Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea134cfd-607e-31ad-8a29-960ba4a204a7.roa
File:                     ea134cfd-607e-31ad-8a29-960ba4a204a7.roa (raw, json)
Hash identifier:          ov9isvJ3r1TEykCgeqWO8pm/paw3Lf6D3HMn5VSqCN4=
Subject key identifier:   04:D4:A4:59:5F:97:39:89:E1:F6:A3:DD:AE:8A:BE:55:61:AB:24:86
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858490878DE82293B3820DF0BD260
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea134cfd-607e-31ad-8a29-960ba4a204a7.roa
Signing time:             Fri 28 Feb 2025 13:43:50 +0000
ROA not before:           Fri 28 Feb 2025 13:43:50 +0000
ROA not after:            Thu 29 May 2025 12:43:50 +0000
asID:                     7029
IP address blocks:        104.253.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:78:de:82:29:3b:38:20:df:0b:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 28 13:43:50 2025 GMT
            Not After : May 29 12:43:50 2025 GMT
        Subject: CN=335b7a6c-17c1-40a6-8fda-d1a9b590d9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f2:a3:6c:67:b8:97:95:ef:b6:e7:d6:af:23:
                    63:4d:53:b5:0a:56:7a:ca:f6:e1:67:ec:b0:4f:ba:
                    f5:81:45:07:b6:8f:af:e4:5d:34:db:f6:af:6e:44:
                    18:5e:44:bb:6e:c6:c4:cf:de:f0:0d:db:6f:99:3a:
                    35:44:45:88:cb:db:ae:cb:74:84:01:0d:d8:6d:80:
                    96:d0:9f:be:dd:c6:e7:0c:e6:39:68:3f:a4:cb:a1:
                    8e:82:7c:38:25:e0:ab:f8:c0:64:19:3f:18:21:ce:
                    ec:f3:c3:a5:e1:77:38:c5:53:42:cb:17:6d:ad:67:
                    0b:2a:33:25:c6:69:59:74:1f:a9:de:7a:95:82:be:
                    74:05:b2:11:6a:9a:e2:8a:f2:09:9c:a7:8c:3c:48:
                    ca:aa:6e:f4:c6:40:2e:2f:02:46:1d:fc:f1:63:2f:
                    96:06:18:5c:94:fc:cf:3b:98:83:1e:fb:f1:38:a8:
                    e6:4c:79:0f:35:ef:2c:14:63:d9:99:5f:18:02:8e:
                    27:6b:a0:1c:a3:ac:bd:c5:38:c0:f9:79:84:64:9c:
                    55:ed:eb:e6:83:77:2c:e5:f3:28:c0:a6:03:02:8c:
                    0d:ea:25:ee:fb:13:fe:cf:5f:0d:7b:c4:e5:31:41:
                    7b:cf:20:d4:7d:11:1f:e6:65:f8:be:23:82:b6:19:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D4:A4:59:5F:97:39:89:E1:F6:A3:DD:AE:8A:BE:55:61:AB:24:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea134cfd-607e-31ad-8a29-960ba4a204a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:4b:9d:3c:29:1c:b6:c2:ec:97:73:d5:2e:7c:5d:50:a3:94:
         a3:56:56:75:1a:ef:ca:84:63:ad:f0:24:6d:0b:08:49:5d:76:
         d0:41:3c:44:25:84:76:9d:97:da:db:a4:e2:27:30:0c:84:8a:
         63:cb:61:6f:88:22:ce:ab:dd:84:4d:88:ac:18:06:da:6c:7a:
         05:e9:e3:bd:60:32:63:88:c7:de:03:52:5e:b9:b8:54:61:b7:
         96:4e:9b:63:17:a1:60:16:87:4a:f2:2a:20:80:42:f6:ec:3a:
         13:a9:5e:fc:c7:64:c6:c1:19:32:a4:08:3a:c4:07:e9:9b:9e:
         88:f4:fe:e1:5e:df:ea:17:11:c6:6e:d5:59:14:2d:0f:e4:32:
         81:8b:e7:c4:8c:fc:96:34:17:f2:89:34:a7:90:e7:31:e4:c9:
         30:cb:b5:ab:43:c2:6b:d2:50:35:87:2a:ff:cd:c4:7c:b0:3d:
         ae:3c:e3:02:31:23:59:37:bf:55:f7:72:04:df:83:55:ca:fd:
         0f:2b:51:37:17:ca:db:c2:7b:98:94:99:60:bc:18:4e:ca:73:
         c4:3f:e3:ae:1d:4d:d3:af:33:64:b0:75:6b:4d:72:b9:ef:46:
         c8:ba:53:5c:f5:d1:eb:a8:b9:3d:d4:b7:0b:36:f4:5a:9f:bb:
         77:d4:47:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:54:21 2025 by rpki-client