Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e033dbf6-9728-360d-b9af-17e78e88163d.roa
File:                     e033dbf6-9728-360d-b9af-17e78e88163d.roa (raw, json)
Hash identifier:          FDAq4meN21WczDQ+iz5lMPOuXZd5XKmx8syCSTjwJCw=
Subject key identifier:   7E:74:E4:D7:D8:0F:59:22:36:84:93:18:FD:A4:C3:66:D5:6D:EE:A8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849A7CCBDA80275270988224040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e033dbf6-9728-360d-b9af-17e78e88163d.roa
Signing time:             Sat 26 Apr 2025 15:26:21 +0000
ROA not before:           Sat 26 Apr 2025 15:26:21 +0000
ROA not after:            Fri 25 Jul 2025 15:26:21 +0000
asID:                     54252
IP address blocks:        172.252.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:cc:bd:a8:02:75:27:09:88:22:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 26 15:26:21 2025 GMT
            Not After : Jul 25 15:26:21 2025 GMT
        Subject: CN=1699156c-8ed7-4af5-bb19-6db8d8511d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3c:0b:9b:d0:47:9f:b9:59:4b:2e:92:05:1d:
                    0e:cf:97:9c:c0:06:40:a4:10:0b:cb:33:d0:87:4d:
                    41:69:50:4e:77:4a:7c:3e:d6:21:15:5a:a9:d7:12:
                    a7:e3:e4:85:45:d0:49:cd:16:d8:70:36:7d:1f:3d:
                    a6:2c:18:13:f9:a6:5d:e6:9c:a1:64:f7:1c:ea:fa:
                    94:5b:ab:87:0f:f0:cb:27:14:99:4b:80:c7:6b:11:
                    19:77:00:7e:6b:16:87:bd:9d:f1:0e:75:27:13:1e:
                    54:42:41:ee:91:ef:85:1e:ef:ef:af:03:e3:a3:c5:
                    05:54:4b:72:9f:25:59:64:51:b8:9a:2b:b0:d6:d7:
                    9a:0d:40:a8:50:48:c8:45:10:6f:96:b7:4c:25:62:
                    ca:cf:02:a3:18:4f:3c:ae:3f:67:ee:0f:37:63:49:
                    0a:e9:6b:23:a1:6d:d3:27:5f:e2:e8:11:df:ad:88:
                    e1:ef:f1:ce:d8:c8:9a:0a:45:bc:6e:92:7a:74:d8:
                    36:72:65:53:d2:d1:b5:f5:b4:d2:5e:37:89:7a:8a:
                    fb:d2:d3:18:fd:6c:52:c2:9b:ec:68:de:23:f8:68:
                    d7:d3:30:8c:27:38:97:7e:88:1b:54:14:28:22:30:
                    40:69:5e:6b:ee:89:84:7c:fd:a5:70:b6:b0:4a:82:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:74:E4:D7:D8:0F:59:22:36:84:93:18:FD:A4:C3:66:D5:6D:EE:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e033dbf6-9728-360d-b9af-17e78e88163d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:a2:1e:80:c0:34:bb:07:7b:6d:d2:da:d9:b7:fb:b4:9c:27:
         ea:83:78:92:44:94:6d:50:29:05:13:6c:c3:24:6a:cb:5d:7c:
         2c:f5:8c:76:7e:21:17:1b:7d:37:c0:33:9d:ee:ff:4b:ea:17:
         b3:94:e1:67:24:b0:7a:51:f0:97:6b:24:50:56:99:09:0d:b4:
         14:0f:67:3b:3d:25:d0:e5:00:4d:a7:29:2e:05:71:11:78:6d:
         34:8c:66:9f:7a:2e:57:04:e8:0a:bd:a9:83:c8:b0:bc:22:6e:
         d3:ca:4b:b1:49:19:4d:ca:72:71:be:6c:be:f3:92:e3:bd:10:
         fc:86:8e:3d:ec:11:4f:d5:9f:b5:db:77:a9:30:00:84:15:e3:
         cb:91:54:4c:85:da:ab:05:84:e6:f8:8d:9b:f0:39:e1:04:ca:
         5d:09:61:9a:d1:cf:80:83:cc:d4:bf:dd:1c:f7:b2:ee:cd:aa:
         85:b2:9e:10:08:53:50:85:7a:0f:d5:23:c3:ae:d0:d8:07:fb:
         b9:06:20:8b:e3:df:7e:61:6c:43:8c:11:51:56:e6:c5:8f:97:
         d6:94:5a:e2:b0:55:88:43:d9:2b:23:7b:c0:23:90:7a:1c:17:
         60:10:bb:a5:5b:ab:66:2a:74:5e:73:94:60:03:51:4c:96:1e:
         52:6f:ce:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:02:43 2025 by rpki-client