Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e7223e08-e9aa-3344-b17c-8f42f0cc533c.roa
File:                     e7223e08-e9aa-3344-b17c-8f42f0cc533c.roa (raw, json)
Hash identifier:          RZBzySABsWvWLESQgXGJfQBv1W3JH+G/AK0+PuXa5wc=
Subject key identifier:   4C:08:57:AB:62:10:2F:F0:D3:E5:B5:05:F4:25:60:9B:5B:B6:A8:1D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A0D6A92D0A977C61767E90560
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e7223e08-e9aa-3344-b17c-8f42f0cc533c.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     212238
IP address blocks:        104.252.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:92:d0:a9:77:c6:17:67:e9:05:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=5e126cf8-4763-41d0-ae2b-d62a0c21da8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a4:d9:b6:a5:2a:7e:b1:f3:e5:ab:09:a1:44:
                    3f:10:d1:c5:9e:aa:f2:35:79:76:32:cb:e7:48:0e:
                    76:34:2c:8d:79:89:d9:74:dd:0f:f6:79:87:35:57:
                    10:25:29:63:f5:08:bf:9c:52:ce:29:22:d7:ac:e7:
                    57:99:dc:11:8e:a2:ed:28:cc:ae:ad:1a:05:d6:0e:
                    eb:08:b5:43:e3:f9:cb:28:2b:92:26:07:c8:cf:4b:
                    ff:16:38:e7:92:3a:80:87:0f:85:a5:ac:3e:37:29:
                    73:fc:af:2f:51:2d:b7:10:bf:d5:ae:73:a9:4a:42:
                    c3:43:b1:1a:5a:e6:57:dc:f7:e2:c8:59:5f:9d:44:
                    37:9f:6e:79:49:85:44:ba:87:e6:29:bf:f3:13:15:
                    4a:e2:ea:14:ae:46:55:22:b9:a9:a1:2b:34:ff:9d:
                    ad:84:e4:0d:77:c2:14:82:85:e7:01:92:ba:52:8e:
                    07:a8:16:4b:7b:20:1d:db:1e:6a:e8:9b:b0:42:96:
                    a8:c1:b8:24:79:4a:fb:3e:81:77:20:a2:b9:b5:8e:
                    56:4f:6b:75:ba:30:3c:a5:b7:5f:3d:33:ee:46:7f:
                    73:57:36:b6:45:6b:9d:b2:af:62:47:ff:b2:99:0b:
                    0e:7a:80:42:3e:7e:5e:b3:9d:23:1a:a9:08:fe:c5:
                    b0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:08:57:AB:62:10:2F:F0:D3:E5:B5:05:F4:25:60:9B:5B:B6:A8:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e7223e08-e9aa-3344-b17c-8f42f0cc533c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:7b:b3:e7:24:36:9b:6d:03:e9:02:a9:72:13:35:71:db:a5:
         24:6a:8d:b5:af:7a:e2:1a:a5:99:bb:7d:7e:b9:8f:34:5d:af:
         1d:53:32:e1:d7:eb:8b:83:21:dd:d0:fc:aa:23:1c:ed:b9:6b:
         49:13:e1:6e:96:dd:90:dd:ab:81:14:7c:8b:50:b4:99:03:87:
         73:7d:17:1f:22:95:96:2d:19:ae:86:74:af:2a:12:81:1a:da:
         79:74:9e:14:04:8c:99:79:8f:9f:48:89:1a:8a:39:ab:dd:6e:
         2e:18:4d:97:1f:29:ee:8e:78:49:f0:bb:f9:6b:45:f0:3d:e1:
         2b:8e:e8:13:33:d9:a3:ee:a2:c4:53:bf:4a:d1:a8:df:e5:4c:
         2e:32:3a:bf:c2:96:37:5d:d8:bd:4f:ab:5e:e5:32:28:ed:8f:
         dd:4e:c4:1a:0d:58:8c:60:90:31:ee:b8:b6:c7:ca:47:b3:85:
         23:75:4f:66:ce:08:18:fd:1d:a4:97:43:2c:94:f7:e9:65:1c:
         00:06:d3:9f:6a:d4:51:c1:65:69:9a:d4:eb:c2:4c:6b:81:3d:
         90:b4:c2:67:b1:0d:1f:e4:27:a3:6e:60:f1:54:da:d4:48:7b:
         53:a0:9d:31:c3:48:4c:d0:b0:f9:ce:7d:ad:65:7b:e2:0f:05:
         90:77:0c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:13:17 2025 by rpki-client