Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3664d001-6960-34f8-8340-0f9f5f31671d.roa
File:                     3664d001-6960-34f8-8340-0f9f5f31671d.roa (raw, json)
Hash identifier:          qLM8rdY4N7gnaTw+OpeoyuJplS7fze8Fn0spueOyI0A=
Subject key identifier:   80:60:F2:75:B2:8D:DF:DE:C5:5E:CB:93:7B:10:C9:26:26:9A:E4:0A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A1125B19EC2398C4CF7AC3D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3664d001-6960-34f8-8340-0f9f5f31671d.roa
Signing time:             Tue 03 Jun 2025 09:05:27 +0000
ROA not before:           Tue 03 Jun 2025 09:05:27 +0000
ROA not after:            Mon 01 Sep 2025 09:05:27 +0000
asID:                     212238
IP address blocks:        104.253.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:25:b1:9e:c2:39:8c:4c:f7:ac:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  3 09:05:27 2025 GMT
            Not After : Sep  1 09:05:27 2025 GMT
        Subject: CN=3c2e1bdb-ae7a-4c26-94b8-96a9f2292677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:36:24:bf:0f:c0:3a:78:24:2b:01:2c:97:
                    a4:00:41:64:3d:5f:76:b3:a3:46:b5:c8:a2:82:f0:
                    bf:d0:ae:b1:1c:e2:1e:4c:82:fb:f0:5a:e7:4d:a8:
                    57:cc:e7:3f:ad:3b:ad:d8:11:81:0e:ad:a6:ee:3a:
                    1c:79:f5:2e:7e:e9:cd:94:0e:e5:ec:04:d4:8e:3f:
                    cd:be:3c:27:4b:de:b0:32:06:99:62:dc:d4:7b:49:
                    3b:c1:0e:68:09:96:cf:3c:87:69:e5:9b:70:27:d8:
                    ed:9e:d7:c5:ad:ef:5b:ef:2c:e4:3d:ec:1d:8f:71:
                    05:e1:dd:35:8c:17:c7:42:b3:a0:66:3d:07:fb:c8:
                    83:5e:83:c7:42:78:32:82:1f:e0:02:af:84:c8:dd:
                    9d:42:d6:ed:c6:57:43:5c:75:1f:0e:19:19:45:52:
                    94:d8:50:04:74:7e:72:60:14:fd:eb:99:84:5f:45:
                    c6:ad:b8:66:04:6c:88:87:84:3f:90:59:68:ee:78:
                    4d:fc:78:0d:90:6a:d4:ec:aa:d9:03:82:8a:5d:4c:
                    86:48:1d:96:94:f1:fc:56:9a:ac:01:93:3a:41:77:
                    3d:7c:4d:f1:ac:8b:88:89:d1:68:60:24:db:86:fa:
                    04:30:16:ff:09:d3:b2:c8:b1:8a:89:be:78:ae:78:
                    8e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:60:F2:75:B2:8D:DF:DE:C5:5E:CB:93:7B:10:C9:26:26:9A:E4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3664d001-6960-34f8-8340-0f9f5f31671d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:4c:ff:68:4b:5c:f4:b1:dc:a6:03:84:e9:0f:00:c6:17:55:
         8b:a0:e8:4f:d5:20:a9:3b:c7:f2:e6:9a:16:cd:90:01:9a:6c:
         75:17:79:77:cd:fd:7d:ea:23:0a:9e:10:98:20:ec:43:08:4c:
         20:56:96:be:c3:ce:54:1f:94:64:bc:97:bd:2e:c7:7a:a4:e9:
         30:27:9d:bc:40:ab:78:68:83:1f:5f:f2:7f:53:99:6c:d9:7e:
         35:d7:4e:f8:3e:af:a1:ed:5b:8e:cc:de:93:54:88:6a:3a:c3:
         04:40:00:3f:d5:12:d0:1f:ba:13:d6:57:25:2f:98:60:95:7c:
         c0:07:94:9e:a8:f3:d2:2c:17:27:40:d0:46:1b:0d:50:f2:bc:
         0f:be:ec:cf:6f:05:a5:f3:b9:dc:e6:5a:08:5b:0c:4c:64:8e:
         72:e6:43:74:4f:bf:ab:97:7d:a7:13:51:1e:ee:ad:89:05:bf:
         e8:b9:e4:93:cf:02:b6:33:cf:ab:08:3b:3f:0b:a4:e7:fe:a3:
         89:60:7d:87:00:79:ef:82:7a:63:9f:cc:29:13:77:bf:f6:88:
         d3:a1:21:21:80:51:76:ea:f1:6c:27:f0:00:f9:f4:f4:d4:32:
         20:96:2e:63:96:6a:9e:39:65:68:7f:ba:ec:4c:ae:fe:05:91:
         41:bf:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:54:03 2025 by rpki-client