Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/22829d25-2d32-3239-899b-be1344995b2c.roa
File:                     22829d25-2d32-3239-899b-be1344995b2c.roa (raw, json)
Hash identifier:          +9Tbawz6HRhumq4qWYhoY0MLKT6tl0QFmIIP7G8XbNA=
Subject key identifier:   AC:E3:6A:09:E6:A1:39:D1:8B:31:7B:2E:56:FF:6F:D4:8A:D2:5D:4D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849A4BAD9453E03B695FF4F6980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/22829d25-2d32-3239-899b-be1344995b2c.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     10557
IP address blocks:        104.252.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:d9:45:3e:03:b6:95:ff:4f:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=45a24ba1-7d45-4287-95dd-7af34214b4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e8:c4:48:af:39:1f:8e:03:46:10:f8:78:82:
                    11:ea:b9:03:05:ad:a8:6a:2e:d3:08:ee:99:b0:03:
                    50:60:3d:b7:3d:e7:36:17:c2:aa:23:55:ae:f2:7f:
                    4f:1c:66:32:6d:4f:c7:6a:ec:01:d4:45:02:0a:4f:
                    27:57:34:89:21:b3:a4:40:b6:16:dd:87:b1:e2:0e:
                    11:5a:29:52:fe:56:cb:e6:c1:d6:2b:3e:0c:c6:8a:
                    72:7d:95:77:9a:ed:7d:93:1e:34:92:b8:06:73:19:
                    fa:17:48:98:9e:41:02:7b:94:4e:ae:84:4a:0d:a1:
                    8a:4a:90:cd:28:d5:f0:94:75:14:ab:e1:10:fc:cf:
                    62:a7:81:64:c8:47:79:0b:2f:fb:3e:3c:a6:ad:47:
                    4d:f5:bf:dc:bd:f8:3a:94:bc:3b:47:3f:b3:29:2e:
                    cc:5b:59:37:e3:b0:9e:15:a2:e1:08:ec:e3:9a:e0:
                    86:40:51:89:44:d1:7d:4d:91:88:e5:65:0a:ac:cb:
                    12:82:44:2a:b9:b0:68:fd:9a:69:2e:4e:e7:72:7f:
                    22:c9:9d:07:97:cf:d3:d4:7e:8c:3c:90:84:71:ee:
                    fe:48:ad:2d:4d:31:86:a6:58:b9:64:1a:8c:4b:9c:
                    0c:19:ff:5c:96:c0:03:54:12:74:d6:b4:be:63:6b:
                    72:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E3:6A:09:E6:A1:39:D1:8B:31:7B:2E:56:FF:6F:D4:8A:D2:5D:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/22829d25-2d32-3239-899b-be1344995b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:7c:37:2a:85:5e:eb:b4:61:cc:4d:9b:86:fc:df:d6:fd:aa:
         b2:b9:eb:79:87:6c:06:ac:00:27:36:13:36:9d:78:d2:0c:66:
         ea:40:71:66:cc:cf:b0:dc:ff:1e:9d:75:d9:91:32:18:85:08:
         bf:a5:d3:57:48:85:9a:6b:73:49:49:5a:4d:9f:a4:08:62:bb:
         67:9b:ac:b9:83:64:47:d2:d4:11:0f:dd:2c:9f:fd:e7:8b:b9:
         35:6c:e1:27:52:c1:4a:a4:14:3b:3f:55:05:26:26:c1:ca:1b:
         82:8a:61:0b:41:a9:58:6d:17:e2:30:d5:8e:1a:e7:c5:1a:e7:
         5d:da:8c:ee:00:1e:e3:60:6a:3d:a1:9d:e0:be:10:9a:61:15:
         c5:41:d4:71:a5:d4:72:d3:b3:a6:c4:a1:a3:af:e5:a0:fc:96:
         b3:2d:3f:ee:23:70:d1:ff:d5:46:ee:14:37:d8:68:70:f9:9b:
         9c:96:80:54:54:29:0c:d8:18:bf:5b:cb:31:51:99:43:ad:20:
         5d:cb:eb:63:e2:c7:60:0f:d8:86:fb:6c:37:18:7c:94:5e:35:
         b5:c1:93:18:46:76:8d:1d:97:e0:ac:c5:df:5c:29:01:2f:5e:
         0f:b1:e9:d3:35:5d:7e:bb:b5:16:dc:3f:ab:3b:c7:d6:e2:f6:
         91:ba:83:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:47:17 2025 by rpki-client