Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88057f47-efa0-3ac3-9f46-21ca630cefb4.roa
File:                     88057f47-efa0-3ac3-9f46-21ca630cefb4.roa (raw, json)
Hash identifier:          7VKAQM7P10j0R144VVFYEzhT2bMtdD6ZVRmewCtV1t4=
Subject key identifier:   53:0E:8D:18:AD:77:3F:58:DF:F8:10:22:AD:2C:1A:09:C2:BD:EE:02
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849D164F6DC79D65BA0BEED5480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88057f47-efa0-3ac3-9f46-21ca630cefb4.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     18779
IP address blocks:        104.252.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:f6:dc:79:d6:5b:a0:be:ed:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=c8eb8bfb-1b6f-4286-a7b8-4c958bc35bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9f:28:22:55:e5:b6:c2:38:ca:0a:a6:89:c7:
                    a8:f0:e3:b5:41:a0:b4:b2:c0:d9:dc:dc:a1:41:27:
                    de:4b:57:81:21:63:c0:b9:95:97:db:cb:77:4e:1a:
                    d6:a1:d8:aa:39:bb:5a:b7:65:bb:49:f6:93:fc:e3:
                    1c:f5:18:da:9c:b0:2d:cd:61:30:7b:a7:e3:37:eb:
                    e9:e9:de:e8:c4:52:d5:c3:03:96:01:e5:4e:16:b1:
                    e1:4d:09:f7:16:06:89:1d:e7:b3:9a:6b:60:cb:2e:
                    ef:50:3a:4e:0a:97:b8:51:df:f3:fd:4b:c3:a7:b6:
                    d9:88:03:ca:29:f3:4f:36:fe:11:ee:b1:7a:0b:e7:
                    c1:e3:63:e7:9e:fc:a7:24:e3:2c:1d:89:ec:61:59:
                    40:ea:bb:d0:0b:f0:2a:a6:79:ee:24:77:24:68:d1:
                    25:9a:70:01:11:f7:32:5c:33:2a:ff:f8:ca:6c:43:
                    3d:6a:50:74:d4:87:89:8c:96:16:6b:7d:9e:b5:e5:
                    11:3c:ff:ee:3c:de:bf:c0:71:5e:cd:58:c0:e9:bf:
                    a6:a8:30:cc:57:61:6a:56:d5:85:7d:05:43:4d:02:
                    43:0b:97:0a:03:cc:10:91:f6:2c:43:d1:b5:71:8e:
                    e6:f4:26:16:f2:ea:2a:ac:cd:55:70:49:0c:18:5b:
                    96:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0E:8D:18:AD:77:3F:58:DF:F8:10:22:AD:2C:1A:09:C2:BD:EE:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88057f47-efa0-3ac3-9f46-21ca630cefb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:86:73:ee:9b:e9:aa:7b:7e:b6:cc:bc:29:b5:20:a4:38:56:
         10:ca:2f:a3:bd:07:cc:9a:7a:1e:57:10:1f:7d:18:88:6c:7e:
         06:f2:4f:af:c6:91:06:a2:2d:65:07:2a:2d:3a:fd:cd:91:de:
         58:bd:d4:cc:67:9b:4d:aa:08:41:5c:e2:63:1a:c7:52:62:8c:
         08:c7:82:d7:3a:02:a8:e0:40:1a:2c:35:0c:4f:71:c8:98:d8:
         6d:52:1b:c9:cd:0d:41:20:fb:8c:ad:3e:13:8d:fb:33:41:da:
         4c:c4:f6:96:f2:5e:d5:e2:99:2c:db:75:da:6c:4a:d7:fb:2c:
         94:43:f1:89:d7:48:08:2b:5d:0a:95:a4:c3:41:c2:e1:a3:c3:
         f4:82:dc:9c:98:99:6d:d0:53:cb:79:f8:57:3c:70:34:44:aa:
         91:2e:35:62:da:4f:e8:87:ec:bf:b4:37:4a:29:90:a3:cc:9c:
         52:da:b2:bd:0a:f9:ca:e4:75:75:5d:d6:2a:e8:2a:7c:d8:6d:
         e5:55:7f:7d:74:a1:55:40:d0:ad:a1:3d:ce:62:08:74:dc:8c:
         25:57:c1:26:82:de:8d:64:bd:73:eb:54:e7:29:10:e8:7c:fe:
         06:2f:eb:61:f0:7a:4f:b2:80:76:cb:c8:f0:c9:3c:2c:65:63:
         cf:70:61:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:52:50 2025 by rpki-client