Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4fa02126-fa28-3984-9eef-c6c01547c607.roa
File:                     4fa02126-fa28-3984-9eef-c6c01547c607.roa (raw, json)
Hash identifier:          UYbFV07V64r7I2bOx6oLEMd1yyhowewNra9AnAs1dO0=
Subject key identifier:   B0:44:67:0B:DE:46:47:F8:80:10:65:2D:97:0F:65:16:1B:1A:82:FE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848F1FBC933C013B92E2910B040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4fa02126-fa28-3984-9eef-c6c01547c607.roa
Signing time:             Thu 20 Feb 2025 12:24:01 +0000
ROA not before:           Thu 20 Feb 2025 12:24:01 +0000
ROA not after:            Wed 21 May 2025 11:24:01 +0000
asID:                     18779
IP address blocks:        104.252.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f1:fb:c9:33:c0:13:b9:2e:29:10:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 20 12:24:01 2025 GMT
            Not After : May 21 11:24:01 2025 GMT
        Subject: CN=b8a5d1d8-ecb1-4a41-b132-1f2b57f20b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:37:56:7b:bd:22:2b:8c:3d:77:0a:fe:15:53:
                    8a:a4:db:53:45:ec:45:db:5b:b9:12:89:b6:95:61:
                    ba:66:be:16:d8:4b:a9:f0:08:36:e9:09:9e:c5:be:
                    c6:cf:f1:21:95:d2:90:41:17:27:cb:e5:66:3b:5f:
                    7f:71:0e:12:96:3c:bf:84:50:ae:d7:3f:2d:06:44:
                    fe:da:0c:f9:03:bc:c7:f6:93:7a:16:3a:95:fe:ce:
                    22:90:cc:d9:15:d5:f6:30:9a:ee:87:cf:fd:ef:9b:
                    c0:10:9c:7a:5d:54:71:df:a3:f5:18:ae:b0:9e:c7:
                    ff:c7:40:64:3d:53:c5:de:03:e7:c6:8a:d5:a6:2d:
                    9e:c0:9a:ab:b2:bd:63:d0:7d:cc:19:60:69:30:b1:
                    f4:23:94:83:11:3a:f8:81:b4:96:2a:73:29:d9:06:
                    04:1e:3b:fd:36:9e:68:25:21:71:3f:30:7d:0b:d9:
                    37:8b:5d:f2:83:bc:15:0e:28:7e:34:a3:5f:6e:12:
                    f8:32:39:32:68:86:ab:33:31:f4:e6:c3:b7:38:6e:
                    af:f7:0d:38:ff:76:ae:84:75:89:96:de:60:ec:06:
                    a5:0d:3d:c7:ec:6b:d8:2e:3b:72:52:25:91:42:e5:
                    e5:6f:ba:18:cd:0a:b8:65:ae:d8:6b:73:3d:d8:71:
                    a7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:44:67:0B:DE:46:47:F8:80:10:65:2D:97:0F:65:16:1B:1A:82:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4fa02126-fa28-3984-9eef-c6c01547c607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:76:54:e6:8a:01:05:24:32:3d:c5:ea:43:90:c3:68:bb:fe:
         b6:8c:0a:0e:6b:36:da:ad:a3:92:b6:40:e4:7a:a1:3c:b4:6c:
         2e:05:be:c0:81:f0:ff:c3:8a:45:51:00:cf:38:1f:a6:69:76:
         8f:fe:39:55:12:8b:ce:8c:02:91:b9:17:3c:44:dc:80:69:a6:
         1c:7d:dd:11:e6:cc:4c:1e:85:ca:98:49:d4:65:17:9e:3c:96:
         8e:27:f0:dd:61:29:9b:e5:8b:32:27:28:0c:9e:a0:97:d7:7f:
         a1:5b:c1:3c:1b:bb:72:79:cd:25:21:f0:e7:a3:f9:b2:d9:7b:
         23:c7:b7:d2:a2:89:98:f3:26:eb:41:61:a6:72:e8:27:15:3b:
         76:17:91:24:62:28:be:3f:93:5b:0d:6f:ff:90:9e:51:62:05:
         02:ed:b4:71:36:8e:19:2d:21:67:73:a1:94:ed:8a:84:e0:b9:
         c7:bd:93:47:9b:97:37:ae:df:50:a3:4f:40:93:bc:d3:51:53:
         c9:11:de:fa:c5:87:44:3b:62:c7:9f:c4:34:e8:88:c7:ab:f5:
         1f:a0:65:31:3b:ca:12:fd:27:87:58:aa:b6:00:b6:59:a1:27:
         b2:b5:09:0e:4e:8a:20:de:40:aa:b7:36:9f:ca:f7:50:35:92:
         a8:f2:7e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:09:18 2025 by rpki-client