Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff3c003e-bdd7-3848-ab75-d1a1f683055c.roa
File:                     ff3c003e-bdd7-3848-ab75-d1a1f683055c.roa (raw, json)
Hash identifier:          hL4LvrHsMqQjG36d9Ct2y9HaEd3obcfgSkleusW/K4g=
Subject key identifier:   07:17:94:DC:16:EB:8D:4E:4A:D9:5E:1C:2A:D2:72:5A:F6:B2:16:5F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847EE418FCAA3FA794560CF4680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff3c003e-bdd7-3848-ab75-d1a1f683055c.roa
Signing time:             Tue 19 Nov 2024 11:34:26 +0000
ROA not before:           Tue 19 Nov 2024 11:34:26 +0000
ROA not after:            Mon 17 Feb 2025 11:34:26 +0000
asID:                     12271
IP address blocks:        104.252.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:41:8f:ca:a3:fa:79:45:60:cf:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 19 11:34:26 2024 GMT
            Not After : Feb 17 11:34:26 2025 GMT
        Subject: CN=b4402eb8-3846-43ae-b8e3-c3ad9e882314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bb:22:4a:63:3f:a7:66:57:ef:a6:08:6e:00:
                    6e:83:be:0b:f3:b7:35:9e:7a:45:33:9a:d2:81:67:
                    62:11:b9:ba:4d:fc:de:a7:25:8d:97:1a:f5:11:2f:
                    0f:c2:12:c5:cb:07:a4:a1:ef:3e:2d:36:46:c1:af:
                    2c:5f:c7:71:12:12:61:93:e6:bd:b4:e8:f0:6f:7a:
                    86:fb:84:1b:1e:ea:4e:62:a2:39:6b:27:ac:e3:b6:
                    5f:2f:8c:43:8c:9a:c7:05:2e:88:63:13:d7:da:b5:
                    56:cc:37:ef:13:35:c1:c5:0e:20:54:84:65:1a:e6:
                    81:7f:df:da:07:67:f4:46:00:58:53:42:69:13:ae:
                    d3:fa:3a:26:fa:ff:bc:b0:14:b7:6d:ee:2b:71:1f:
                    b4:43:b9:c5:99:25:be:19:9c:fa:de:ae:a5:d0:7a:
                    1e:4f:0b:a3:08:f0:01:f2:32:90:52:26:80:5d:0c:
                    dc:7e:c5:54:2b:44:05:92:11:24:85:a0:db:3a:23:
                    ec:30:77:93:52:f3:74:51:90:04:78:95:5e:d7:8a:
                    40:dc:0c:19:a6:97:16:37:dd:6a:a2:48:2f:03:67:
                    fe:77:28:8f:a3:3a:34:d6:59:be:a8:bb:79:7b:39:
                    17:55:fe:65:f3:55:04:50:63:3d:6c:e3:4b:02:ff:
                    61:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:17:94:DC:16:EB:8D:4E:4A:D9:5E:1C:2A:D2:72:5A:F6:B2:16:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff3c003e-bdd7-3848-ab75-d1a1f683055c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:21:9d:29:fa:f4:a3:f9:d5:f2:24:5f:34:b1:6d:a9:d0:a2:
         b3:1f:0d:47:f2:aa:14:e7:57:69:6b:a3:a0:33:51:0f:15:c8:
         74:5d:aa:d2:7e:09:bb:22:d1:59:d4:bb:a0:9e:ce:bf:b8:31:
         27:ab:ad:b5:ba:6a:12:55:ad:7d:c9:81:f9:60:d7:c0:ef:f1:
         71:6f:24:f0:69:8b:d4:eb:48:09:67:5f:96:08:50:8d:93:c8:
         a7:f1:b8:18:8e:16:06:1c:b7:50:43:62:a8:d9:47:0e:43:37:
         d9:99:a9:1c:2d:6e:aa:78:d1:ee:b8:47:41:ae:d3:8a:7a:f4:
         45:87:67:02:b6:54:ba:2a:79:bb:66:a8:3d:fa:2c:f2:2f:94:
         64:63:53:b8:e7:ae:ee:e0:69:e2:d4:51:eb:fc:bd:73:46:e9:
         2f:a4:9b:e9:ee:f9:ae:1a:a3:9d:f7:46:b7:e5:08:3b:f0:11:
         e3:3a:56:38:d4:ae:0a:d6:cf:9b:59:da:28:fa:83:b0:ec:a2:
         7f:6b:37:f8:bc:1f:92:ca:1f:85:8b:a7:e0:f7:43:e5:8b:be:
         30:57:f6:a5:48:fd:71:93:56:07:e0:23:00:8a:7d:4f:90:1d:
         73:ce:b4:6f:bf:2c:c1:e7:0d:ef:a0:bc:a2:af:e4:1c:c9:0e:
         4c:b4:04:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:56 2024 by rpki-client on console-ams.rpki-client.org