Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42f2c1eb-c59f-3c61-8342-a9848f59f32f.roa
File:                     42f2c1eb-c59f-3c61-8342-a9848f59f32f.roa (raw, json)
Hash identifier:          8p+q/YU+LIZKG9+vcUj8/lDKQC17RNfOTSONKkjjC/w=
Subject key identifier:   15:AB:DD:AE:1C:CD:1E:59:20:05:93:78:71:D9:94:70:5F:1B:67:66
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849DF14CCF542E9A4E7C169D1E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42f2c1eb-c59f-3c61-8342-a9848f59f32f.roa
Signing time:             Fri 16 May 2025 10:41:00 +0000
ROA not before:           Fri 16 May 2025 10:41:00 +0000
ROA not after:            Thu 14 Aug 2025 10:41:00 +0000
asID:                     9009
IP address blocks:        104.252.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:14:cc:f5:42:e9:a4:e7:c1:69:d1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 16 10:41:00 2025 GMT
            Not After : Aug 14 10:41:00 2025 GMT
        Subject: CN=35540a80-ce20-459b-b89d-f6f7f182b92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:89:b2:c4:0e:6b:8d:64:6a:97:0d:7e:8c:d4:
                    d6:a8:a5:c6:08:1b:a8:01:e7:65:37:7b:d8:9b:e9:
                    7e:3c:3f:51:f1:f2:ed:5d:7f:85:da:22:ff:3d:fc:
                    15:2a:c7:f5:f9:a5:b5:fa:0d:f0:f0:42:6f:69:ad:
                    6d:5f:02:e6:93:c5:87:b4:bd:55:d3:c6:e0:68:6b:
                    b2:7c:4f:b0:e9:f3:23:96:5a:62:33:b7:a5:09:db:
                    db:f5:02:69:0b:59:f0:38:d2:c1:28:45:92:f2:c6:
                    61:4f:7a:a0:47:f9:fd:4c:0a:5f:3d:17:c2:65:cd:
                    f6:19:c0:2a:84:3b:d8:34:a3:49:b1:58:f5:9b:1f:
                    82:9b:a0:16:a4:e9:f6:72:b0:ed:87:68:0d:41:2a:
                    05:1a:14:f3:af:58:e9:cb:88:29:bd:b2:30:17:a2:
                    87:35:30:4c:4f:41:19:ba:76:c7:63:7b:ea:7b:be:
                    e5:04:70:bb:9c:cc:d4:ec:cc:6d:f6:84:2a:fc:38:
                    27:ab:01:31:ec:86:e4:34:98:5f:c0:f8:c4:3b:96:
                    12:1a:90:20:ae:b7:c1:00:02:8d:4d:01:a2:dd:12:
                    1a:b4:e7:ff:18:09:a3:93:30:a1:fe:71:e2:a4:bf:
                    cb:73:20:fe:f0:7b:39:5e:92:42:94:fc:75:0f:d4:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AB:DD:AE:1C:CD:1E:59:20:05:93:78:71:D9:94:70:5F:1B:67:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/42f2c1eb-c59f-3c61-8342-a9848f59f32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ce:a0:d0:e0:d0:d6:c5:b4:fe:21:12:0d:b2:12:9b:5a:04:
         1f:cc:09:6d:a6:a0:18:46:be:43:50:c7:b9:63:03:47:f0:17:
         97:55:1c:3d:81:9e:44:c2:b6:fd:a9:7f:3f:1c:ce:15:1a:f4:
         53:c6:2f:92:0c:a6:90:2e:5e:40:35:18:d5:d4:39:f8:db:07:
         da:76:61:db:4b:a2:94:fd:39:e1:53:41:bd:c2:bd:c0:f7:4b:
         75:1d:b9:af:9a:df:56:8d:e6:bc:94:a5:e2:60:8b:97:b9:4c:
         29:e0:1e:85:a9:0c:69:73:17:0e:76:4c:17:09:da:b4:3f:b3:
         f7:a8:a1:f6:0a:27:4e:d7:0f:10:5d:e5:0a:9e:df:38:c9:2e:
         d2:98:dd:35:e1:aa:50:19:55:56:a2:f5:61:6c:87:79:1f:eb:
         89:eb:bb:72:4c:11:ec:1e:fb:25:4c:f8:dd:2c:14:13:bd:ab:
         56:4f:44:ea:2c:43:10:ee:81:66:0b:3a:3d:65:c2:3c:c0:ae:
         fd:d4:34:0a:70:ef:5f:57:cf:c3:05:b2:60:f5:41:25:73:0f:
         82:2e:2d:a4:b5:10:b0:df:03:48:56:29:dc:1f:3d:56:d9:0e:
         a7:b7:46:a1:06:1c:e4:de:03:19:58:60:5f:33:f6:ed:4f:35:
         5c:4c:a0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:02:18 2025 by rpki-client