Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec1136b6-bd8d-3628-8ec4-da62ce42d6d1.roa
File:                     ec1136b6-bd8d-3628-8ec4-da62ce42d6d1.roa (raw, json)
Hash identifier:          JoB9gDtfY8NcyBE7VQZjFnNbSIMqlV6E3roBKEEbMaw=
Subject key identifier:   69:B3:48:61:6E:5A:EF:6A:AD:67:03:7D:02:9E:F5:EE:CE:23:F1:EE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849A1EF7906D01C1AE5A33A9900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec1136b6-bd8d-3628-8ec4-da62ce42d6d1.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     6939
IP address blocks:        172.252.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:79:06:d0:1c:1a:e5:a3:3a:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=1a27155b-cdda-45fc-8869-26087168ae70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:57:cf:ef:32:10:d7:8d:ff:f5:45:74:d7:37:
                    b1:4f:e8:e4:00:a3:ed:ae:ad:d1:21:0f:d2:66:0a:
                    92:2a:3d:a1:ab:d8:6c:26:a0:28:38:a7:ec:f7:f6:
                    98:a4:ce:6e:d0:ee:4e:8a:b9:61:f7:d7:22:cf:60:
                    16:da:18:84:3b:e9:da:24:6c:63:1b:b4:d2:42:9a:
                    b2:26:cf:4f:00:50:c7:d9:f9:00:49:31:94:ee:46:
                    fc:a7:e6:4a:1b:96:da:11:81:40:e5:1b:a5:66:c2:
                    95:35:f9:9e:57:d7:53:93:99:05:41:58:77:ab:c2:
                    87:23:a0:a6:d7:60:9c:9f:c0:3a:d8:8d:e0:dc:db:
                    ea:b3:62:c0:d9:df:6b:73:11:4b:08:f6:84:96:70:
                    2a:bf:ca:6c:fa:6c:66:84:6a:22:2f:ba:1e:de:d5:
                    e9:ba:d9:22:c3:3d:cf:47:fb:4e:e0:23:23:6e:c8:
                    bd:c9:61:6b:57:09:6d:00:f2:f9:55:39:40:10:e7:
                    e1:c6:31:7b:4e:e3:06:f0:a4:35:ad:8a:12:95:79:
                    21:6e:17:8c:59:17:43:b4:27:eb:58:2e:8b:95:82:
                    a5:46:b4:1f:80:1a:12:6d:6a:cb:a6:b4:d6:30:a2:
                    bc:f7:8f:21:1e:fb:33:c5:6d:43:b1:98:6b:e1:11:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B3:48:61:6E:5A:EF:6A:AD:67:03:7D:02:9E:F5:EE:CE:23:F1:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec1136b6-bd8d-3628-8ec4-da62ce42d6d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:58:22:88:c0:f5:96:74:1e:27:d7:50:1b:61:3a:51:65:60:
         72:16:41:1a:ee:ff:fc:9e:84:c3:47:04:b8:00:3e:3d:f4:41:
         2a:ef:f2:ec:a7:c7:59:c5:15:a2:c2:70:3b:5c:25:cd:89:ce:
         53:01:61:76:f0:35:90:af:af:d8:41:ce:c4:26:aa:1c:90:db:
         01:c6:a9:fe:02:c2:e3:59:fd:c9:be:94:6f:5b:19:94:69:d7:
         ad:e0:55:7b:8a:7e:de:fa:e9:9b:21:1b:f4:a1:32:f4:54:88:
         26:f9:c0:bc:64:4e:63:7f:96:8c:e7:6f:b8:04:9e:0f:73:a2:
         0d:26:29:f3:01:5a:35:1b:ce:1b:c4:7c:25:f8:85:da:de:c5:
         7f:4f:a8:f4:c5:bb:6e:fa:55:d9:ae:38:63:e4:42:4c:fb:32:
         b5:70:7f:a4:77:6c:26:c7:6a:6a:58:b0:a5:ed:66:b3:42:e0:
         48:f6:67:5b:62:e4:37:be:32:d5:f0:22:38:06:8a:f4:d5:95:
         3f:d3:d6:72:56:1d:2d:2a:8f:2e:a9:d9:bf:c4:b7:65:cd:07:
         de:a7:c2:38:bf:46:c1:5e:f8:99:33:d6:9b:c4:6c:5c:2b:56:
         7d:3d:6c:8b:31:57:50:eb:c4:75:6c:c5:50:d8:ad:01:bc:70:
         9a:c2:f9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:52:38 2025 by rpki-client