Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b410a91-6fe6-3665-b05d-65a5eb1886f0.roa
File:                     2b410a91-6fe6-3665-b05d-65a5eb1886f0.roa (raw, json)
Hash identifier:          NeiDGuGD9gU7a8ZXYhH30ZRAMK5S4MU2SWA4cAPclAs=
Subject key identifier:   D8:3A:0C:8F:F6:8B:F6:69:35:AF:FE:81:FB:F5:C3:C9:42:F7:80:63
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849D164F429DC3A62454272CA80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b410a91-6fe6-3665-b05d-65a5eb1886f0.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     18779
IP address blocks:        104.252.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:f4:29:dc:3a:62:45:42:72:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=db726cea-ba0c-41b4-b150-e05098472461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9e:ec:17:c2:01:d3:68:8c:c4:9c:e7:31:63:
                    7b:95:79:0a:81:a1:57:4b:73:e6:88:58:46:c4:be:
                    57:5a:45:46:62:f8:b5:43:7a:de:d7:bb:3f:d8:7d:
                    2e:70:a2:dd:ce:75:b4:7c:3d:76:4b:50:18:33:c7:
                    ed:ba:81:98:73:87:6d:67:29:ef:93:35:c4:97:0d:
                    85:ef:c4:3c:35:84:a5:04:c0:b8:93:aa:61:ec:63:
                    ec:db:93:23:8b:2f:1b:d1:66:b6:ff:e0:7a:68:4d:
                    87:ad:f1:1a:bd:41:4c:75:c9:1e:46:a8:aa:f3:c5:
                    e0:14:ce:eb:57:7f:09:bb:b2:b4:78:16:f7:d3:25:
                    07:3d:60:0a:f6:17:b6:a9:ba:a0:c6:9e:e8:6d:33:
                    c9:ef:90:ba:93:f5:46:2f:52:38:ab:ea:e4:d6:4a:
                    4e:fc:c7:8d:a5:9c:81:ed:59:a1:d0:f0:e4:04:45:
                    bf:6a:d3:95:f0:85:74:6e:a1:9e:3e:ff:a6:ed:cc:
                    56:6b:a6:b5:50:da:fd:e3:5d:15:0d:47:c3:16:29:
                    f6:81:cd:c5:1c:fd:74:fe:7a:bc:6b:92:51:7b:7a:
                    c3:d0:a4:09:10:1b:a7:15:97:b9:c6:9e:99:dd:3e:
                    3d:ef:09:07:d3:9b:ec:e0:ed:30:e4:b3:e1:e1:eb:
                    df:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3A:0C:8F:F6:8B:F6:69:35:AF:FE:81:FB:F5:C3:C9:42:F7:80:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b410a91-6fe6-3665-b05d-65a5eb1886f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:2d:86:0e:54:f7:49:61:67:7f:23:91:ad:19:2c:b7:04:9c:
         f8:3a:af:57:18:a1:b7:56:90:ea:66:34:81:b0:ec:6e:e1:37:
         33:1b:09:23:8a:19:33:0a:64:53:c2:1d:ce:d2:a1:68:b1:0e:
         7a:8a:c4:20:04:18:17:ce:29:bb:cd:d0:f8:81:aa:bc:aa:55:
         1d:dd:5e:a3:66:47:16:c9:0a:8a:be:01:37:20:bc:85:b2:64:
         0b:d2:db:54:1c:a1:91:8d:7d:4a:c6:1a:ba:6f:7a:83:9a:32:
         15:d9:5c:20:f3:ee:4c:af:34:d3:3d:fc:c9:37:9d:08:0b:9a:
         04:64:04:9e:42:90:0d:93:f6:7d:9b:09:7c:ab:ba:77:3e:cc:
         85:e9:bf:f0:ab:ba:b1:1c:d1:dc:81:27:ed:ac:28:28:9f:b0:
         f9:2c:92:59:ed:58:69:b7:fd:60:e9:a0:2b:e8:43:06:c9:96:
         67:05:56:52:70:ad:33:7d:1f:64:96:99:ff:a4:40:21:b6:d9:
         38:f4:5f:f0:d5:dc:22:04:ba:2f:48:51:e6:05:36:1a:24:63:
         a9:81:58:e8:c2:91:2f:b8:78:3b:3d:32:d7:a9:7b:37:ae:ab:
         10:78:7e:72:d5:99:fd:af:1f:32:c1:b0:2d:64:03:11:3c:d6:
         b7:4e:a0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:50:42 2025 by rpki-client