Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f49e6ab6-8308-3490-8c09-b36fda5fbe26.roa
File:                     f49e6ab6-8308-3490-8c09-b36fda5fbe26.roa (raw, json)
Hash identifier:          mg/cv+WDqjVU+Ofo6KHptPX7U3ld/BW5xqst6kZ9N6s=
Subject key identifier:   46:15:F4:9B:FF:E8:1D:9B:6F:81:98:96:7F:26:E4:DC:57:1B:5D:99
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848C580EC725EBF67A0AB465DC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f49e6ab6-8308-3490-8c09-b36fda5fbe26.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     10557
IP address blocks:        104.252.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:ec:72:5e:bf:67:a0:ab:46:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=b217d8b9-afdb-4947-8197-c3295f853c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:ac:b4:47:93:82:53:e7:5b:d4:67:f2:e7:
                    25:f2:47:a3:11:19:31:d3:48:f7:ed:18:62:2e:bb:
                    a2:cb:68:b9:31:6a:84:fa:e2:54:71:9a:ff:11:8f:
                    9f:91:22:bc:57:ce:76:11:2f:79:d8:4b:0f:e5:02:
                    26:31:b8:4c:3b:39:98:39:c0:ad:c0:35:00:0e:0d:
                    52:b9:32:2b:9a:cb:c3:70:f6:77:cd:ee:e1:5b:6f:
                    c8:03:13:47:1b:f0:3b:13:eb:62:6f:73:88:ac:d8:
                    d2:6d:61:72:e9:14:6b:93:c0:ec:25:33:31:8c:ab:
                    c1:e3:be:ef:c1:ef:dd:47:4e:e6:45:be:23:52:b8:
                    ef:03:be:4c:00:e1:80:2d:22:ac:5f:52:28:f3:75:
                    b7:02:c2:5c:f0:a0:b2:27:1d:57:24:a3:6e:44:ef:
                    46:23:a5:6e:4a:80:12:73:61:9f:f0:a2:15:01:11:
                    17:f5:b3:08:11:90:81:ac:db:0c:d5:0b:4f:c6:39:
                    9a:1e:f3:f0:19:e7:a6:0f:1e:85:7b:ec:fc:d5:60:
                    8c:43:78:14:1b:1d:b4:ce:fc:46:e0:6c:04:e5:ac:
                    f6:71:92:09:2e:27:f4:c4:d0:c7:4f:6d:cd:63:35:
                    b3:51:89:8b:8a:41:74:8b:ac:d0:a4:9a:b9:9a:cb:
                    4b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:15:F4:9B:FF:E8:1D:9B:6F:81:98:96:7F:26:E4:DC:57:1B:5D:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f49e6ab6-8308-3490-8c09-b36fda5fbe26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:10:28:a8:79:9a:4a:0d:ec:28:bb:65:18:73:53:14:90:92:
         4e:5a:a6:f4:0c:1c:92:45:92:e8:6a:7d:3a:fc:d5:f4:e0:30:
         03:8b:a6:e4:d3:57:5b:f5:f3:84:ea:ce:ce:a9:d4:25:fb:b9:
         bc:f8:e3:37:aa:c7:0d:c6:27:03:32:10:5a:12:32:c9:6f:16:
         d5:35:1c:3b:20:2c:31:20:bd:98:89:73:1e:53:f5:33:78:6d:
         fc:76:e3:9a:bf:94:7d:c0:de:04:82:af:f1:54:45:f9:60:aa:
         fd:fc:ac:72:bc:e3:3a:2c:58:8a:11:fa:9f:e8:80:ad:bb:e5:
         64:dd:f0:0b:f9:ac:a3:78:2b:da:26:b2:3f:68:11:d8:70:d9:
         bd:32:67:fc:50:ef:e2:0d:83:9e:64:10:24:e1:94:b0:db:3a:
         b8:af:54:ec:fd:fc:47:eb:64:9b:15:05:f4:84:f5:62:ab:e3:
         3c:d2:a4:c3:92:f9:29:68:70:0f:e1:d1:77:48:36:93:69:94:
         da:da:32:88:4a:cf:ae:6e:64:de:9f:50:fa:92:3e:37:ee:ad:
         b3:f0:f4:d1:15:d9:83:95:53:fa:39:48:bf:29:1a:95:28:78:
         a9:f5:fe:66:ff:84:0a:84:18:b6:c1:56:3e:f0:93:66:77:33:
         09:9a:73:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:08 2025 by rpki-client