Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0e9a1619-e0d1-3559-9171-c1d1fcfd0a0e.roa
File:                     0e9a1619-e0d1-3559-9171-c1d1fcfd0a0e.roa (raw, json)
Hash identifier:          psRZAcWHeYVJga9KWoWXs/w+SJ8DGV4HUabkibFAP4g=
Subject key identifier:   B2:21:EF:55:31:97:6F:E4:EE:31:6F:B7:9C:EE:FC:F0:EF:C5:A7:EA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858499F24DED8B41625F634E6A480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0e9a1619-e0d1-3559-9171-c1d1fcfd0a0e.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     5650
IP address blocks:        104.252.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:de:d8:b4:16:25:f6:34:e6:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=72bc6f98-3982-4362-81d0-cb2e24d20a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:e2:c1:ef:9c:bf:3b:6f:c8:86:66:b2:6d:
                    d0:b6:62:b2:91:07:39:f2:88:b1:19:de:15:fe:f7:
                    50:73:90:99:a2:5c:6f:0a:28:02:09:a8:9f:60:3b:
                    9f:02:a0:26:e5:c9:47:5a:d6:81:d2:ce:60:35:b3:
                    5c:b3:c1:15:af:b6:77:71:87:0d:55:81:ec:81:68:
                    61:d6:fb:42:f4:0c:33:00:e0:ac:7a:a5:79:ad:87:
                    96:ff:d7:99:2a:cf:4e:9f:f1:68:cc:07:63:d9:13:
                    41:da:c4:3c:a7:85:16:8a:fd:9e:98:ab:ec:9a:5c:
                    b7:17:c6:48:08:18:83:7e:a6:43:68:76:40:e7:0b:
                    8a:4d:13:da:05:65:cc:1a:8d:2b:23:3f:8c:99:c5:
                    61:ba:53:19:b2:be:71:56:fc:5d:a7:04:dc:6f:99:
                    33:1a:3b:3c:c1:34:f4:4a:a6:f9:39:b4:a6:db:eb:
                    36:5a:bf:f3:de:df:7b:b8:44:a9:fb:0a:e5:9d:d1:
                    2b:7c:d0:31:54:80:50:a6:d5:5a:bf:c4:49:4b:19:
                    0f:09:e8:03:70:be:3d:91:43:e1:f2:c1:32:ce:58:
                    5e:37:11:bf:a7:86:c9:94:8c:f9:a0:8b:5b:74:18:
                    ef:c2:af:e5:35:2d:c9:8d:38:2a:eb:f9:cd:30:52:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:21:EF:55:31:97:6F:E4:EE:31:6F:B7:9C:EE:FC:F0:EF:C5:A7:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0e9a1619-e0d1-3559-9171-c1d1fcfd0a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:87:ac:6d:29:58:22:4f:32:96:44:7a:45:e4:88:fb:cc:cc:
         52:f3:85:a6:4f:fb:98:26:68:44:31:bb:d9:73:f9:46:36:df:
         4d:86:a5:a6:f7:de:e7:63:43:ee:a2:20:66:9e:91:bd:f1:48:
         9e:c3:8e:72:6a:52:ff:9a:34:77:14:dd:c4:d7:73:fe:76:e0:
         7b:24:ba:4f:0b:61:0c:ca:1f:33:bc:69:e4:cc:00:d7:01:c8:
         e0:69:62:11:64:dd:13:90:62:cf:f9:5f:60:83:70:93:b9:89:
         92:8c:ab:72:5a:18:62:1e:36:1e:f7:82:10:43:15:e5:ac:9b:
         20:39:d3:49:3a:e2:f4:c0:a8:51:87:fb:c3:77:82:08:2d:43:
         c2:28:bb:fb:d2:a4:b9:1f:d0:82:1f:6b:95:3e:17:f0:a7:d4:
         99:38:f8:90:ae:c0:c9:13:ce:0f:4c:2b:a0:4f:78:17:31:f2:
         24:6f:7a:61:00:0c:d7:29:14:b7:60:ce:96:b2:e3:cd:81:06:
         31:34:1a:da:01:a0:be:cb:50:33:db:2a:05:bd:db:7d:3a:88:
         6c:ae:85:2c:6a:41:8e:12:b5:0a:41:67:8e:ee:cf:bf:93:50:
         b3:eb:1a:55:07:c2:7d:3e:d4:4f:40:fc:dd:3f:4c:f3:2b:26:
         db:34:a2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:20:47 2025 by rpki-client