF:84:11:F7:BA:7E:C8:72:6F:F6:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e8e67950-aad1-3d21-920b-646677885828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:68:57:a4:09:45:5d:2a:f3:04:09:1c:fd:9c:ec:62:0a:a2:
         a0:93:4c:f5:e5:25:58:46:a3:8b:b5:7e:1a:c4:a9:59:7a:e9:
         0e:2e:d6:70:c4:66:14:fc:ee:e8:1a:38:67:e3:4e:35:b7:cf:
         df:66:db:d3:59:38:3f:07:63:99:1f:05:3b:24:59:5e:65:65:
         21:d8:29:28:79:af:d4:65:3f:76:0d:d2:c5:73:b1:fe:5e:1a:
         e2:4d:a9:07:7b:80:b3:68:7c:2c:22:1c:b9:e6:28:17:bc:66:
         18:c6:47:58:44:34:46:8b:04:de:f7:75:86:24:27:01:34:99:
         ad:8c:f8:69:5a:f2:cd:9d:c0:cd:06:fd:36:b2:a6:5e:fc:84:
         b0:59:29:29:1e:28:f9:61:70:d2:bc:09:de:78:fb:c4:52:c2:
         81:8f:26:46:d2:6d:e6:16:56:72:68:5e:23:74:a6:04:7c:f1:
         4e:a2:21:eb:19:0a:e0:35:21:3c:5a:4b:42:81:9a:d2:cb:0a:
         56:aa:c5:47:25:e5:df:67:aa:67:99:9b:25:ff:34:35:a5:48:
         7a:ac:d8:3b:2e:92:fd:8a:19:84:e1:b1:da:4e:88:e6:ec:4b:
         92:cd:ce:46:30:c2:55:eb:80:6a:b2:ac:54:da:dd:49:7d:e4:
         1b:56:4f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:37:06 2025 by rpki-client