Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91e33bd4-f943-3939-aafc-4eadacf2864e.roa
File:                     91e33bd4-f943-3939-aafc-4eadacf2864e.roa (raw, json)
Hash identifier:          DPOGFNVVVQIP2DfCmtmsEogp4NzrcAhvhRTaPvjOCDQ=
Subject key identifier:   BA:EF:D3:0E:AB:39:3D:4F:56:AD:78:58:4A:F3:90:64:D6:1A:A6:E4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858499C5BCB1B34C250BC804DAB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91e33bd4-f943-3939-aafc-4eadacf2864e.roa
Signing time:             Tue 22 Apr 2025 13:04:53 +0000
ROA not before:           Tue 22 Apr 2025 13:04:53 +0000
ROA not after:            Mon 21 Jul 2025 13:04:53 +0000
asID:                     64267
IP address blocks:        172.252.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:5b:cb:1b:34:c2:50:bc:80:4d:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 22 13:04:53 2025 GMT
            Not After : Jul 21 13:04:53 2025 GMT
        Subject: CN=0fca6fd1-eebf-49bb-9f68-192a9e7337f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:b4:1e:3c:58:ee:22:66:6c:1c:6d:c9:99:
                    9c:5f:a3:8c:92:d5:18:4e:80:ab:ea:09:f1:eb:6f:
                    1c:f4:fc:0e:f0:98:bd:8b:de:5e:36:d3:8a:48:99:
                    de:8d:44:c8:11:b8:23:cf:d3:4b:25:06:3f:19:01:
                    fb:06:43:98:26:26:eb:b6:42:54:dc:72:e1:1e:1a:
                    78:bd:d7:66:a7:32:39:3f:4f:3e:1d:2e:25:de:e9:
                    46:60:ef:d4:ba:19:4f:f6:81:c4:c8:b1:81:ed:c9:
                    fc:f7:1f:72:30:a5:a9:a9:c0:33:06:b1:d4:a3:f5:
                    0c:ae:ac:42:3a:f4:f5:f1:cd:c6:2f:a4:cc:e9:94:
                    eb:06:32:e5:2e:88:ce:8b:75:53:e6:63:d2:99:0f:
                    31:4a:af:93:47:4e:1a:d3:7d:3e:ab:41:d2:5f:b4:
                    8d:c4:ab:be:74:ce:cc:c0:4d:9f:e9:f7:96:57:ca:
                    e0:6c:5c:07:b3:33:6c:b9:d8:37:4b:c4:99:04:bc:
                    28:f6:5b:2a:1a:08:1d:f8:47:74:b8:54:6c:bf:3c:
                    3e:2e:e7:c0:e0:12:f6:37:7e:9f:cd:9e:8a:8f:6e:
                    95:83:16:d9:0b:3f:04:f1:ce:60:65:c9:ad:38:c3:
                    0e:60:39:5f:00:1c:72:05:99:83:28:f6:09:85:27:
                    9c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EF:D3:0E:AB:39:3D:4F:56:AD:78:58:4A:F3:90:64:D6:1A:A6:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/91e33bd4-f943-3939-aafc-4eadacf2864e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:1d:74:dd:c5:9c:27:1f:14:d3:47:bc:f0:28:b3:aa:9b:77:
         bb:94:cd:3b:ec:8f:1a:bf:43:61:19:f3:3c:15:cb:d5:e4:87:
         79:e4:55:e1:1a:8d:91:57:15:2b:e7:e7:66:3b:e9:63:c4:96:
         13:bf:26:c1:af:31:77:80:3c:da:10:17:2a:e1:df:12:ed:85:
         1a:29:9c:fc:a5:dc:c1:53:7a:97:bc:4a:c3:56:01:ba:24:c8:
         4a:f6:94:68:a0:25:00:45:77:f9:1d:8a:6d:84:37:cc:2c:f1:
         d0:3c:f0:fb:d4:dd:41:2b:73:6d:2f:20:32:be:b8:c8:d8:2c:
         13:e3:d3:23:36:7f:1d:10:a3:0d:ac:f6:64:b7:34:23:30:bb:
         1b:bd:3a:4c:6d:61:09:9f:f1:ca:60:dc:22:94:f3:2d:c5:ae:
         bd:b6:97:17:af:e1:e4:b9:19:23:32:c4:98:b1:1d:84:68:48:
         72:1b:14:f1:90:00:11:3f:77:b9:50:c4:69:bd:0f:9b:97:3a:
         c8:91:ab:cf:fb:be:de:0a:c4:74:2b:46:e8:5e:c4:ef:34:7b:
         f4:1c:a7:22:09:b5:8d:65:6a:85:ed:56:07:ad:60:a1:bf:52:
         6d:32:60:30:1d:09:2c:87:f6:a3:08:20:05:84:63:1d:cb:41:
         ce:ad:aa:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:20:36 2025 by rpki-client